---
title: "Debug permissions."
method: POST
path: "/access-control/assignments/search"
tags: ["enterprise"]
---

# Debug permissions.

`POST /access-control/assignments/search`

Returns the result of the search through access-control role assignments.

You need to have a permission with action `teams.roles:read` on scope `teams:*`
and a permission with action `users.roles:read` on scope `users:*`.

## Response `200`

(empty)

- SearchResult
  - `result` SearchResultItem[]
    - `action` string
    - `basicRole` string
    - `orgID` integer
    - `roleName` string
    - `scope` string
    - `teamID` integer
    - `userID` integer
    - `version` integer

## Other responses

- `400` — BadRequestError is returned when the request is invalid and it cannot be processed.
- `403` — ForbiddenError is returned if the user/token has insufficient permissions to access the requested resource.
- `500` — InternalServerError is a general error indicating something went wrong internally.

---

[API](https://skmtc.net/nforgeio/apis/grafana-http-api.md) · [All operations](https://skmtc.net/nforgeio/apis/grafana-http-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/nforgeio/grafana-http-api/revisions/3cb6c3f42dc7/schema)
