---
title: "GET /access-policies"
method: GET
path: "/access-policies"
---

# GET /access-policies

`GET /access-policies`

Retrieves a paginated list of access policies for an identity (an IAM Identity Center user, an IAM Identity Center group, or an IAM user) or an IoT SiteWise Monitor resource (a portal or project).

## Query parameters

- `identityType` 'USER' | 'GROUP' | 'IAM'
- `identityId` string
- `resourceType` 'PORTAL' | 'PROJECT'
- `resourceId` string
- `iamArn` string
- `nextToken` string
- `maxResults` integer

## Response `200`

Success

- ListAccessPoliciesResponse
  - `accessPolicySummaries` AccessPolicySummary[], required — A list that summarizes each access policy.
    - `id` string, required — The ID of the access policy.
    - `identity` object, required — The identity (an IAM Identity Center user, an IAM Identity Center group, or an IAM user).
      - `user` object — An IAM Identity Center user identity.
        - `id` string, required — The IAM Identity Center ID of the user.
      - `group` object — An IAM Identity Center group identity.
        - `id` string, required — The IAM Identity Center ID of the group.
      - `iamUser` object — An IAM user identity.
        - `arn` string, required — <p>The ARN of the IAM user. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html">IAM ARNs</a> in the <i>IAM User Guide</i>.</p> <note> <p>If you delete the IAM user, access policies that contain this identity include an empty <code>arn</code>. You can delete the access policy for the IAM user that no longer exists.</p> </note>
      - `iamRole` object — An IAM role identity.
        - `arn` string, required — The ARN of the IAM role. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html">IAM ARNs</a> in the <i>IAM User Guide</i>.
    - `resource` object, required — The IoT SiteWise Monitor resource (a portal or project).
      - `portal` object — A portal resource.
        - `id` string, required — The ID of the portal.
      - `project` object — A project resource.
        - `id` string, required — The ID of the project.
    - `permission` 'ADMINISTRATOR' | 'VIEWER', required — The permissions for the access policy. Note that a project <code>ADMINISTRATOR</code> is also known as a project owner.
    - `creationDate` string, date-time — The date the access policy was created, in Unix epoch time.
    - `lastUpdateDate` string, date-time — The date the access policy was last updated, in Unix epoch time.
  - `nextToken` string — The token for the next set of results, or null if there are no additional results.

## Other responses

- `480` — InvalidRequestException
- `481` — InternalFailureException
- `482` — ThrottlingException

---

[API](https://skmtc.net/aws/apis/iotsitewise.md) · [All operations](https://skmtc.net/aws/apis/iotsitewise/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iotsitewise/versions/d13e5d3e0a6f/schema)