---
title: "Evaluates permissions for a group against a specific tenant. Determines effective allow/deny for each permission within that tenant context."
method: POST
path: "/api/v1/effective-permissions/groups/{groupId}/evaluate/tenant"
tags: ["EffectivePermissions"]
---

# Evaluates permissions for a group against a specific tenant. Determines effective allow/deny for each permission within that tenant context.

`POST /api/v1/effective-permissions/groups/{groupId}/evaluate/tenant`

## Request

- Base URL: `https://api.immy.bot` (the document declares no server; this is the origin it was published from)
- URL: `https://api.immy.bot/api/v1/effective-permissions/groups/{groupId}/evaluate/tenant`
- Auth: none declared

## Path parameters

- `groupId` integer, required

## Request body

- EvaluateTenantPermissionsRequest
  - `tenantId` integer, required
  - `permissions` string[], nullable

## Response `200`

OK

- EvaluateTenantPermissionsResponse
  - `userId` integer, nullable
  - `groupId` integer, nullable
  - `groupName` string, nullable
  - `tenantId` integer
  - `tenantName` string, nullable
  - `permissions` PermissionEvaluationResult[], nullable
    - `permission` string, nullable
    - `permissionDisplayName` string, nullable
    - `subjectName` string, nullable
    - `subjectDisplayName` string, nullable
    - `permissionName` string, nullable
    - `isResourceBased` boolean
    - `status` 'Allow' | 'Deny' | 'NotGranted': The string or integer value may be used. Allow = 0, Deny = 1, NotGranted = 2
    - `isAllow` boolean
    - `explanation` string, nullable
    - `contributingAssignments` ContributingRoleAssignment[], nullable
      - `roleName` string, nullable
      - `isBuiltIn` boolean
      - `assignment` UserRoleAssignmentDto, required
        - `id` integer
        - `userId` integer, nullable
        - `groupId` integer, nullable
        - `roleId` integer
        - `isAllow` boolean
        - `assignmentType` 'Owner' | 'Msp' | 'TenantTag' | 'SpecificTenant' | 'UserTenant' | 'TagResource' | 'SpecificResource' | 'CategoryResource': The string or integer value may be used. Owner = 1, Msp = 2, TenantTag = 3, SpecificTenant = 4, UserTenant = 5, TagResource = 6, SpecificResource = 7, CategoryResource = 8
        - `createdDateTimeUtc` string, date-time
        - `createdBy` string, nullable
      - `assignmentScopeDescription` string, nullable
      - `precedenceLevel` integer
      - `isWinning` boolean
      - `overrideReason` string, nullable
    - `errors` string[], nullable
  - `allowedCount` integer
  - `deniedCount` integer
  - `notGrantedCount` integer
  - `errorCount` integer

---

[API](https://skmtc.dev/immy/apis/immy-bot-api.md) · [All operations](https://skmtc.dev/immy/apis/immy-bot-api/llms.txt) · [OpenAPI document](https://skmtc.dev/immy/apis/immy-bot-api/revisions/559d0e4b39d3?raw)