> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt
> Use this file to discover all available pages before exploring further.

# Obtener permisos del usuario

> Utiliza este endpoint para obtener todos los permisos que tiene un usuario según el `access_token`. Midaz Console lo usa para verificar las funcionalidades a las que el usuario puede acceder.



## OpenAPI

````yaml es/openapi/v3-current/AM-auth.yaml get /v1/permissions
openapi: 3.1.0
info:
  title: Plugin de autenticación
  description: ''
  version: 2.6.7
servers:
  - url: https://auth.sandbox.lerian.net
security: []
tags:
  - name: API de autenticación
  - name: API de MFA
  - name: API de información del usuario
  - name: API de autorización
paths:
  /v1/permissions:
    get:
      tags:
        - API de información del usuario
      summary: Obtener permisos del usuario
      description: >-
        Utiliza este endpoint para obtener todos los permisos que tiene un
        usuario según el `access_token`. Midaz Console lo usa para verificar las
        funcionalidades a las que el usuario puede acceder.
      parameters:
        - $ref: '#/components/parameters/AuthorizationId'
      responses:
        '200':
          description: >-
            Indica que el recurso se creó correctamente y que la operación se
            completó según lo esperado.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserPermissionsResult'
              example:
                accounts:
                  - get
                  - post
                  - patch
                  - delete
                applications:
                  - get
                  - post
                  - delete
                asset-rates:
                  - get
                  - patch
                assets:
                  - get
                  - post
                  - patch
                  - delete
                balances:
                  - get
                  - patch
                  - delete
                groups:
                  - get
                ledgers:
                  - get
                  - post
                  - patch
                  - delete
                operations:
                  - get
                  - patch
                organizations:
                  - get
                  - post
                  - patch
                  - delete
                portfolios:
                  - get
                  - post
                  - patch
                  - delete
                segments:
                  - get
                  - post
                  - patch
                  - delete
                transactions:
                  - get
                  - post
                  - patch
                users:
                  - get
                  - post
                  - patch
                  - delete
                users/password:
                  - patch
          headers: {}
        '400':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorMessage'
              examples:
                Error0009:
                  $ref: '#/components/examples/Error0009'
          headers: {}
        '401':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorMessage'
              examples:
                Error0006:
                  $ref: '#/components/examples/Error0006'
                Error0007:
                  $ref: '#/components/examples/Error0007'
          headers: {}
        '403':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorMessage'
              examples:
                Error0008:
                  $ref: '#/components/examples/Error0008'
          headers: {}
        '500':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorMessage'
              examples:
                Error0005:
                  $ref: '#/components/examples/Error0005'
          headers: {}
      security: []
components:
  parameters:
    AuthorizationId:
      name: Authorization
      in: header
      description: Token de autorización.
      required: true
      example: 019c96a0-0a98-7287-9a31-786e0809c769
      schema:
        type: string
  schemas:
    UserPermissionsResult:
      description: >-
        Lista de API o recursos a los que el usuario puede acceder, cada uno
        junto con las acciones permitidas.
      type: object
      additionalProperties:
        type: array
        items:
          type: string
      properties: {}
    ErrorMessage:
      description: Mensaje de error devuelto en la respuesta.
      type: object
      properties:
        code:
          type: string
          description: Identificador único y estable del error.
        title:
          type: string
          description: Resumen breve del problema.
        message:
          type: string
          description: Orientación detallada para resolver el error.
  examples:
    Error0009:
      summary: Bad Request
      value:
        code: AUT-0009
        title: Bad Request
        message: >-
          The server could not understand the request due to malformed syntax.
          Please check the listed fields and try again.
    Error0006:
      summary: Token Missing
      value:
        code: AUT-0006
        title: Token Missing
        message: >-
          A valid token must be provided in the request header. Please include a
          token and try again.
    Error0007:
      summary: Invalid Token
      value:
        code: AUT-0007
        title: Invalid Token
        message: >-
          The provided token is expired, invalid or malformed. Please provide a
          valid token and try again.
    Error0008:
      summary: Permission Enforcement Error
      value:
        code: AUT-0008
        title: Permission Enforcement Error
        message: >-
          The enforcer is not configured properly. Please contact your
          administrator if you believe this is an error.
    Error0005:
      summary: Internal Server Error
      value:
        code: AUT-0005
        title: Internal Server Error
        message: >-
          The server encountered an unexpected error. Please try again later or
          contact support.

````