---
title: "List ACLs"
method: GET
path: "/v1/acls"
tags: ["Redpanda ACLs"]
---

# List ACLs

`GET /v1/acls`

List all ACLs. The `filter.` query string parameters find matching ACLs that meet all specified conditions.

## Query parameters

- `filter.resource_type` 'RESOURCE_TYPE_ANY' | 'RESOURCE_TYPE_TOPIC' | 'RESOURCE_TYPE_GROUP' | 'RESOURCE_TYPE_CLUSTER' | 'RESOURCE_TYPE_TRANSACTIONAL_ID' | 'RESOURCE_TYPE_DELEGATION_TOKEN' | 'RESOURCE_TYPE_USER' | 'RESOURCE_TYPE_REGISTRY' | 'RESOURCE_TYPE_SUBJECT'
- `filter.resource_name` string
- `filter.resource_pattern_type` 'RESOURCE_PATTERN_TYPE_ANY' | 'RESOURCE_PATTERN_TYPE_MATCH' | 'RESOURCE_PATTERN_TYPE_LITERAL' | 'RESOURCE_PATTERN_TYPE_PREFIXED'
- `filter.principal` string
- `filter.host` string
- `filter.operation` 'OPERATION_ANY' | 'OPERATION_ALL' | 'OPERATION_READ' | 'OPERATION_WRITE' | 'OPERATION_CREATE' | 'OPERATION_DELETE' | 'OPERATION_ALTER' | 'OPERATION_DESCRIBE' | 'OPERATION_CLUSTER_ACTION' | 'OPERATION_DESCRIBE_CONFIGS' | 'OPERATION_ALTER_CONFIGS' | 'OPERATION_IDEMPOTENT_WRITE' | 'OPERATION_CREATE_TOKENS' | 'OPERATION_DESCRIBE_TOKENS'
- `filter.permission_type` 'PERMISSION_TYPE_ANY' | 'PERMISSION_TYPE_DENY' | 'PERMISSION_TYPE_ALLOW'

## Response `200`

OK

- ListACLsResponse
  - `resources` ListACLsResponseResource[]
    - `acls` Policy[]
      - `host` string — The host address for this ACL.
      - `operation` 'OPERATION_ANY' | 'OPERATION_ALL' | 'OPERATION_READ' | 'OPERATION_WRITE' | 'OPERATION_CREATE' | 'OPERATION_DELETE' | 'OPERATION_ALTER' | 'OPERATION_DESCRIBE' | 'OPERATION_CLUSTER_ACTION' | 'OPERATION_DESCRIBE_CONFIGS' | 'OPERATION_ALTER_CONFIGS' | 'OPERATION_IDEMPOTENT_WRITE' | 'OPERATION_CREATE_TOKENS' | 'OPERATION_DESCRIBE_TOKENS' — The operation that is allowed or denied (e.g. READ).
      - `permission_type` 'PERMISSION_TYPE_ANY' | 'PERMISSION_TYPE_DENY' | 'PERMISSION_TYPE_ALLOW' — Whether the operation should be allowed or denied.
      - `principal` string — The user for whom this ACL applies.
    - `resource_name` string — The name of the resource this ACL targets.
    - `resource_pattern_type` 'RESOURCE_PATTERN_TYPE_ANY' | 'RESOURCE_PATTERN_TYPE_MATCH' | 'RESOURCE_PATTERN_TYPE_LITERAL' | 'RESOURCE_PATTERN_TYPE_PREFIXED' — The pattern to use for matching the specified resource_name (any, exact match, literal, or prefixed).
    - `resource_type` 'RESOURCE_TYPE_ANY' | 'RESOURCE_TYPE_TOPIC' | 'RESOURCE_TYPE_GROUP' | 'RESOURCE_TYPE_CLUSTER' | 'RESOURCE_TYPE_TRANSACTIONAL_ID' | 'RESOURCE_TYPE_DELEGATION_TOKEN' | 'RESOURCE_TYPE_USER' | 'RESOURCE_TYPE_REGISTRY' | 'RESOURCE_TYPE_SUBJECT' — The type of resource (topic, consumer group, etc.) this ACL targets.

## Other responses

- `401` — Unauthenticated.
- `500` — Internal Server Error. Reach out to support.
- `default` — An unexpected error response.

---

[API](https://skmtc.dev/redpanda-data/apis/redpanda-cloud-data-plane-api.md) · [All operations](https://skmtc.dev/redpanda-data/apis/redpanda-cloud-data-plane-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/redpanda-data/redpanda-cloud-data-plane-api/revisions/7eef0bcc42e7/schema)