---
title: "GET /permission-group/{permissionGroupId}"
method: GET
path: "/permission-group/{permissionGroupId}"
---

# GET /permission-group/{permissionGroupId}

`GET /permission-group/{permissionGroupId}`

Retrieves the details of a specific permission group.

## Path parameters

- `permissionGroupId` string, required

## Response `200`

Success

- GetPermissionGroupResponse
  - `permissionGroup` PermissionGroup — The structure for a permission group.
    - `permissionGroupId` string — The unique identifier for the permission group.
    - `name` string, password — The name of the permission group.
    - `description` string, password — A brief description for the permission group.
    - `applicationPermissions` ApplicationPermission[] — <p>Indicates the permissions that are granted to a specific group for accessing the FinSpace application.</p> <important> <p>When assigning application permissions, be aware that the permission <code>ManageUsersAndGroups</code> allows users to grant themselves or others access to any functionality in their FinSpace environment's application. It should only be granted to trusted users.</p> </important> <ul> <li> <p> <code>CreateDataset</code> – Group members can create new datasets.</p> </li> <li> <p> <code>ManageClusters</code> – Group members can manage Apache Spark clusters from FinSpace notebooks.</p> </li> <li> <p> <code>ManageUsersAndGroups</code> – Group members can manage users and permission groups. This is a privileged permission that allows users to grant themselves or others access to any functionality in the application. It should only be granted to trusted users.</p> </li> <li> <p> <code>ManageAttributeSets</code> – Group members can manage attribute sets.</p> </li> <li> <p> <code>ViewAuditData</code> – Group members can view audit data.</p> </li> <li> <p> <code>AccessNotebooks</code> – Group members will have access to FinSpace notebooks.</p> </li> <li> <p> <code>GetTemporaryCredentials</code> – Group members can get temporary API credentials.</p> </li> </ul>
    - `createTime` integer — The timestamp at which the group was created in FinSpace. The value is determined as epoch time in milliseconds.
    - `lastModifiedTime` integer — Describes the last time the permission group was updated. The value is determined as epoch time in milliseconds.
    - `membershipStatus` 'ADDITION_IN_PROGRESS' | 'ADDITION_SUCCESS' | 'REMOVAL_IN_PROGRESS' — <p>Indicates the status of the user account within a permission group.</p> <ul> <li> <p> <code>ADDITION_IN_PROGRESS</code> – The user account is currently being added to the permission group.</p> </li> <li> <p> <code>ADDITION_SUCCESS</code> – The user account is successfully added to the permission group.</p> </li> <li> <p> <code>REMOVAL_IN_PROGRESS</code> – The user is currently being removed from the permission group.</p> </li> </ul>

## Other responses

- `480` — InternalServerException
- `481` — ValidationException
- `482` — ThrottlingException
- `483` — AccessDeniedException
- `484` — ResourceNotFoundException

---

[API](https://skmtc.net/aws/apis/finspace-data.md) · [All operations](https://skmtc.net/aws/apis/finspace-data/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/finspace-data/revisions/d7561d153837/schema)