---
title: "Firm grants a partner access on its behalf"
method: POST
path: "/api/v1/partner-authorizations"
---

# Firm grants a partner access on its behalf

`POST /api/v1/partner-authorizations`

## Request

- Base URL: `https://scope.bid`
- URL: `https://scope.bid/api/v1/partner-authorizations`
- Auth: HTTP bearer

Firm accounts only: a partner acts on behalf of a firm, so a professional account cannot grant. The caller (session or PAT) needs users.manage or must be a firm admin. A partner token cannot manage grants.

## Response `201`

Granted.

## Other responses

- `400`: partner_id is missing, or is not a uuid. Nothing was granted.
- `401`: Missing or invalid access token.
- `403`: The caller is not authorized: the caller's role does not grant the required capability, the partner token lacks the required scope, or the partner is not authorized to act for this firm.
- `404`: No partner with this partner_id. Nothing was granted.
- `429`: Per-tenant rate limit exceeded.
- `500`: Database error. Nothing was granted.
- `503`: Nothing was granted. With retryable: true, Scope could not confirm the account is a firm or the caller's role at the firm; retry. With migration_pending: true, this deployment does not have the partner tables; retrying will not help.

---

[API](https://skmtc.dev/scope/apis/scope-api.md) · [All operations](https://skmtc.dev/scope/apis/scope-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scope/apis/scope-api/revisions/164347b416ac?raw)