---
title: "Get Trust Center access for a user"
method: GET
path: "/trust_exchange/trust_center/access/user"
tags: ["trust_exchange"]
---

# Get Trust Center access for a user

`GET /trust_exchange/trust_center/access/user`

## Request

- Base URL: `https://cyber-risk.upguard.com/api/public`
- URL: `https://cyber-risk.upguard.com/api/public/trust_exchange/trust_center/access/user`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/docs/trust_exchange/trust_center/access/user/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns Trust Center access information for a specific user identified by email address,
including current access status and any pending access requests.

Note: Access applies across all of your Trust Centers, not to one in particular.

Required API key permissions: `TrustExchange` (select when creating API key in Account Settings)

## Query parameters

- `email` string, required
- `org_name` string
- `org_primary_hostname` string

## Response `200`

Trust Center access detail for a specific user.

- TrustCenterUserAccessResponse
  - `access_request` TrustCenterUserAccessRequest
    - `created_at` string, date-time: The date the access request was created.
    - `id` integer: The ID of the access request.
    - `message` string: The message included with the access request.
    - `requested_resources` TrustCenterAccessRequests
      - `documents` TrustCenterAccessDocumentRequest[]: Content Library document access requests
        - `uuid` string: UUID of the Content Library document.
      - `questionnaires` TrustCenterAccessQuestionnaireRequest[]: Public questionnaire access requests
        - `id` integer: ID of the questionnaire.
    - `updated_at` string, date-time: The date the access request was last updated.
  - `created_at` string, date-time: The date the access was created. Null when there is no access.
  - `email` string: The email address that was looked up.
  - `has_signed_nda` boolean: Whether the user or organization has a current signed NDA.
  - `nda_exempt` boolean: Whether the user or organization is exempt from NDA requirements.
  - `nda_manually_approved` boolean: Whether the NDA was manually approved for this user or organization.
  - `nda_pending_countersign` boolean: Whether the user or organization has signed the NDA and it is awaiting countersignature.
  - `org_name` string: The name of the organization with access. Empty when the access is personal to the user, or when there is no access.
  - `org_primary_hostname` string: The primary hostname of the organization with access. Empty when the access is personal to the user, or when there is no access.
  - `org_representative_email` string: The email of the user linked as a representative for the organization. Empty when the access is personal to the user, or when there is no access.
  - `resources` TrustCenterAccessResources
    - `documents` TrustCenterAccessDocumentResource[]: Content Library documents
      - `expired` boolean: If access to the document has expired or not.
      - `expires` string, date-time: Access expiry date (null if it will never expire).
      - `uuid` string: UUID of the Content Library document.
    - `questionnaires` TrustCenterAccessQuestionnaireResource[]: Public questionnaires
      - `expired` boolean: If access to the questionnaire has expired or not.
      - `expires` string, date-time: Access expiry date (null if it will never expire).
      - `id` integer: ID of the questionnaire.
  - `updated_at` string, date-time: The date the access was last updated. Null when there is no access.

## Other responses

- `403`: Account does not have access to requested entities
- `422`: An invalid parameter was supplied or a mandatory parameter was missing
- `429`: Too many requests have been made to this endpoint.
- `500`: An internal system error occurred

## Changes

- **2026-11-07** `d044bf6dc61e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/changes/trust_exchange/trust_center/access/user/get.md)

---

[API](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api.md) - [All operations](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/llms.txt) - [OpenAPI document](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/revisions/d044bf6dc61e?raw)