---
title: "Check MaaS Admin Access"
method: GET
path: "/api/v1/is-maas-admin"
---

# Check MaaS Admin Access

`GET /api/v1/is-maas-admin`

Checks whether the requesting user has MaaS admin privileges by performing a SelfSubjectAccessReview against the `maasauthpolicies` resource in the `models-as-a-service` namespace. Returns `allowed: true` only for users who can create MaaSAuthPolicy resources (i.e. cluster/MaaS admins).
Token resolution priority:
1. `Authorization: Bearer <token>` — used by the ODH dashboard backend;
   correctly substituted with the impersonated user's token when the ODH
   dev impersonation feature (`DEV_IMPERSONATE_USER`) is active.

2. `x-forwarded-access-token` — fallback for standalone federated dev mode
   where the webpack proxy injects the real user's token directly.

## Response `200`

Access check result

- object
  - `data` object
    - `allowed` boolean, required — Whether the user has MaaS admin access

## Other responses

- `400` — Bad Request (missing authentication token)
- `500` — Internal Server Error

---

[API](https://skmtc.net/opendatahub-io/apis/maas-bff-api.md) · [All operations](https://skmtc.net/opendatahub-io/apis/maas-bff-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/opendatahub-io/maas-bff-api/revisions/1f732899279c/schema)