---
title: "GET /api/v1/{context_id}/principals/{principal_id}/effective"
method: GET
path: "/api/v1/{context_id}/principals/{principal_id}/effective"
---

# GET /api/v1/{context_id}/principals/{principal_id}/effective

`GET /api/v1/{context_id}/principals/{principal_id}/effective`

## Request

- The document declares no server URL.
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/surrealdb/apis/spectron/docs/api/v1/:context_id/principals/:principal_id/effective/get.ts> (a function with typed inputs; its response is checked against the schema)

List the verbs a principal effectively holds at a scope path (requires `grant:manage` over the path)

## Path parameters

- `context_id` string, required
- `principal_id` string, required

## Query parameters

- `path` string, required
- `asOf` string

## Response `200`

- EffectiveGrantsJson: The `GET /{ctx}/principals/{id}/effective` response.
  - `asOf` string, date-time, nullable: Echoes the `as_of` instant the verbs were resolved at, when the request asked for a historical view; absent for a current-grants response.
  - `path` string, required: The scope path the verbs were resolved at (canonical form).
  - `verbs` Verb[], required: The verbs the principal effectively holds at `path`.

## Other responses

- `400`: Invalid scope path
- `401`: Unauthorized
- `403`: Caller lacks `grant:manage` over the path
- `404`: Principal does not exist
- `422`: Invalid context id
- `503`: Server too busy: the per-pod in-flight request cap was exceeded. Retry per the `Retry-After` header.

## Changes

- **2026-08-24** `9f1598713067`: 1 info
  - added the non-success response with the status `503`

[Operation history](https://skmtc.dev/surrealdb/apis/spectron/changes/api/v1/:context_id/principals/:principal_id/effective/get.md)

---

[API](https://skmtc.dev/surrealdb/apis/spectron.md) - [All operations](https://skmtc.dev/surrealdb/apis/spectron/llms.txt) - [OpenAPI document](https://skmtc.dev/surrealdb/apis/spectron/revisions/9f1598713067?raw)