Get Permissions

Get the list of all permissions in the system.

Note: You can use cursor and limit attributes independently or together to refine the results. Enter a permission name in cursor to list permissions starting from that name. Enter an integer in limit to define the number of results, between 1 and 99,999 (non-inclusive).

Filtering by principal: With user and/or group, only the permission targets that grant anything to at least one of the given principals are returned. For a user this includes the grants of the groups the user is a member of, unless include_inherited_groups=false. This replaces GET /artifactory/api/v2/security/permissions/users/USERNAME and GET /artifactory/api/v2/security/permissions/groups/{groupName}. Usernames are matched case-insensitively, group names exactly. An unknown user or group returns 404.

The filtered response is the same list of names and URIs as the unfiltered one. With expand=true it holds the full permission targets (targets and actions) instead, but the actions are narrowed to the requested principals - actions granted to other users or groups by the same permission target are not returned. Use GET /access/api/v2/permissions/{permissionName} for the complete permission target. Permission targets derived from project roles are not returned; stored permission targets that belong to a project are.

Security: Requires admin privileges, or a scoped token with system:permissions:r.

Availability: Artifactory 7.72.0+; the user, group, include_inherited_groups and expand parameters: Artifactory 7.210.0+

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Query Params
string

Permission name to start listing from

integer
1 to 99999

Number of results (between 1 and 99,999, non-inclusive)

user
array of strings

Comma-separated usernames. Only permission targets granting something to at least one of them are returned.

user
group
array of strings

Comma-separated group names. Only permission targets granting something to at least one of them are returned.

group
boolean
Defaults to true

With user: whether to also match the permission targets granted to the groups the users are members of.

boolean
Defaults to false

With user and/or group: return the full permission targets, narrowed to the requested principals' actions, instead of names and URIs. Rejected with 400 without a filter.

Responses

400

Bad Request - Invalid input, or expand=true without a user/group filter

401

Bad Credentials - Invalid credentials

403

Permission Denied - Insufficient permissions

404

Not Found - a filtered user or group does not exist

Language
Credentials
Bearer
URL
LoadingLoading…
Response
Choose an example:
application/json