---
title: "Get Granted Scopes"
method: GET
path: "/api/{serviceId}/client/granted_scopes/get/{clientId}"
tags: ["Client Management"]
---

# Get Granted Scopes

`GET /api/{serviceId}/client/granted_scopes/get/{clientId}`

Get the set of scopes that a user has granted to a client application.

## Path parameters

- `serviceId` string, required
- `clientId` string, required

## Query parameters

- `subject` string, required

## Response `200`

Successfully retrieved granted scopes

- ClientAuthorizationDeleteResponse
  - `resultCode` string — The code which represents the result of the API call.
  - `resultMessage` string — A short message which explains the result of the API call.
  - `serviceApiKey` integer — A short message which explains the result of the API call.
  - `clientId` integer — Get the client ID.
  - `subject` string — Get the subject (= unique identifier) of the user who has granted authorization to the client.
  - `latestGrantedScopes` string[] — Get the scopes granted to the client application by the last authorization process by the user (who is identified by the subject).
  - `mergedGrantedScopes` string[] — Get the scopes granted to the client application by all the past authorization processes. Note that revoked scopes are not included.
  - `modifiedAt` integer — Get the timestamp in milliseconds since Unix epoch at which this record was modified.

## Other responses

- `400`
- `401`
- `403`
- `429` — The request exceeded the request rate permitted for the endpoint.
- `500`

---

[API](https://skmtc.net/authlete/apis/authlete-api.md) · [All operations](https://skmtc.net/authlete/apis/authlete-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/authlete/authlete-api/versions/7ad74ab64749/schema)