---
title: "Returns list of granted and declined permissions related to the universe with the id universeId for authenticated user"
method: GET
path: "/legacy-develop/v1/universes/{universeId}/permissions"
tags: ["Universes"]
---

# Returns list of granted and declined permissions related to the universe with the id universeId for authenticated user

`GET /legacy-develop/v1/universes/{universeId}/permissions`

## Request

- Base URL: `https://apis.roblox.com`
- URL: `https://apis.roblox.com/legacy-develop/v1/universes/{universeId}/permissions`
- Auth: one of:
  - API key in header `x-api-key`
  - OAuth 2
    - Authorization code: `https://apis.roblox.com/oauth/v1/authorize`
    - Token URL: `https://apis.roblox.com/oauth/v1/token` scopes: `legacy-universe:manage`

## Path parameters

- `universeId` integer, required

## Response `200`

OK

- RobloxApiDevelopModelsUniversePermissionsModel: A model containing information about a universe permissions
  - `canManage` boolean: Determines whether or not consumer can manage the target universe
  - `canCloudEdit` boolean: Determines whether or not consumer can cloud the target universe This is only nullable/optional in the context of https://develop.roblox.com/docs#!/Universes/get_v1_universes_universeId_context_permissions endpoint which is consumed only internally. It should be computed and set for all other usages.

## Other responses

- `400`: 1: The universe does not exist.
- `401`: 0: Authorization has been denied for this request.

## Changes

- **2026-10-14** `5dcfa33df56a`: 1 info
  - the security scope `legacy-universe:manage` was added to the endpoint's security scheme `roblox-oauth2`

[Operation history](https://skmtc.dev/roblox/apis/roblox-api/changes/legacy-develop/v1/universes/:universeId/permissions/get.md)

---

[API](https://skmtc.dev/roblox/apis/roblox-api.md) - [All operations](https://skmtc.dev/roblox/apis/roblox-api/llms.txt) - [OpenAPI document](https://skmtc.dev/roblox/apis/roblox-api/revisions/bcfdc20689cd?raw)