---
title: "Retrieve a company access grant"
method: GET
path: "/users/{user}/company_access/{company_access_grant}"
tags: ["Users"]
---

# Retrieve a company access grant

`GET /users/{user}/company_access/{company_access_grant}`

## Request

- Base URL: `https://sandbox.nmbr.co/services/payroll`
- URL: `https://sandbox.nmbr.co/services/payroll/users/{user}/company_access/{company_access_grant}`
- Auth: HTTP bearer

## Path parameters

- `user` string, required
- `company_access_grant` string, required

## Response `200`

OK

- object
  - `id` string: The unique identifier of the object in Nmbr.
  - `object` string: The type of the object in Nmbr (`"company_access_grant"`).
  - `data` User
    - `name` string
    - `email` string
    - `is_user_manager` boolean: Whether this user manages the partner's other users: who has access, and to which companies. A partner always has at least one user manager.
    - `is_restricted` boolean: When true, this user can only access the companies they are granted. With no grants, they access no companies.
    - `is_read_only` boolean: When true, this user can view everything their access allows but cannot change anything. They can still update their own profile.
    - `is_multifactor` boolean: Whether this user must confirm each sign-in with a code sent by text message.
    - `sms` string, nullable: The mobile number that sign-in codes are sent to.
    - `is_notifiable` boolean: Whether this user receives alerts about problems with the partner's webhooks and email delivery.
    - `preferred_locale` 'en' | 'fr', nullable: The language used for emails sent to this user.
    - `created_at` string, dateTime: The date and time the object was created in Nmbr.
    - `updated_at` string, dateTime: The date and time the object was last updated in Nmbr.

## Changes

- **2026-10-20** `3f7a22592972`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/nmbr/apis/nmbr-api/changes/users/:user/company_access/:company_access_grant/get.md)

---

[API](https://skmtc.dev/nmbr/apis/nmbr-api.md) - [All operations](https://skmtc.dev/nmbr/apis/nmbr-api/llms.txt) - [OpenAPI document](https://skmtc.dev/nmbr/apis/nmbr-api/revisions/3a5d58d37d2c?raw)
