> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onyx.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Get User Group Permissions

> [!NOTE]
>
> **Business Edition Feature**
>
> This feature requires a Business or Enterprise plan. [View plans](https://docs.onyx.app/admins/billing/overview.md)
> or [contact sales](https://onyx.app/contact-sales) to learn more.

> [!NOTE]
>
> **Required permission:** Manage Groups (`manage:user_groups`), or Admin (`admin`).


## OpenAPI

````yaml GET /manage/admin/user-group/{user_group_id}/permissions
openapi: 3.1.0
info:
  title: Onyx API
  description: Onyx API for AI-powered enterprise search and chat
  version: Development
servers:
  - url: https://cloud.onyx.app/api
security: []
paths:
  /manage/admin/user-group/{user_group_id}/permissions:
    get:
      tags:
        - public
      summary: Get User Group Permissions
      operationId: get_user_group_permissions
      parameters:
        - name: user_group_id
          in: path
          required: true
          schema:
            type: integer
            title: User Group Id
        - name: include_non_toggleable
          in: query
          required: false
          schema:
            type: boolean
            default: false
            title: Include Non Toggleable
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Permission'
                title: >-
                  Response Get User Group Permissions Manage Admin User Group 
                  User Group Id  Permissions Get
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
        - BearerAuth: []
components:
  schemas:
    Permission:
      type: string
      enum:
        - basic
        - read:connectors
        - read:document_sets
        - read:agents
        - read:users
        - read:user_groups
        - read:search
        - read:chat
        - write:chat
        - read:admin
        - generate:image
        - use:llm_gateway
        - add:agents
        - manage:agents
        - manage:document_sets
        - manage:connectors
        - manage:llms
        - read:agent_analytics
        - manage:actions
        - manage:skills
        - read:query_history
        - manage:user_groups
        - create:user_api_keys
        - manage:service_account_api_keys
        - manage:bots
        - craft_sandbox
        - admin
      title: Permission
      description: >-
        Permission tokens for group-based authorization and PAT scoping.

        full_admin_panel_access is an override — if present, any permission

        check passes.


        The read:*/write:* "API-surface scopes" are coarser than the capability

        tokens: they name request surfaces (search, chat, admin-read) rather
        than

        admin capabilities. They are implied by basic / admin (so they're never

        granted directly to a group) and exist primarily to scope Personal
        Access

        Tokens.
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: Authorization header with Bearer token

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.