---
title: "Get the Access Control List for a Worker Group, Outpost Group, or Edge Fleet"
method: GET
path: "/products/{product}/groups/{id}/acl"
tags: ["groups"]
---

# Get the Access Control List for a Worker Group, Outpost Group, or Edge Fleet

`GET /products/{product}/groups/{id}/acl`

Get the Access Control List (ACL) for the specified Worker Group, Outpost Group, or Edge Fleet.

## Path parameters

- `product` 'stream' | 'edge' | 'outpost', required
- `id` string, required

## Query parameters

- `type` 'groups' | 'datasets' | 'dataset-providers' | 'projects' | 'dashboards' | 'macros' | 'notebooks' | 'notebook-templates' | 'apps'

## Response `200`

The requested UserAccessControlList object in a single-item list.

- CountedUserAccessControlList
  - `count` integer, required — number of items present in the items array
  - `items` UserAccessControlList[], required — List of items in this response.
    - `perms` ResourcePolicy[], required
      - `gid` string, required — Unique identifier for the group that owns the resource.
      - `id` string — Unique identifier for the resource. Omitted for resource type <code>groups</code>.
      - `policy` string, required — String that defines the access control policy for the resource.
      - `type` 'groups' | 'datasets' | 'dataset-providers' | 'projects' | 'dashboards' | 'macros' | 'notebooks' | 'notebook-templates' | 'apps', required
    - `user` string, required

## Other responses

- `401` — Authentication failed (missing or invalid credentials or Bearer token).
- `500` — Unexpected server error.

## Changes

- **2026-07-21** `e9bef570d106` — 7 info
  - api operation id `getConfigGroupAclByProductAndId` removed and replaced with `getProductsGroupsAclByProductAndId`
  - added the media type `application/json` for the response with the status `401`
  - added the optional property `details` to the response with the `500` status
  - the response property `count` became required for the status `200`
  - …3 more
- **2026-06-17** `04dbafa36994` — 1 warning, 1 info
  - added the new `apps` enum value to the `items/items/perms/items/type` response property for the response status `200`
  - added the new enum value `apps` to the `query` request parameter `type`
- **2026-05-14** `484cda0ad459` — 1 warning, 1 info
  - added the new `notebook-templates` enum value to the `items/items/perms/items/type` response property for the response status `200`
  - added the new enum value `notebook-templates` to the `query` request parameter `type`
- **2026-01-24** `84748faee3ef` — 1 info
  - added the new enum value `outpost` to the `path` request parameter `product`
  - …this revision’s changelog is incomplete
- **2026-01-19** `62472462b0c0` — 1 breaking
  - removed the enum value `outpost` from the `path` request parameter `product`
  - …this revision’s changelog is incomplete

[Full history](https://skmtc.dev/criblio/apis/cribl-api-reference/changes/products/:product/groups/:id/acl/get.md)

---

[API](https://skmtc.dev/criblio/apis/cribl-api-reference.md) · [All operations](https://skmtc.dev/criblio/apis/cribl-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/criblio/cribl-api-reference/revisions/56cb25079271/schema)