Skip to content
Last updated

Resolve a user's effective permissions within an organization. This aggregates capabilities from all assigned roles, deduplicates them, and determines the user's department scope.

GEThttps://api.aitronos.com/v1/organizations/{organization_id}/users/{user_id}/effective-permissions

Path Parameters

organization_id string required

Organization ID (org_ prefixed string).

user_id string required

User ID to resolve permissions for (usr_ prefixed string).


Returns

An effective permissions object containing:

  • user_id - The user whose permissions were resolved
  • capabilities - Deduplicated list of all capability strings from assigned roles
  • department_scope - Either "global" (for users with override_all_permissions) or an array of department IDs
  • role_ids - List of all role IDs assigned to this user
  • resolved_at - ISO 8601 timestamp of when permissions were resolved
cURL
curl "https://api.aitronos.com/v1/organizations/org_abc123/users/usr_target456/effective-permissions" \
  -H "Authorization: Bearer $ACCESS_TOKEN"

Available Capabilities

CapabilityDescription
manage_usersManage user accounts within scope
invite_usersSend invitations to new users
deactivate_usersDeactivate user accounts
remove_usersRemove users from organization
manage_departmentsCreate and manage departments
create_subdepartmentsCreate sub-departments
reparent_departmentsMove departments in hierarchy
manage_rolesCreate and edit roles
assign_rolesAssign roles to users
view_audit_logView audit log entries
export_audit_logExport audit log data
manage_knowledge_slicesManage knowledge slice access
manage_billingManage billing and subscriptions
override_all_permissionsFull access across all departments