---
title: "List PermissionPolicies"
method: GET
path: "/organizations/{orgId}/permissionpolicies"
tags: ["PermissionPolicy"]
---

# List PermissionPolicies

`GET /organizations/{orgId}/permissionpolicies`

## Request

- Base URL: `https://api.m3ter.com`
- URL: `https://api.m3ter.com/organizations/{orgId}/permissionpolicies`
- Auth: OAuth 2
  - Authorization code: `https://m3ter.auth.us-east-1.amazoncognito.com/oauth2/authorize`, token URL `https://m3ter.auth.us-east-1.amazoncognito.com/oauth2/token`
  - Client credentials, token URL `/oauth/token`
- TypeScript: <https://skmtc.dev/m3ter-com/apis/m3ter-api/docs/organizations/:orgId/permissionpolicies/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieve a list of PermissionPolicy entities

## Path parameters

- `orgId` string, required

## Query parameters

- `pageSize` integer
- `nextToken` string

## Response `200`

ListPermissionPolicies 200 response

- PaginatedPermissionPolicyResponseData
  - `data` PermissionPolicyResponse[]
    - `id` string, required: The UUID of the entity.
    - `version` integer: The version number: - **Create:** On initial Create to insert a new entity, the version is set at 1 in the response. - **Update:** On successful Update, the version is incremented by 1 in the response.
    - `name` string: The name of the Permission Policy.
    - `permissionPolicy` PermissionStatement[]: Array containing the Permission Policies information.
      - `effect` 'ALLOW' | 'DENY', required
      - `action` PermissionAction[], required: The actions available to users who are assigned the Permission Policy - what they can do or cannot do with respect to the specified resource. **NOTE:** Use lower case and a colon-separated format, for example, if you want to confer full CRUD, use: ``` "config:create", "config:delete", "config:retrieve", "config:update" ```
      - `resource` string[], required: See [Statements - Available Resources](https://www.m3ter.com/docs/guides/managing-organization-and-users/creating-and-managing-permissions#statements---available-resources) for a listing of available resources for Permission Policy statements.
    - `managedPolicy` boolean: Indicates whether this is a system generated Managed Permission Policy.
    - `dtCreated` string, date-time: The date and time *(in ISO-8601 format)* when the Permission Policy was created.
    - `dtLastModified` string, date-time: The date and time *(in ISO-8601 format)* when the Permission Policy was last modified.
    - `createdBy` string: The unique identifier (UUID) of the user who created this Permission Policy.
    - `lastModifiedBy` string: The unique identifier (UUID) of the user who last modified this Permission Policy.
  - `nextToken` string

## Other responses

- `4XX`: Error message
- `5XX`: Error message

## Changes

- **2026-10-16** `85c514abc692`: 1 breaking
  - the `data/items/allOf[subschema #2]/` response's property type changed from no type to `object` for status `200`
- **2025-12-03** `ac93d1a9e6d9`: 9 warning, 1 info
  - removed the optional property `data/items/createdBy` from the response with the `200` status
  - removed the optional property `data/items/dtCreated` from the response with the `200` status
  - removed the optional property `data/items/dtLastModified` from the response with the `200` status
  - removed the optional property `data/items/id` from the response with the `200` status
  - …6 more
- **2025-08-01** `9f9e5f3dbde7`: 1 breaking, 2 info
  - the response's body type changed from no type to `object` for status `200`
  - added the optional property `data` to the response with the `200` status
  - added the optional property `nextToken` to the response with the `200` status
- **2025-02-04** `9433593378b5`: 1 breaking, 2 warning
  - the response's body type changed from `object` to no type for status `200`
  - removed the optional property `data` from the response with the `200` status
  - removed the optional property `nextToken` from the response with the `200` status

[Operation history](https://skmtc.dev/m3ter-com/apis/m3ter-api/changes/organizations/:orgId/permissionpolicies/get.md)

---

[API](https://skmtc.dev/m3ter-com/apis/m3ter-api.md) - [All operations](https://skmtc.dev/m3ter-com/apis/m3ter-api/llms.txt) - [OpenAPI document](https://skmtc.dev/m3ter-com/apis/m3ter-api/revisions/85c514abc692?raw)
