---
title: "POST /permission-group"
method: POST
path: "/permission-group"
---

# POST /permission-group

`POST /permission-group`

Creates a group of permissions for various actions that a user can perform in FinSpace.

## Request body

- object
  - `name` string, password, required — The name of the permission group.
  - `description` string, password — A brief description for the permission group.
  - `applicationPermissions` ApplicationPermission[], required — <p>The option to indicate FinSpace application permissions that are granted to a specific group.</p> <important> <p>When assigning application permissions, be aware that the permission <code>ManageUsersAndGroups</code> allows users to grant themselves or others access to any functionality in their FinSpace environment's application. It should only be granted to trusted users.</p> </important> <ul> <li> <p> <code>CreateDataset</code> – Group members can create new datasets.</p> </li> <li> <p> <code>ManageClusters</code> – Group members can manage Apache Spark clusters from FinSpace notebooks.</p> </li> <li> <p> <code>ManageUsersAndGroups</code> – Group members can manage users and permission groups. This is a privileged permission that allows users to grant themselves or others access to any functionality in the application. It should only be granted to trusted users.</p> </li> <li> <p> <code>ManageAttributeSets</code> – Group members can manage attribute sets.</p> </li> <li> <p> <code>ViewAuditData</code> – Group members can view audit data.</p> </li> <li> <p> <code>AccessNotebooks</code> – Group members will have access to FinSpace notebooks.</p> </li> <li> <p> <code>GetTemporaryCredentials</code> – Group members can get temporary API credentials.</p> </li> </ul>
  - `clientToken` string — Idempotence Token for API operations

## Response `200`

Success

- CreatePermissionGroupResponse
  - `permissionGroupId` string — The unique identifier for the permission group.

## Other responses

- `480` — InternalServerException
- `481` — ValidationException
- `482` — ThrottlingException
- `483` — AccessDeniedException
- `484` — LimitExceededException
- `485` — ConflictException

---

[API](https://skmtc.net/aws/apis/finspace-data.md) · [All operations](https://skmtc.net/aws/apis/finspace-data/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/finspace-data/versions/d7561d153837/schema)