Skip to content

Show a permission group

Open .md

GET/v1/api/store/{team_slug}/setting/group/{hash_id}

v1Operation ID v1_public_group_show

Returns one permission group with its permissions.

Permission

Any team member can call it. Reading needs no extra permission.

Path parameters

  • team_slugstringrequired

    Your team slug, shown as Team ID next to your API key in Profile.

    • Example your-team
  • hash_idstringrequired

    The permission group's id: a hash id from an earlier answer. Only hash ids work here; anything else answers 404 page_not_found.

    • Example aaNZmyj0mvmWLU

Request body

This operation takes no request body.

Response

200Successful response.

  • dataobjectrequired
    Child fields (5)
    • idstringrequired
    • namestringrequired
    • permissionsarray of stringsrequired

      Permission keys. manage_setting is Manage Settings, manage_billing Manage Billing, manage_stock Manage Stock. For orders, quotes, purchase orders and customers, *_all_* covers every record and *_self_* (or *_assigned_*) only records assigned to the member. view_order_finance is View Sales Order Pricing; view_customer_finance is View Customer Sales Aggregates. Listed as saved, repeats included.

      • Each item is one of: "manage_setting", "manage_stock", "manage_billing", "view_production_board", "create_product", "update_product", "view_product", "create_service", "update_service", "view_service", "create_order", "view_all_order", "view_self_order", "update_all_order", "update_self_order", "message_all_order", "message_self_order", "create_quote", "view_all_quote", "view_self_quote", "update_all_quote", "update_self_quote", "create_po", "view_all_po", "view_self_po", "update_all_po", "update_self_po", "view_all_customer", "view_assigned_customer", "update_assigned_customer", "update_all_customer", "create_customer", "view_vendor", "update_vendor", "create_vendor", "view_report", "view_customer_finance", "view_order_finance"
    • usersarray of objectsrequired

      The members in the group.

      Fields of each item (4)
      • avatar_urlstring | nullrequired
      • emailstringrequired
      • idstringrequired

        The member's id, as List team members gives it.

      • namestringrequired
    • versionintegerrequired

      The permission format. 3 for every group created or updated through the API.

  • statusintegerrequired
  • successbooleanrequired

Errors

  • 401The API key is missing or wrong (unauthenticated).

  • 403You are not allowed to do this. api_access_not_in_plan: your team's plan doesn't include API access (Pro and above, with an active subscription or trial), so every request answers this until the team upgrades. When your role lacks the permission the operation needs, the body is only {"message": "Insufficient Permission"}. Other refusals use the error envelope, with unauthorized or user_is_not_authorized.

  • 404Not found. page_not_found: the team slug is unknown, you are not a member of the team, or an id in the path is not one of this team's. code: null, with a message that starts "No query results for": there is no record with that id.