---
title: "List Employee Files"
method: GET
path: "/api/v1/employees/{id}/files/view"
tags: ["Employee Files", "Public API"]
---

# List Employee Files

`GET /api/v1/employees/{id}/files/view`

Lists the file categories and files visible to the caller for the specified employee. This is a metadata listing (names, sizes, permissions); to download a file's content use `get-employee-file`. The response format is controlled by the Accept header: send `application/json` for JSON or omit/send anything else for XML. Only categories and files the caller is permitted to see are included; employees viewing their own profile also see files shared with them. Returns 404 when the employee has no accessible categories.

OAuth Scopes: employee:file

## Path parameters

- `id` string, required

## Headers

- `Accept` string

## Response `200`

The employee's file categories and files. Each category contains permission flags and an array of file metadata.

- object
  - `employee` object
    - `id` integer — Employee ID.
  - `categories` object[]
    - `id` integer — Category ID.
    - `name` string — Category display name.
    - `canRenameCategory` 'yes' | 'no' — Whether the caller can rename this category.
    - `canDeleteCategory` 'yes' | 'no' — Whether the caller can delete this category.
    - `canUploadFiles` 'yes' | 'no' — Whether the caller can upload files to this category.
    - `displayIfEmpty` 'yes' | 'no' — Whether to display the category when it has no files.
    - `files` object[]
      - `id` integer — File ID.
      - `name` string — File display name.
      - `originalFileName` string — Original uploaded filename.
      - `size` integer — File size in bytes.
      - `dateCreated` string — UTC creation timestamp in ISO 8601 format (e.g. `2024-01-15T12:30:00+0000`).
      - `createdBy` string — Full name of the user who uploaded the file.
      - `shareWithEmployee` 'yes' | 'no' — Whether the file is shared with the employee.
      - `canRenameFile` 'yes' | 'no' — Whether the caller can rename this file.
      - `canDeleteFile` 'yes' | 'no' — Whether the caller can delete this file.
      - `canChangeShareWithEmployeeFieldValue` 'yes' | 'no' — Whether the caller can toggle the share-with-employee setting.

## Other responses

- `403` — The API user does not have permission to access the requested employee's files.
- `404` — The requested employee was not found, or the employee has no accessible file categories.

---

[API](https://skmtc.net/bamboohr/apis/bamboohr-api.md) · [All operations](https://skmtc.net/bamboohr/apis/bamboohr-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bamboohr/bamboohr-api/versions/19ebf391a399/schema)