List Permission Groups
Beta/v1/identity/permission-groupsThis endpoint is idempotent. Learn more
Lists the permission catalog, organized into groups of related permissions.
Each group carries the individual permissions it covers; pair a permission's code with an action (create, read, update, or delete) to build the permission strings accepted when creating or updating a role. The catalog is platform-defined and identical for every account.
cursoroptional stringOpaque cursor token identifying where the page of results starts.
Use the cursor value embedded in a previous response's next_page_url or previous_page_url to fetch the adjacent page. Omit to start from the first page.
limitoptional integerMaximum number of results to return in a single page.
qoptional stringFree-text search term used to filter results.
Which fields are matched against the term varies by endpoint.
include[]optional arrayenumValues:ownerSub-objects to expand in the response. When omitted, sub-objects are returned as null.
objectstringenumValues:listResource type identifier.
page_infoobjectPagination metadata.
next_page_urlstringnullableRelative URL that fetches the next page of results.
previous_page_urlstringnullableRelative URL that fetches the previous page of results.
has_next_pagebooleanWhether more results exist after this page.
has_prev_pagebooleanWhether results exist before this page.
dataarray of permission_groupResources in this page.
idstringPermission group ID.
objectstringenumValues:permission_groupResource type identifier.
codestringUnique code identifying the permission group, such as customers.
namestringHuman-readable name for the permission group.
descriptionstringnullableFree-form description of the permission group.
The individual permissions collected under this group.
objectstringenumValues:listResource type identifier.
page_infoobjectPagination metadata.
next_page_urlstringnullableRelative URL that fetches the next page of results.
previous_page_urlstringnullableRelative URL that fetches the previous page of results.
has_next_pagebooleanWhether more results exist after this page.
has_prev_pagebooleanWhether results exist before this page.
dataarray of permissionResources in this page.
idstringPermission ID.
objectstringenumValues:permissionResource type identifier.
codestringStable code identifying the area this permission controls, such as customers or sales_orders.
Pair the code with an action (create, read, update, or delete) to form the permission strings used when creating or updating a role.
namestringHuman-readable name for the permission.
descriptionstringnullableHuman-readable description of what this permission controls.
groupstringCode of the permission group this permission is listed under, such as inventory.
created_atstring (date-time)When the permission was created.
updated_atstring (date-time)When the permission was last updated.
ownerownerExpandablenullableProvenance of this permission group.
Permission groups form the platform-defined permission catalog and are system-owned; they are the same across every account.
objectstringenumValues:ownerResource type identifier.
typestringenumValues:systemaccountWhere this resource came from.
system: a platform-provided default shared across all accounts; not editable.account: created and owned by a specific account; theaccountfield identifies which.
accountaccountnullableThe account that owns this resource.
Present only when type is account; system-owned resources have no owning account.
null in this endpoint.created_atstring (date-time)When the permission group was created.
updated_atstring (date-time)When the permission group was last updated.
Responses
Successful response for List Permission Groups