---
title: "Retrieval of an account owners (AISP)"
method: GET
path: "/accounts/{accountResourceId}/owners"
tags: ["AISP"]
---

# Retrieval of an account owners (AISP)

`GET /accounts/{accountResourceId}/owners`

## Request

- Base URL: `https://www.10207.oba-bad-me-live-api.banquepopulaire.fr/stet/psd2/v1.6.2`
- URL: `https://www.10207.oba-bad-me-live-api.banquepopulaire.fr/stet/psd2/v1.6.2/accounts/{accountResourceId}/owners`
- Auth: OAuth 2
  - Authorization code: `/stet/psd2/oauth/authorize`
  - Token URL: `/stet/psd2/oauth/token` scopes: `aisp`

### Description
This call returns the owners identities for a given PSU account that is specified by the AISP through an account resource identification.
This call cannot be used when the account is owned by a legal entity where the identity of this entity is directly available in the account structure (field [company]).
### Prerequisites
- The TPP was registered by the Registration Authority for the AISP role
- The TPP and the PSU have a contract that was enrolled by the ASPSP
  - At this step, the ASPSP has delivered an OAUTH2 "Authorization Code" or "Resource Owner Password" access token to the TPP (cf. § 3.4.2).
- The TPP and the ASPSP have successfully processed a mutual check and authentication
- The TPP has presented its OAUTH2 "Authorization Code" or "Resource Owner Password" access token which allows the ASPSP to identify the relevant PSU and retrieve the linked PSU context (cf. § 3.4.2) is any.
- The ASPSP takes into account the access token that establishes the link between the PSU and the AISP.
- The TPP has previously retrieved the list of available accounts for the PSU
### Business flow
The AISP requests the ASPSP on one of the PSU’s accounts.
The ASPSP answers by the identities of the account owners.

## Path parameters

- `accountResourceId` string, required

## Query parameters

- `workspace` string

## Headers

- `Authorization` string, required
- `PSU-IP-Address` string
- `PSU-IP-Port` string
- `PSU-HTTP-Method` string
- `PSU-Date` string
- `PSU-GEO-Location` string
- `PSU-User-Agent` string
- `PSU-Referer` string
- `PSU-Accept` string
- `PSU-Accept-Charset` string
- `PSU-Accept-Encoding` string
- `PSU-Accept-Language` string
- `PSU-Device-ID` string
- `Digest` string
- `Signature` string, required
- `X-Request-ID` string, required

## Response `200`

Account owners identities response

- HalOwners: HYPERMEDIA structure used for returning the identities of the account owners. These owners are either real persons or a company. - in the first case, the [identities] block must be used - in the second cas, the [company] property specifies the identity of the company owning the account.
  - `company` GenericIdentification: ISO20022: Unique identification of an account, a person or an organisation, as assigned by an issuer. API: The ASPSP will document which account reference type it will support.
    - `identification` string, required: API: Identifier
    - `schemeName` string, required: Name of the identification scheme. Possible values for the scheme name, partially based on ISO20022 external code list, are the following: | Code | Name | Description | | ---- | ---- | ----------- | | BANK | BankPartyIdentification | Unique and unambiguous assignment made by a specific bank or similar financial institution to identify a relationship as defined between the bank and its client. | | BBAN | BBANIdentifier | Basic Bank Account Number (BBAN) - identifier used nationally by financial institutions, ie, in individual countries, generally as part of a National Account Numbering Scheme(s), to uniquely identify the account of a customer. | | COID | CountryIdentificationCode) : Country authority given organisation identification (e.g., corporate registration number) | | SREN | SIREN | The SIREN number is a 9 digit code assigned by INSEE, the French National Institute for Statistics and Economic Studies, to identify an organisation in France. | | SRET | SIRET | The SIRET number is a 14 digit code assigned by INSEE, the French National Institute for Statistics and Economic Studies, to identify an organisation unit in France. It consists of the SIREN number, followed by a five digit classification number, to identify the local geographical unit of that entity. | | NIDN | NationalIdentityNumber | Number assigned by an authority to identify the national identity number of a person. | Other values are also permitted, for instance: | Code | Name | Description | | ---- | ---- | ----------- | | OAUT | OAUTH2 | OAUTH2 access token that is owned by the PISP being also an AISP and that can be used in order to identify the PSU | | CPAN | CardPan | Card PAN | | MPAN | MaskedPan | Card PAN where some digits were replaced for security reason | | TPAN | TokenizedPan | Token which was provided by a Token Service Provider (TSP) in order to obfuscate a real card PAN. The TSP must be identified in the issuer field | | TBAN | TokenizedIBAN | Token which was provided by a Token Service Provider (TSP) in order to obfuscate an IBAN. The TSP must be identified in the issuer field | Each implementation of the STET PSD2 API must specify in its own documentation which schemes can actually been used
    - `issuer` string: ISO20022: Entity that assigns the identification. this could a country code or any organisation name or identifier that can be recognized by both parties
  - `identities` Identity[]: identity of the account owners.
    - `fullName` string, required: Last name and first name
    - `namePrefix` 'DOCT' | 'MADM' | 'MISS' | 'MIST': Specifies the terms used to formally address a person. This field accepts the following code values | Code | Description | | ---- | ---------- | | DOCT | Doctor | | MADM | Madam | | MISS | Miss | | MIST | Mister |
    - `firstName` string: First name
    - `lastName` string: Last name
  - `_links` OwnersLinks, required: links that can be used for further navigation when browsing balances Information at one account level | Link | Description | | ---- | ----------- | | self | link to the owners of a given account | | parent-list | link to the list of all available accounts | | balances | link to the balances for a given account | | transactions | link to the transactions of a given account | | overdrafts | link to the lists of overdrafts of a given account |
    - `self` GenericLink, required: hypertext reference
      - `href` string, required: URI to be used. HREF stands for Hypertext REFerence.
      - `templated` boolean: This field must be set with "true" when [href] is an URI template, i.e. with parameters that will be set by the client afterwards. Parameter fields must be included by the API server according to RFC6570. Otherwise, this property must be absent or set to false default value: false
    - `parent-list` GenericLink: hypertext reference
      - `href` string, required: URI to be used. HREF stands for Hypertext REFerence.
      - `templated` boolean: This field must be set with "true" when [href] is an URI template, i.e. with parameters that will be set by the client afterwards. Parameter fields must be included by the API server according to RFC6570. Otherwise, this property must be absent or set to false default value: false
    - `balances` GenericLink: hypertext reference
      - `href` string, required: URI to be used. HREF stands for Hypertext REFerence.
      - `templated` boolean: This field must be set with "true" when [href] is an URI template, i.e. with parameters that will be set by the client afterwards. Parameter fields must be included by the API server according to RFC6570. Otherwise, this property must be absent or set to false default value: false
    - `transactions` GenericLink: hypertext reference
      - `href` string, required: URI to be used. HREF stands for Hypertext REFerence.
      - `templated` boolean: This field must be set with "true" when [href] is an URI template, i.e. with parameters that will be set by the client afterwards. Parameter fields must be included by the API server according to RFC6570. Otherwise, this property must be absent or set to false default value: false
    - `overdrafts` GenericLink: hypertext reference
      - `href` string, required: URI to be used. HREF stands for Hypertext REFerence.
      - `templated` boolean: This field must be set with "true" when [href] is an URI template, i.e. with parameters that will be set by the client afterwards. Parameter fields must be included by the API server according to RFC6570. Otherwise, this property must be absent or set to false default value: false

## Other responses

- `204`: No content.
- `400`: Invalid status value
- `401`: Unauthorized, authentication failure.
- `403`: Forbidden, authentication successful but access to resource is not allowed.
- `404`: Not found, no request available.
- `405`: Method Not Allowed.
- `406`: Not Acceptable.
- `408`: Request Timeout.
- `429`: Too many requests.
- `500`: Internal server error.
- `503`: Service unavailable.

---

[API](https://skmtc.dev/groupebpce/apis/accounts-information.md) - [All operations](https://skmtc.dev/groupebpce/apis/accounts-information/llms.txt) - [OpenAPI document](https://skmtc.dev/groupebpce/apis/accounts-information/revisions/1e8366574497?raw)