---
title: "GET /templates/{TemplateArn}/accessControlEntries"
method: GET
path: "/templates/{TemplateArn}/accessControlEntries"
---

# GET /templates/{TemplateArn}/accessControlEntries

`GET /templates/{TemplateArn}/accessControlEntries`

Lists group access control entries you created.

## Path parameters

- `TemplateArn` string, required

## Query parameters

- `MaxResults` integer
- `NextToken` string

## Response `200`

Success

- ListTemplateGroupAccessControlEntriesResponse
  - `AccessControlEntries` AccessControlEntrySummary[] — An access control entry grants or denies permission to an Active Directory group to enroll certificates for a template.
    - `AccessRights` object — Allow or deny an Active Directory group from enrolling and autoenrolling certificates issued against a template.
      - `AutoEnroll` 'ALLOW' | 'DENY' — Allow or deny an Active Directory group from autoenrolling certificates issued against a template. The Active Directory group must be allowed to enroll to allow autoenrollment
      - `Enroll` 'ALLOW' | 'DENY' — Allow or deny an Active Directory group from enrolling certificates issued against a template.
    - `CreatedAt` string, date-time — The date and time that the Access Control Entry was created.
    - `GroupDisplayName` string — Name of the Active Directory group. This name does not need to match the group name in Active Directory.
    - `GroupSecurityIdentifier` string — Security identifier (SID) of the group object from Active Directory. The SID starts with "S-".
    - `TemplateArn` string — The Amazon Resource Name (ARN) that was returned when you called <a href="https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplate.html">CreateTemplate</a>.
    - `UpdatedAt` string, date-time — The date and time that the Access Control Entry was updated.
  - `NextToken` string — Use this parameter when paginating results in a subsequent request after you receive a response with truncated results. Set it to the value of the <code>NextToken</code> parameter from the response you just received.

## Other responses

- `480` — AccessDeniedException
- `481` — ValidationException
- `482` — ResourceNotFoundException
- `483` — ThrottlingException
- `484` — InternalServerException

---

[API](https://skmtc.net/aws/apis/pca-connector-ad.md) · [All operations](https://skmtc.net/aws/apis/pca-connector-ad/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/pca-connector-ad/versions/ab51ba01ae5f/schema)