---
title: "Explain current user permissions"
method: GET
path: "/api/v1/auth/explain"
tags: ["auth"]
---

# Explain current user permissions

`GET /api/v1/auth/explain`

Returns the RBAC permissions breakdown for the currently authenticated
user, including role name, admin status, allowed actions, and any
policy warnings.

## Response `200`

Permission explanation

- NATSEnvelope — Standard NATS proxy response envelope. On success, `result` contains the response data. On error, `error` contains a message string.
  - `result` unknown
  - `error` string — Error message (present only on failure)

## Other responses

- `502` — NATS communication error — farmer unreachable or returned an error

## Changes

- **2026-03-21** `011f9b67b17a` — 1 breaking, 2 info
  - the response's body type/format changed from ``/`` to `object`/`` for status `200`
  - added the optional property `error` to the response with the `200` status
  - added the optional property `result` to the response with the `200` status
- **2026-03-15** `1aab0676c2b4` — 1 breaking, 2 warning
  - the response's body type/format changed from `object`/`` to ``/`` for status `200`
  - removed the optional property `error` from the response with the `200` status
  - removed the optional property `result` from the response with the `200` status
- **2026-03-13** `26871a2f667f` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/gogrlx/apis/grlx-cli-api/changes/api/v1/auth/explain/get.md)

---

[API](https://skmtc.dev/gogrlx/apis/grlx-cli-api.md) · [All operations](https://skmtc.dev/gogrlx/apis/grlx-cli-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gogrlx/grlx-cli-api/revisions/f88a30dcb10f/schema)