---
title: "List customer allowed domains for the enterprise portal"
method: GET
path: "/app/{app_id}/enterprise-portal/customer-allowed-domains"
tags: ["enterprisePortal"]
---

# List customer allowed domains for the enterprise portal

`GET /app/{app_id}/enterprise-portal/customer-allowed-domains`

## Request

- Base URL: `https://api.replicated.com/vendor/v3`
- URL: `https://api.replicated.com/vendor/v3/app/{app_id}/enterprise-portal/customer-allowed-domains`
- Auth: API key in header `Authorization`

Required RBAC Policy:
kots/app/[:appid]/enterprise-portal/customer-allowed-domains/read
kots/app/[:appid]/license/[:customer_id]/read

## Path parameters

- `app_id` string, required

## Query parameters

- `customer_id` string, required

## Response `200`

- object
  - `allowedDomains` AllowedDomain[]
    - `appId` string
    - `createdAt` string, date-time
    - `customerId` string
    - `domain` string
    - `id` string
    - `teamId` string
  - `allowedDomainsEnabled` boolean

## Other responses

- `400`: Returned on bad input
- `401`: Return if the caller is not authorized
- `403`: Returned if the caller does not have the needed permission
- `404`: Returned on resource not found

## Changes

- **2026-11-03** `a36c6aead22f`: 1 info
  - added the optional property `allowedDomainsEnabled` to the response with the `200` status

[Operation history](https://skmtc.dev/replicated/apis/vendor-api-v3-2/changes/app/:app_id/enterprise-portal/customer-allowed-domains/get.md)

---

[API](https://skmtc.dev/replicated/apis/vendor-api-v3-2.md) - [All operations](https://skmtc.dev/replicated/apis/vendor-api-v3-2/llms.txt) - [OpenAPI document](https://skmtc.dev/replicated/apis/vendor-api-v3-2/revisions/a36c6aead22f?raw)