---
title: "Get valid permissions for a user within an institution"
method: POST
path: "/External/GetUserPermissions"
tags: ["External"]
---

# Get valid permissions for a user within an institution

`POST /External/GetUserPermissions`

## Headers

- `X-Version` string

## Request body

- GetUserPermissionsRequest
  - `userId` integer, required — User identifier
  - `institutionId` integer, required — Institution identifier

## Response `200`

List of permissions assigned to the user

- GetUserPermissionsResponse
  - `userId` integer
  - `institutionId` integer
  - `permissions` UserPermission[], nullable
    - `permissionId` integer
    - `name` string, nullable

## Other responses

- `400` — If UserId or InstitutionId is invalid
- `401` — If unauthorized

---

[API](https://skmtc.dev/eon-xr/apis/eonxr-api.md) · [All operations](https://skmtc.dev/eon-xr/apis/eonxr-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/eon-xr/eonxr-api/revisions/538c75161c64/schema)
