---
title: "Get Authorization Profile"
method: GET
path: "/restapi/v1.0/account/{accountId}/extension/{extensionId}/authz-profile"
tags: ["User Permissions"]
---

# Get Authorization Profile

`GET /restapi/v1.0/account/{accountId}/extension/{extensionId}/authz-profile`

## Request

- Base URL: `https://platform.ringcentral.com`
- URL: `https://platform.ringcentral.com/restapi/v1.0/account/{accountId}/extension/{extensionId}/authz-profile`
- Auth: OAuth 2
  - Authorization code: `https://platform.ringcentral.com/restapi/oauth/authorize`
  - Token URL: `https://platform.ringcentral.com/restapi/oauth/token`
- TypeScript: <https://skmtc.dev/ringcentral/apis/ringcentral-api/docs/restapi/v1.0/account/:accountId/extension/:extensionId/authz-profile/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a list of user permissions granted at authorization procedure.
Please note: Some permissions may be restricted by extension type.

## Path parameters

- `accountId` string, required
- `extensionId` string, required

## Query parameters

- `targetExtensionId` string

## Response `200`

List of user permissions

- AuthProfileResource
  - `uri` string, uri
  - `permissions` ActivePermissionResource[]
    - `permission` PermissionIdResource
      - `uri` string, uri
      - `id` string
      - `siteCompatible` 'Compatible' | 'Incompatible' | 'Independent': Site compatibility flag set for permission
      - `readOnly` boolean: Specifies if the permission is editable on UI (if set to `true`) or not (if set to `false`)
      - `assignable` boolean: Specifies if the permission can be assigned by the account administrator
      - `permissionsCapabilities` PermissionsCapabilities: Advanced permissions capabilities. Returned if `advancedPermissions` query parameter is set to `true`.
        - `enabled` boolean: Specifies whether the user is enabled with the listed permission or not
        - `manageEnabled` boolean: Specifies if the user can manage the listed permission and is allowed to enable it on other users
        - `grantEnabled` boolean: Specifies if the users who were enabled with the listed permission can grant it further to other users
    - `effectiveRole` RoleIdResource
      - `uri` string, uri
      - `id` string
    - `scopes` string[]

---

[API](https://skmtc.dev/ringcentral/apis/ringcentral-api.md) - [All operations](https://skmtc.dev/ringcentral/apis/ringcentral-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ringcentral/apis/ringcentral-api/revisions/8d602198ec97?raw)
