---
title: "GET /resources/{resource_id}/scoped-role-permissions"
method: GET
path: "/resources/{resource_id}/scoped-role-permissions"
tags: ["resources"]
---

# GET /resources/{resource_id}/scoped-role-permissions

`GET /resources/{resource_id}/scoped-role-permissions`

Returns all the scoped role permissions that apply to the given resource. Only OPAL_SCOPED_ROLE resource type supports this field.

## Path parameters

- `resource_id` string, uuid, required

## Response `200`

The role permissions that this Opal Scoped Role has.

- ScopedRolePermissionList
  - `permissions` ScopedRolePermission[], required
    - `target_ids` string[] — The IDs of the entities that this permission applies to. If empty of missing, the permission will have untargeted scope.
    - `target_type` 'RESOURCE' | 'CONNECTION' | 'GROUP' | 'BUNDLE' | 'USER' | 'ACCESS_REVIEW' | 'OWNER', required — The type of the target for the role permission.
    - `permission_name` 'READ' | 'READ_ASSIGNMENTS' | 'CREATE' | 'IMPORT' | 'EXPORT' | 'SYNC' | 'DELETE' | 'READ_SETTINGS' | 'EDIT_TAGS' | 'EDIT_SETTINGS' | 'EDIT_SYNC_SETTINGS' | 'EDIT_ASSIGNMENTS' | 'EDIT_REQUEST_CONFIGURATIONS' | 'EDIT_EVENT_STREAM' | 'ASSIGN_UAR_REVIEWERS' | 'SEND_REMINDERS' | 'STOP' | 'REQUEST_ON_BEHALF' | 'RESET_MFA', required — The name of the role permission.
    - `allow_all` boolean, required

---

[API](https://skmtc.net/opal/apis/opal-api.md) · [All operations](https://skmtc.net/opal/apis/opal-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/opal/opal-api/versions/13b58df96d40/schema)