---
title: "Lists user accesses for a specific Work App."
method: GET
path: "/api/v1/WorkApps/{workAppId}/Accesses"
tags: ["WorkApps"]
---

# Lists user accesses for a specific Work App.

`GET /api/v1/WorkApps/{workAppId}/Accesses`

## Path parameters

- `workAppId` string, uuid, required

## Query parameters

- `cursor` string

## Headers

- `X-API-SECRET` string, required — API Secret is used to verify the integrity of the request and authenticate the client. It should be included in all requests. This value must be kept confidential and should never be exposed in client-side code or public repositories.

## Response `200`

OK

- AccessListViewModelV1 — Paginated response for a list of entities and pagination-related links.
  - `data` AccessViewModelV1[], required — The list of entities in the current page of the result.
    - `isOwner` boolean — Indicates whether the user is the owner of the work app.
    - `user` UserDetailedViewModelV1, required — Detailed information about a user, including role, status, and optional last login timestamp.
      - `id` string, uuid, required — Unique identifier of the user.
      - `name` string, required — Full name of the user.
      - `email` string, required — Email address of the user.
      - `roleId` integer — Identifier of the user's role.
      - `roleName` 'User' | 'Admin' | 'SuperAdmin', required
      - `statusId` integer — Identifier of the user's status.
      - `statusName` 'Active' | 'Invited' | 'Deactivated' | 'Offboarding' | 'Discovered' | 'Ignored', required
      - `lastLogin` string, date-time, nullable — Timestamp of the user's last login, if available.
      - `managerId` string, uuid, nullable — Unique identifier of the manager.
    - `permissionLevel` PermissionLevelViewModelV1 — Permission level configuration for a work app, including default and privilege flags.
      - `id` string, uuid, required — Unique identifier of the permission level.
      - `name` string, required — Name of the permission level.
      - `description` string, required — Description of what this permission level allows.
      - `isDefault` boolean — Indicates whether this is the default permission level for the work app.
      - `isPrivileged` boolean — Indicates whether this permission level is considered privileged.
    - `lastAccessedAt` string, date-time, nullable — When this user last used a tool in this work app (audit: tool used), if any; distinct from account last login on User.
  - `links` LinksViewModel, required — Pagination-related URLs for navigating a paginated collection.
    - `self` string, required — URL to the current resource or page.
    - `next` string, nullable — URL to the next page in the collection, if available.

## Other responses

- `401` — Unauthorized
- `404` — Not Found
- `500` — Internal Server Error

---

[API](https://skmtc.net/cakewalk/apis/cakewalk-open-api.md) · [All operations](https://skmtc.net/cakewalk/apis/cakewalk-open-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cakewalk/cakewalk-open-api/revisions/5728f183a29d/schema)