---
title: "Get Restriction IDs For A User"
method: GET
path: "/gw/api/v1/restrictions/user"
tags: ["preTradeComplianceRestrictions"]
---

# Get Restriction IDs For A User

`GET /gw/api/v1/restrictions/user`

Returns all restriction IDs for the given username. The username must be the master user, a sub-user, or a user with trading access under the master account. Returns 403 for both unauthorized and non-existent users to prevent ID enumeration.<br><br>**Scope**: `restrictions.read`<br>**Security Policy**: `HTTPS`

## Query parameters

- `masterUserName` string, required
- `userName` string, required
- `isEmpTrack` string

## Headers

- `Authorization` string, required

## Response `200`

Restriction IDs for the user.

- UserRestrictionsResponse — Response body for GET /external/restridsforuser
  - `status` string, required — Always `ok` on success.
  - `userName` string, required — Echoed from the request. If the supplied `userName` was an alias, the alias is returned as-is.
  - `restrictionIds` integer[], required — Restriction IDs for the user. Empty array when none.

## Other responses

- `400` — Missing, empty, non-numeric, or out-of-range parameter. The `error` field is always prefixed with `Bad Request:`.
- `401` — Missing, invalid, or unparseable Authorization token.
- `403` — Resource does not belong to the caller, does not exist, or an unsupported HTTP method was used. All cases return an identical body to prevent ID enumeration.
- `500` — Internal server error.

---

[API](https://skmtc.net/interactivebrokers/apis/api-reference.md) · [All operations](https://skmtc.net/interactivebrokers/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/interactivebrokers/api-reference/revisions/67f9f562c2c6/schema)