---
title: "List access states"
method: GET
path: "/api/v1/access_states"
tags: ["access_states"]
---

# List access states

`GET /api/v1/access_states`

Returns a paginated list of access states — records of who currently has (or historically had) access to which application resources, including effective time ranges.

## Query parameters

- `limit` integer
- `cursor` string
- `application_id` string
- `grantee_user_id` string
- `expand` string

## Response `200`

Access state list

- AccessStateList — Paginated list of access states
  - `data` AccessState[], required — List of access states
    - `application` object, nullable — The application. Only present when requested via `expand=application`. Carries the application's own top-level fields only.
      - `description` string, nullable
      - `id` string, uuid
      - `owner_user_id` string, uuid, nullable
      - `provisioning_type` string, nullable
      - `risk_level` string, nullable
      - `status` string
      - `title` string
      - `url` string, nullable
    - `application_id` string, uuid, required — Application ID
    - `effective_end` string, date-time, nullable — When the access ended (null if still effective)
    - `effective_start` string, date-time, required — When the access became effective
    - `grantee_user` User — A user in the organization
      - `deactivated_at` string, date-time, nullable — Deactivation timestamp
      - `departments` string[] — Departments the user belongs to
      - `email` string, email, required — Email address
      - `employment_type` 'full_time' | 'part_time' | 'contract' | 'freelance' | 'internship' | 'apprenticeship' | 'working_student' | 'training', nullable — Employment type
      - `first_name` string, required — First name
      - `full_name` string — Full name (computed)
      - `id` string, uuid, required — User ID
      - `inserted_at` string, date-time — Creation timestamp
      - `job_title` string, nullable — Job title
      - `last_name` string, required — Last name
      - `location_city` string, nullable — City location
      - `manager_user_id` string, uuid, nullable — Manager user ID
      - `status` 'active' | 'inactive' | 'onboarding' | 'onboarding_provisioning_planned' | 'offboarding' | 'offboarding_planned' | 'offboarded', required — Current status
      - `teams` string[] — Teams the user belongs to
      - `updated_at` string, date-time — Last update timestamp
    - `grantee_user_account_id` string, uuid, required — Grantee user account ID (the user's account within the app)
    - `grantee_user_id` string, uuid — User ID of the grantee
    - `group_id` string, uuid, nullable — Group ID (set when access is granted via a group)
    - `id` string, uuid, required — Access state ID
    - `resource` object, nullable — The resource. Only present when requested via `expand=resource`; null for app-wide access. Carries the resource's own top-level fields only (no nested permissions).
      - `application_id` string, uuid
      - `description` string, nullable
      - `id` string, uuid
      - `multiple_permissions_selectable` boolean
      - `parent_resource_id` string, uuid, nullable
      - `requestable` boolean
      - `title` string
      - `type` string
    - `resource_id` string, uuid, nullable — Resource ID (null for app-wide access)
    - `target_permission_ids` string[] — Permission IDs currently held
    - `target_permissions` object[] — The permissions currently held. Only present when requested via `expand=target_permissions`.
      - `description` string, nullable
      - `elevated` boolean
      - `id` string, uuid
      - `requestable` boolean
      - `resource_id` string, uuid
      - `title` string
  - `meta` PaginationMeta, required — Pagination metadata
    - `page` integer, required — Current page number
    - `page_size` integer, required — Items per page
    - `total_count` integer, required — Total number of items
    - `total_pages` integer, required — Total number of pages

## Other responses

- `400` — Bad request
- `401` — Unauthorized

---

[API](https://skmtc.net/accessowl/apis/accessowl-api.md) · [All operations](https://skmtc.net/accessowl/apis/accessowl-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/accessowl/accessowl-api/versions/f01f507d4b4e/schema)