---
title: "List resource restrictions the caller is permitted to manage."
method: GET
path: "/v2/resource-restrictions"
tags: ["Resource Restrictions"]
---

# List resource restrictions the caller is permitted to manage.

`GET /v2/resource-restrictions`

List active resource restrictions the authenticated user is permitted to manage.
A restriction is returned only if the caller can manage it — i.e. an account/org admin
(via admin escalation), a holder of the `PROJECT_RESTRICT` permission in the project's
space, or a holder of `PROJECT_RESTRICT` granted directly on the project.

Results are paginated; use `limit` and `cursor` for subsequent pages. Because entries
are authorization-filtered after a page is read, a page may contain fewer items than
`limit` (or be empty) while `has_more` is still `true`. Clients MUST keep paging until
`has_more` is `false` — do not stop on an empty page.

Use the optional `resource_type` query param to filter to a single resource type.
When omitted, `PROJECT` restrictions are returned (currently the only supported type).

<Note>This endpoint is in beta, read more [here](https://arize.com/docs/ax/rest-reference#api-version-stages).</Note>

## Query parameters

- `resource_type` 'PROJECT' — Type of the restricted resource. - PROJECT - A project within a space.
- `limit` integer
- `cursor` string

## Response `200`

A list of resource restriction records.

- ListResourceRestrictionsResponse
  - `resource_restrictions` ResourceRestriction[], required — A list of resource restriction records.
    - `resource_type` 'PROJECT', required — Type of the restricted resource. - PROJECT - A project within a space.
    - `resource_id` string, required — The ID of the restricted resource
    - `created_at` string, date-time, required — When the restriction was created
  - `pagination` PaginationMetadata, required — Cursor-based pagination metadata. Use `next_cursor` in the subsequent request's `cursor` query parameter.
    - `next_cursor` string — Opaque cursor for fetching the next page. Treat as an unreadable token. Present when `has_more` is true; omitted when `has_more` is false.
    - `has_more` boolean, required — True if another page of results is available.

## Other responses

- `400` — Invalid request
- `401` — Authentication is required
- `429` — Rate limit exceeded

---

[API](https://skmtc.net/arize-ai/apis/arize-rest-api.md) · [All operations](https://skmtc.net/arize-ai/apis/arize-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/arize-ai/arize-rest-api/versions/2ce448f1de13/schema)