---
title: "Resolve a member's effective permissions"
method: GET
path: "/v1/users/{user_id}/permissions"
tags: ["Users"]
---

# Resolve a member's effective permissions

`GET /v1/users/{user_id}/permissions`

## Request

- Base URL: `https://identity-api.paymongo.com`
- URL: `https://identity-api.paymongo.com/v1/users/{user_id}/permissions`
- Auth: HTTP bearer

Returns the full permission catalog keyed as "module.action" for a member of the authenticated caller's organization (the caller may read their own). A permission is true when one of the member's roles grants it or an enabled per-user grant does.

## Path parameters

- `user_id` string, required

## Response `200`

OK

- object: Standard response containing data and its metadata if any
  - `data` object
    - `attributes` UserPermissionsAttributesDTO
      - `permissions` object: Permissions is the full permission catalog keyed as "module.action", true where one of the user's roles OR an enabled per-user grant grants it. A disabled per-user grant does not revoke a role grant.
    - `id` string
    - `type` string
  - `has_more` boolean

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `422`: Unprocessable Entity
- `500`: Internal Server Error

---

[API](https://skmtc.dev/paymongo/apis/identity.md) - [All operations](https://skmtc.dev/paymongo/apis/identity/llms.txt) - [OpenAPI document](https://skmtc.dev/paymongo/apis/identity/revisions/cc3056164874?raw)