---
title: "Get a permission."
method: GET
path: "/permissions/{uuid}"
tags: ["permission"]
---

# Get a permission.

`GET /permissions/{uuid}`

Get a permission.

## Path parameters

- `uuid` string, UUID, required

## Response `200`

Success

- PermissionIntentResponse — Response object for intentful operations on a permission
  - `status` PermissionDefStatus — Permission Status Definition.
    - `state` string — The state of the permission entity.
    - `message_list` MessageResource[]
      - `message` string, required — If state is ERROR, a message describing the error.
      - `reason` string, required — If state is ERROR, a machine-readable snake-cased string.
      - `details` object — Custom key-value details relevant to the status.
    - `name` string, required — Permission name.
    - `resources` PermissionResources, required — Permission resources definition.
      - `fields` object — The fields that can/cannot be accessed during the specified operation. field_name_list will be a list of fields. e.g. if field_mode = disallowed, field_name_list = ["xyz"] then the list of allowed fields is ALL fields minus xyz
        - `field_mode` string, required — Allow or disallow the fields mentioned.
        - `field_name_list` string[], required — The list of fields.
      - `operation` string, required — The operation that is being performed on a given kind.
      - `kind` string, required — The kind on which the operation is being performed.
    - `description` string — Human readable description of the permission.
  - `spec` Permission — Permission Input Definition. The permission consists of a name and defines the following what-operation-can-be-performed-on-which-fields-a-given-kind. The fields are defined in a list with type - allowed and disallowed.
    - `name` string, required — Permission name.
    - `resources` PermissionResources, required — Permission resources definition.
      - `fields` object — The fields that can/cannot be accessed during the specified operation. field_name_list will be a list of fields. e.g. if field_mode = disallowed, field_name_list = ["xyz"] then the list of allowed fields is ALL fields minus xyz
        - `field_mode` string, required — Allow or disallow the fields mentioned.
        - `field_name_list` string[], required — The list of fields.
      - `operation` string, required — The operation that is being performed on a given kind.
      - `kind` string, required — The kind on which the operation is being performed.
    - `description` string — A description or user annotation for the permission.
  - `api_version` string, required
  - `metadata` PermissionMetadata, required — The permission kind metadata
    - `last_update_time` string, date-time — UTC date and time in RFC-3339 format when permission was last updated
    - `kind` string, required — The kind name
    - `uuid` string, UUID — permission uuid
    - `spec_version` integer — Version number of the latest spec.
    - `creation_time` string, date-time — UTC date and time in RFC-3339 format when permission was created
    - `spec_hash` string — Hash of the spec. This will be returned from server.
    - `should_force_translate` boolean — Applied on Prism Central only. Indicate whether force to translate the spec of the fanout request to fit the target cluster API schema.
    - `owner_reference` UserReference — The reference to a user
      - `kind` string, required — The kind name
      - `name` string
      - `uuid` string, UUID, required
    - `categories` object — Categories for the permission
    - `name` string — permission name

## Other responses

- `404` — Invalid UUID provided
- `default` — Internal Error

---

[API](https://skmtc.net/nutanix/apis/nutanix-intentful-api.md) · [All operations](https://skmtc.net/nutanix/apis/nutanix-intentful-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/nutanix/nutanix-intentful-api/revisions/40395083ab31/schema)
