---
title: "Get organization IAM tree"
method: GET
path: "/api/v2/org/{id}/iam-tree"
tags: ["org"]
---

# Get organization IAM tree

`GET /api/v2/org/{id}/iam-tree`

## Request

- Base URL: `https://central.zerotier.com`
- URL: `https://central.zerotier.com/api/v2/org/{id}/iam-tree`
- Auth: HTTP bearer

Returns the full hierarchical IAM structure for the organization, showing role assignments across all nested resources.

## Path parameters

- `id` string, required

## Response `200`

Hierarchical IAM tree for the organization

- IamLeaf
  - `id` string, required
  - `name` string, required
  - `principalType` 'user' | 'team', required
  - `principals` object[], required
    - `id` string, required
    - `name` string, required
    - `principalType` 'user', required
    - `roles` string[], required
  - `children` IamLeaf[], required

## Other responses

- `401`: Missing or invalid authentication token
- `403`: Insufficient permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api.md) - [All operations](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api/revisions/b2e7468ad104?raw)