---
title: "Create a permission"
method: POST
path: "/permissions"
tags: ["Permissions"]
---

# Create a permission

`POST /permissions`

## Headers

- `organization` string, required

## Request body

- CreatePermissionInput
  - `name` string, required — Permission name
  - `description` string, required — Description of the permission
  - `subject` ObjectId, required
  - `actions` string[], required — The actions that this permission allows to be performed on the subject

## Response `201`

Permission created

- PermissionDto
  - `id` string, required — Permission ID
  - `name` string, required — Permission name
  - `description` string, required — Permission description
  - `subject` SubjectDto, required
    - `id` string — Subject ID
    - `fields` string[] — Fields
    - `entity` string — Entity identified by this subject
  - `actions` string[], required — The actions that this permission allows to be performed on the subject

---

[API](https://skmtc.net/fanhero/apis/tenant-endpoints.md) · [All operations](https://skmtc.net/fanhero/apis/tenant-endpoints/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/fanhero/tenant-endpoints/versions/8e7584c449dc/schema)