---
title: "Retrieve ServiceUser Permissions"
method: GET
path: "/organizations/{orgId}/serviceusers/{id}/permissions"
tags: ["ServiceUser"]
---

# Retrieve ServiceUser Permissions

`GET /organizations/{orgId}/serviceusers/{id}/permissions`

## Request

- Base URL: `https://api.m3ter.com`
- URL: `https://api.m3ter.com/organizations/{orgId}/serviceusers/{id}/permissions`
- Auth: OAuth 2
  - Authorization code: `https://m3ter.auth.us-east-1.amazoncognito.com/oauth2/authorize`, token URL `https://m3ter.auth.us-east-1.amazoncognito.com/oauth2/token`
  - Client credentials, token URL `/oauth/token`
- TypeScript: <https://skmtc.dev/m3ter-com/apis/m3ter-api/docs/organizations/:orgId/serviceusers/:id/permissions/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieve permission policies attached to a service user.

## Path parameters

- `orgId` string, required
- `id` string, required

## Query parameters

- `pageSize` integer
- `nextToken` string

## Response `200`

Returns a list of PermissionPolicies

- PermissionPolicyResponse
  - `id` string, required: The UUID of the entity.
  - `version` integer: The version number: - **Create:** On initial Create to insert a new entity, the version is set at 1 in the response. - **Update:** On successful Update, the version is incremented by 1 in the response.
  - `name` string: The name of the Permission Policy.
  - `permissionPolicy` PermissionStatement[]: Array containing the Permission Policies information.
    - `effect` 'ALLOW' | 'DENY', required
    - `action` PermissionAction[], required: The actions available to users who are assigned the Permission Policy - what they can do or cannot do with respect to the specified resource. **NOTE:** Use lower case and a colon-separated format, for example, if you want to confer full CRUD, use: ``` "config:create", "config:delete", "config:retrieve", "config:update" ```
    - `resource` string[], required: See [Statements - Available Resources](https://www.m3ter.com/docs/guides/managing-organization-and-users/creating-and-managing-permissions#statements---available-resources) for a listing of available resources for Permission Policy statements.
  - `managedPolicy` boolean: Indicates whether this is a system generated Managed Permission Policy.
  - `dtCreated` string, date-time: The date and time *(in ISO-8601 format)* when the Permission Policy was created.
  - `dtLastModified` string, date-time: The date and time *(in ISO-8601 format)* when the Permission Policy was last modified.
  - `createdBy` string: The unique identifier (UUID) of the user who created this Permission Policy.
  - `lastModifiedBy` string: The unique identifier (UUID) of the user who last modified this Permission Policy.

## Other responses

- `4XX`: Error message
- `5XX`: Error message

## Changes

- **2026-10-16** `85c514abc692`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/m3ter-com/apis/m3ter-api/changes/organizations/:orgId/serviceusers/:id/permissions/get.md)

---

[API](https://skmtc.dev/m3ter-com/apis/m3ter-api.md) - [All operations](https://skmtc.dev/m3ter-com/apis/m3ter-api/llms.txt) - [OpenAPI document](https://skmtc.dev/m3ter-com/apis/m3ter-api/revisions/85c514abc692?raw)