---
title: "List the grants of an account member"
method: GET
path: "/accounts/{account}/members/{member}/grants"
tags: ["Account"]
---

# List the grants of an account member

`GET /accounts/{account}/members/{member}/grants`

## Request

- Base URL: `https://api.factuarea.com/v1`
- URL: `https://api.factuarea.com/v1/accounts/{account}/members/{member}/grants`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

List the per-tax-ID grants of one member.
- The list is complete: `has_more` is always `false` and `next_cursor` is `null`.
- Only grants on tax IDs your credential reads are published; an `owner` or `admin` returns an empty list.
- 404 `member_not_found` if unknown or of another account. Requires the `members:read` scope, which `*` does not cover: the API key must list it explicitly.

## Path parameters

- `account` string, uuid, required
- `member` string, uuid, required

## Headers

- `Factuarea-Version` string, date

## Response `200`

`AccountMemberGrantListV1Resource`

- object: The grants of one account member with the canonical list envelope (`{ data, has_more, next_cursor }`). The collection is complete — bounded by the tax IDs of the account — so `has_more` is always `false` and `next_cursor` always `null`.
  - `data` object[], required: Grants on the tax IDs your credential reads.
    - `object` 'account_member_grant', required: Always `account_member_grant`.
    - `company_id` string, uuid, required: Opaque identifier (UUID v7) of the tax ID of the account the grant applies to.
    - `level` 'view' | 'operate', required: Access level on that tax ID: `view` is read-only, `operate` can also write.
  - `has_more` boolean, required: Always `false`: the collection is complete.
  - `next_cursor` string, nullable, required: Always `null`: the collection is complete.

## Other responses

- `400`: `parameter_unknown` with `subcode` `retired_active_profile_header`: the retired `X-Active-Profile` header was sent; the company goes in the path. `parameter_invalid_format` on `Factuarea-Version`: the header is not a `YYYY-MM-DD` date. `unsupported_api_version`: the `Factuarea-Version` date is not a supported version.
- `401`: Missing or invalid API key.
- `403`: The request is authenticated but not allowed: the API key lacks the required scope (`insufficient_scope`), the plan does not include the public API or this feature (`addon_not_active`, `feature_not_available_in_plan`), or the module is not available with a test key (`module_not_available_in_sandbox`).
- `404`: The requested resource does not exist or belongs to another company. `account_not_found`: the account in the path does not exist or is not the account of the API key.
- `429`: Rate limit exceeded. Retry after the duration in `Retry-After`.
- `500`: Unexpected server error.

---

[API](https://skmtc.dev/factuarea/apis/factuarea-public-api.md) · [All operations](https://skmtc.dev/factuarea/apis/factuarea-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/factuarea/apis/factuarea-public-api/revisions/718e77934422?raw)