---
title: "Get one Group"
method: GET
path: "/organizations/{orgId}/environments/{envId}/groups/{hrid}"
tags: ["Groups"]
---

# Get one Group

`GET /organizations/{orgId}/environments/{envId}/groups/{hrid}`

## Request

- Base URL: `https://eu.cloudgate.gravitee.io/apim/automation`
- URL: `https://eu.cloudgate.gravitee.io/apim/automation/organizations/{orgId}/environments/{envId}/groups/{hrid}`
- Auth: one of:
  - HTTP bearer
  - HTTP basic
  - HTTP bearer

Get a Group using HRID

## Path parameters

- `orgId` string, required
- `envId` string, required
- `hrid` string, required

## Query parameters

- `hridContainsUUID` boolean

## Response `200`

Group successfully retrieved

- GroupState: Base status properties common to all resources.
  - `hrid` string, required: A unique human readable id identifying this resource
  - `name` string, required: Group's name.
  - `members` GroupMember[]: Members of this group with their IDP source and role assignments. Members that do not already exist in the IDP will be ignored.
    - `source` string, required: The identity provider source of the member.
    - `sourceId` string, required: The member's identifier within the identity provider.
    - `roles` object: Map of scopes to role name defining what the member can do.
  - `defaultMemberRoles` GroupDefaultMemberRoles: Default role, per scope, given to a member who joins the group, including members mapped from an identity provider. When omitted, the group's default roles on the platform are left untouched. When declared, it is the whole set: a scope left out loses its default role, and `{}` clears all three. Responses carry the group's stored default roles, `{}` when it has none. `PRIMARY_OWNER` is refused; an unknown role name is reported as a warning and that scope is left without a default role.
    - `api` string: Default role on APIs.
    - `application` string: Default role on applications.
    - `apiProduct` string: Default role on API products.
  - `notifyMembers` boolean: If true, members will be notified when the group is synced with APIM.
  - `id` string: Resource UUID.
  - `environmentId` string: The environment ID.
  - `organizationId` string: The organization ID.
  - `errors` Errors: When a resource has been created regardless of errors, this field is used to persist the error message encountered during validation
    - `severe` string[]: Severe errors do not pass validation and will block creation/update/delete hence, this field should always be populated during the validation phase and is very unlikely to be persisted client side.
    - `warning` string[]: Warning errors do not block object creation/update/delete, most of the time because the value is ignored or defaulted.
  - `memberCount` integer: Number of members in the group.

## Other responses

- `401`: Unauthenticated
- `403`: Unauthorized
- `404`: Resource not found
- `default`: Default error

## Changes

- **2026-11-03** `460368511dae`: 1 info
  - the `allOf[#/components/schemas/GroupSpec]/hrid` response's property pattern was changed from `^[a-zA-Z0-9][a-zA-Z0-9_-]+[a-zA-Z0-9]$` to `^[a-zA-Z0-9][a-zA-Z0-9_.-]+[a-zA-Z0-9]$` for the status `200`
- **2026-10-12** `2ec1da1d109f`: 3 info
  - added the optional property `allOf[#/components/schemas/GroupSpec]/defaultMemberRoles/api` to the response with the `200` status
  - added the optional property `allOf[#/components/schemas/GroupSpec]/defaultMemberRoles/apiProduct` to the response with the `200` status
  - added the optional property `allOf[#/components/schemas/GroupSpec]/defaultMemberRoles/application` to the response with the `200` status
- **2026-10-12** `75fdacf207c0`: 1 info
  - added the optional property `allOf[#/components/schemas/GroupSpec]/defaultMemberRoles` to the response with the `200` status
- **2026-10-07** `ecefec7d65f9`: 1 info
  - the `allOf[#/components/schemas/GroupSpec]/hrid` response's property pattern was changed from `^[a-zA-Z0-9][a-zA-Z0-9_.-]+[a-zA-Z0-9]$` to `^[a-zA-Z0-9][a-zA-Z0-9_-]+[a-zA-Z0-9]$` for the status `200`
- **2026-10-07** `eb875d036ac9`: 1 info
  - the `allOf[#/components/schemas/GroupSpec]/hrid` response's property pattern was changed from `^[a-zA-Z0-9][a-zA-Z0-9_-]+[a-zA-Z0-9]$` to `^[a-zA-Z0-9][a-zA-Z0-9_.-]+[a-zA-Z0-9]$` for the status `200`

[Operation history](https://skmtc.dev/gravitee-io/apis/gravitee-io-automation-api/changes/organizations/:orgId/environments/:envId/groups/:hrid/get.md)

---

[API](https://skmtc.dev/gravitee-io/apis/gravitee-io-automation-api.md) - [All operations](https://skmtc.dev/gravitee-io/apis/gravitee-io-automation-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gravitee-io/apis/gravitee-io-automation-api/revisions/460368511dae?raw)