---
title: "List customer permissions"
method: GET
path: "/customers/{customer_id}/permissions"
tags: ["Customers"]
---

# List customer permissions

`GET /customers/{customer_id}/permissions`

Returns a list of all active permissions for the specified customer.

## Path parameters

- `customer_id` string, required

## Response `200`

A list of permissions.

- V4PermissionList
  - `object` 'list', required
  - `url` string, required
  - `data` object[], required
    - `id` string — Permission identifier (matches the entitlement ID).
    - `source` string — How the permission was granted.
    - `active` boolean
    - `started_at` integer — Unix epoch seconds when the permission started.
    - `expires_at` integer — Unix epoch seconds when the permission expires.
    - `product_id` string, nullable — Identifier of the product that issued the permission, when applicable.
  - `has_more` boolean, required
  - `next_cursor` string — Present only when has_more is true.

## Other responses

- `400` — Invalid request
- `401` — Unauthorized
- `404` — Customer not found
- `429` — Too many requests
- `500` — Internal error
- `502` — Storage error
- `504` — Upstream timeout

---

[API](https://skmtc.net/qonversion/apis/qonversion-rest-api-v4.md) · [All operations](https://skmtc.net/qonversion/apis/qonversion-rest-api-v4/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/qonversion/qonversion-rest-api-v4/versions/e3f72cf8951c/schema)