---
title: "List aggregated session resource access"
method: GET
path: "/zones/{zoneId}/session-resource-access"
tags: ["Sessions"]
---

# List aggregated session resource access

`GET /zones/{zoneId}/session-resource-access`

Returns aggregated access records per session-resource pair. By default (rollup_children=true), includes access from descendant sessions. Set rollup_children=false to return only direct session access. At least one of user_id, session_id, or resource_id must be provided.

## Path parameters

- `zoneId` string, required

## Query parameters

- `user_id` string
- `session_id` string
- `resource_id` string
- `rollup_children` boolean
- `after` string
- `before` string
- `limit` integer
- `expand[]` union
  - 'total_count'
  - string[]

## Response `200`

Default Response

- IamSessionResourceAccessList
  - `items` IamSessionResourceAccess[], required
    - `session_id` string, required — Session ID
    - `resource_id` string, required — Resource ID
    - `organization_id` string, required — Organization ID
    - `total_access_count` integer, required — Total number of access events for this session-resource pair
    - `first_accessed_at` string, date-time, required — When access first occurred
    - `last_accessed_at` string, date-time, required — When access most recently occurred
  - `pagination` IamPagination, required — Cursor-based pagination metadata
    - `after_cursor` string, required — An opaque cursor used for paginating through a list of results
    - `before_cursor` string, required — An opaque cursor used for paginating through a list of results
    - `total_count` integer — Total number of items matching the query. Only included when expand[]=total_count is requested.

## Other responses

- `default` — Error response

## Changes

- **2026-03-16** `d3d69f45bfed` — 3 info
  - the endpoint scheme security `OAuth2` was added to the API
  - the endpoint scheme security `bearerAuth` was added to the API
  - the endpoint scheme security `iam_bearerAuth` was removed from the API
- **2026-03-09** `cb43483cd1b3` — 6 info
  - added the new optional `query` request parameter `after`
  - added the new optional `query` request parameter `before`
  - added the new optional `query` request parameter `expand[]`
  - added the new optional `query` request parameter `limit`
  - …2 more
- **2026-02-24** `0aa1f5c87e81` — 1 warning
  - deleted the `query` request parameter `has_initiator`

[Change history](https://skmtc.dev/keycardai/apis/untitled-api/changes/zones/:zoneId/session-resource-access/get.md)

---

[API](https://skmtc.dev/keycardai/apis/untitled-api.md) · [All operations](https://skmtc.dev/keycardai/apis/untitled-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/keycardai/untitled-api/revisions/d65d51379d93/schema)