---
title: "Create a Permission"
method: POST
path: "/permissions"
tags: ["Permissions"]
---

# Create a Permission

`POST /permissions`

Create a new permission.

## Query parameters

- `meta` string

## Request body

- object
  - `collection` string — What collection this permission applies to.
  - `comment` 'none' | 'create' | 'update' | 'full' — If the user can post comments.
  - `create` 'none' | 'full' — If the user can create items.
  - `delete` 'none' | 'mine' | 'role' | 'full' — If the user can update items.
  - `explain` 'none' | 'create' | 'update' | 'always' — If the user is required to leave a comment explaining what was changed.
  - `read` 'none' | 'mine' | 'role' | 'full' — If the user can read items.
  - `role` integer — Unique identifier of the role this permission applies to.
  - `read_field_blacklist` string[] — Explicitly denies read access for specific fields.
  - `status` string — What status this permission applies to.
  - `status_blacklist` string[] — Explicitly denies specific statuses to be used.
  - `update` 'none' | 'mine' | 'role' | 'full' — If the user can update items.
  - `write_field_blacklist` string[] — Explicitly denies write access for specific fields.

## Response `200`

Successful request

- object
  - `data` Permissions
    - `id` integer — Unique identifier for the permission.
    - `collection` string — What collection this permission applies to.
    - `action` 'create' | 'read' | 'update' | 'delete' — What action this permission applies to.
    - `permissions` object, nullable — JSON structure containing the permissions checks for this permission.
    - `validation` object, nullable — JSON structure containing the validation checks for this permission.
    - `presets` object, nullable — JSON structure containing the preset value for created/updated items.
    - `fields` string[], nullable — CSV of fields that the user is allowed to interact with.
    - `policy` unknown

## Other responses

- `401` — Error: Unauthorized request
- `404` — Error: Not found.

---

[API](https://skmtc.dev/utomic-media/apis/dynamic-api-specification.md) · [All operations](https://skmtc.dev/utomic-media/apis/dynamic-api-specification/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/utomic-media/dynamic-api-specification/revisions/4a0ccd34700e/schema)