---
title: "GET /v1/courses/{courseId}/courseWork/{itemId}/addOnAttachments/{attachmentId}/studentSubmissions"
method: GET
path: "/v1/courses/{courseId}/courseWork/{itemId}/addOnAttachments/{attachmentId}/studentSubmissions"
tags: ["courses"]
---

# GET /v1/courses/{courseId}/courseWork/{itemId}/addOnAttachments/{attachmentId}/studentSubmissions

`GET /v1/courses/{courseId}/courseWork/{itemId}/addOnAttachments/{attachmentId}/studentSubmissions`

## Request

- Base URL: `https://classroom.googleapis.com`
- URL: `https://classroom.googleapis.com/v1/courses/{courseId}/courseWork/{itemId}/addOnAttachments/{attachmentId}/studentSubmissions`
- Auth: one of:
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/classroom.addons.student`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/classroom.addons.student`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/classroom.addons.teacher`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/classroom.addons.teacher`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/classroom.coursework.me`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/classroom.coursework.me`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/classroom.coursework.me.readonly`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/classroom.coursework.me.readonly`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/classroom.coursework.students`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/classroom.coursework.students`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/classroom.coursework.students.readonly`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/classroom.coursework.students.readonly`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/classroom.student-submissions.me.readonly`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/classroom.student-submissions.me.readonly`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/classroom.student-submissions.students.readonly`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/classroom.student-submissions.students.readonly`

Returns a list of student submissions that the requester is permitted to view. This method returns the following error codes: * `PERMISSION_DENIED` for access errors. * `INVALID_ARGUMENT` if the request is malformed. * `NOT_FOUND` if one of the identified resources does not exist.

## Path parameters

- `courseId` string, required
- `itemId` string, required
- `attachmentId` string, required

## Query parameters

- `pageSize` integer
- `pageToken` string

## Response `200`

Successful response

- ListAddOnAttachmentStudentSubmissionsResponse: Response when listing student submissions for an add-on attachment.
  - `addOnAttachmentStudentSubmissions` AddOnAttachmentStudentSubmission[]: Add-on attachment student submissions that match the request.
    - `courseWorkSubmissionId` string: Output only. Identifier of the course work submission under which this attachment submission was made.
    - `id` string: Output only. Classroom-assigned identifier for this student submission. This is unique among submissions for the relevant course work and add-on attachment combination.
    - `pointsEarned` number, double: Student grade on this attachment. If unset, no grade was set.
    - `postSubmissionState` 'SUBMISSION_STATE_UNSPECIFIED' | 'NEW' | 'CREATED' | 'TURNED_IN' | 'RETURNED' | 'RECLAIMED_BY_STUDENT': Submission state of add-on attachment's parent post (i.e. assignment).
    - `userId` string: Identifier for the student that owns this submission. Requires the user to be a teacher in the course and have permission to read student submissions. See [`courseWork.studentSubmissions.get`](/workspace/classroom/reference/rest/v1/courses.courseWork.studentSubmissions/get#authorization-scopes) for the list of acceptable OAuth scopes for this field. Read-only.
  - `nextPageToken` string: A token, which can be sent as `pageToken` to retrieve the next page. If this field is omitted, there are no subsequent pages.

## Changes

- **2026-11-02** `d9e82ce809f1`: 4 info
  - the security scope `https://www.googleapis.com/auth/classroom.addons.student` was added to the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/classroom.addons.student` was added to the endpoint's security scheme `Oauth2c`
  - the security scope `https://www.googleapis.com/auth/classroom.student-submissions.students.readonly` was removed from the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/classroom.student-submissions.students.readonly` was removed from the endpoint's security scheme `Oauth2c`
- **2026-10-20** `8575901d0ec9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/google/apis/classroom/changes/v1/courses/:courseId/courseWork/:itemId/addOnAttachments/:attachmentId/studentSubmissions/get.md)

---

[API](https://skmtc.dev/google/apis/classroom.md) - [All operations](https://skmtc.dev/google/apis/classroom/llms.txt) - [OpenAPI document](https://skmtc.dev/google/apis/classroom/revisions/d9e82ce809f1?raw)