Skip to content
Last updated

Returns boolean flags indicating which pages and actions the specified user can access in the UI, based on their effective permissions in the organization.

GEThttps://api.aitronos.com/v1/organizations/{organization_id}/users/{user_id}/ui-access

Resolves the user's effective permissions and maps them to page visibility and action availability flags. This endpoint is read-only and does not enforce permissions -- it reports them so the frontend can control navigation and button visibility.

Users with override_all_permissions (e.g., Owner, Admin) will have all flags set to true. Pages with no required capabilities (organization, my_team, departments, roles) are always visible to organization members.

Path Parameters

organization_id string required

The unique identifier of the organization (format: org_*).

user_id string required

The unique identifier of the user to check access for (format: usr_*).


Returns

A UIAccessResponse object containing the user's page and action access flags.

user_id string -- The user ID.

organization_id string -- The organization ID.

pages object -- Boolean flags for page visibility:

  • organization -- Organization settings page (always visible)
  • my_team -- Team overview page (always visible)
  • departments -- Department management page (always visible, read-only)
  • roles -- Role management page (always visible, read-only)
  • audit_log -- Audit log page (requires view_audit_log)
  • billing -- Billing page (requires manage_billing)
  • knowledge -- Knowledge management page (requires manage_knowledge_slices)

actions object -- Boolean flags for action availability:

  • invite_user -- Can invite users (requires invite_users)
  • deactivate_user -- Can deactivate users (requires deactivate_users)
  • remove_user -- Can remove users (requires remove_users)
  • manage_roles -- Can manage roles (requires manage_roles)
  • assign_roles -- Can assign roles (requires assign_roles)
  • manage_departments -- Can manage departments (requires manage_departments)
  • create_subdepartment -- Can create subdepartments (requires create_subdepartments)
  • reparent_department -- Can reparent departments (requires reparent_departments)
  • manage_knowledge -- Can manage knowledge (requires manage_knowledge_slices)
  • view_audit_log -- Can view audit log (requires view_audit_log)
  • export_audit_log -- Can export audit log (requires export_audit_log)
  • manage_billing -- Can manage billing (requires manage_billing)
cURL
curl -s -X GET "https://api.aitronos.com/v1/organizations/org_abc123/users/usr_def456/ui-access" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" | python3 -m json.tool