---
title: "GET /workspaces/{workspaceId}/permissions"
method: GET
path: "/workspaces/{workspaceId}/permissions"
---

# GET /workspaces/{workspaceId}/permissions

`GET /workspaces/{workspaceId}/permissions`

Lists the users and groups who have the Grafana <code>Admin</code> and <code>Editor</code> roles in this workspace. If you use this operation without specifying <code>userId</code> or <code>groupId</code>, the operation returns the roles of all users and groups. If you specify a <code>userId</code> or a <code>groupId</code>, only the roles for that user or group are returned. If you do this, you can specify only one <code>userId</code> or one <code>groupId</code>.

## Path parameters

- `workspaceId` string, required

## Query parameters

- `maxResults` integer
- `nextToken` string
- `userType` 'SSO_USER' | 'SSO_GROUP'
- `userId` string
- `groupId` string

## Response `200`

Success

- ListPermissionsResponse
  - `nextToken` string — The token to use in a subsequent <code>ListPermissions</code> operation to return the next set of results.
  - `permissions` PermissionEntry[], required — The permissions returned by the operation.
    - `user` object, required — A structure with the ID of the user or group with this role.
      - `id` string, required — <p>The ID of the user or group.</p> <p>Pattern: <code>^([0-9a-fA-F]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$</code> </p>
      - `type` 'SSO_USER' | 'SSO_GROUP', required — Specifies whether this is a single user or a group.
    - `role` 'ADMIN' | 'EDITOR' | 'VIEWER', required — Specifies whether the user or group has the <code>Admin</code>, <code>Editor</code>, or <code>Viewer</code> role.

## Other responses

- `480` — ResourceNotFoundException
- `481` — ThrottlingException
- `482` — ValidationException
- `483` — AccessDeniedException
- `484` — InternalServerException

---

[API](https://skmtc.net/aws/apis/grafana.md) · [All operations](https://skmtc.net/aws/apis/grafana/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/grafana/versions/76cc5bd3d508/schema)