---
title: "Evaluates permissions for a group against a specific resource. Determines effective allow/deny for each permission within that resource context."
method: POST
path: "/api/v1/effective-permissions/groups/{groupId}/evaluate/resource"
tags: ["EffectivePermissions"]
---

# Evaluates permissions for a group against a specific resource. Determines effective allow/deny for each permission within that resource context.

`POST /api/v1/effective-permissions/groups/{groupId}/evaluate/resource`

## Request

- Base URL: `https://api.immy.bot` (the document declares no server; this is the origin it was published from)
- URL: `https://api.immy.bot/api/v1/effective-permissions/groups/{groupId}/evaluate/resource`
- Auth: none declared

## Path parameters

- `groupId` integer, required

## Request body

- EvaluateResourcePermissionsRequest
  - `resourceType` string, nullable, required
  - `resourceId` integer, required
  - `permissions` string[], nullable

## Response `200`

OK

- EvaluateResourcePermissionsResponse
  - `userId` integer, nullable
  - `groupId` integer, nullable
  - `groupName` string, nullable
  - `resourceType` string, nullable
  - `resourceId` integer
  - `permissions` PermissionEvaluationResult[], nullable
    - `permission` string, nullable
    - `permissionDisplayName` string, nullable
    - `subjectName` string, nullable
    - `subjectDisplayName` string, nullable
    - `permissionName` string, nullable
    - `isResourceBased` boolean
    - `status` 'Allow' | 'Deny' | 'NotGranted': The string or integer value may be used. Allow = 0, Deny = 1, NotGranted = 2
    - `isAllow` boolean
    - `explanation` string, nullable
    - `contributingAssignments` ContributingRoleAssignment[], nullable
      - `roleName` string, nullable
      - `isBuiltIn` boolean
      - `assignment` UserRoleAssignmentDto, required
        - `id` integer
        - `userId` integer, nullable
        - `groupId` integer, nullable
        - `roleId` integer
        - `isAllow` boolean
        - `assignmentType` 'Owner' | 'Msp' | 'TenantTag' | 'SpecificTenant' | 'UserTenant' | 'TagResource' | 'SpecificResource' | 'CategoryResource': The string or integer value may be used. Owner = 1, Msp = 2, TenantTag = 3, SpecificTenant = 4, UserTenant = 5, TagResource = 6, SpecificResource = 7, CategoryResource = 8
        - `createdDateTimeUtc` string, date-time
        - `createdBy` string, nullable
      - `assignmentScopeDescription` string, nullable
      - `precedenceLevel` integer
      - `isWinning` boolean
      - `overrideReason` string, nullable
    - `errors` string[], nullable
  - `allowedCount` integer
  - `deniedCount` integer
  - `notGrantedCount` integer
  - `errorCount` integer

---

[API](https://skmtc.dev/immy/apis/immy-bot-api-2.md) · [All operations](https://skmtc.dev/immy/apis/immy-bot-api-2/llms.txt) · [OpenAPI document](https://skmtc.dev/immy/apis/immy-bot-api-2/revisions/75b50268fa51?raw)