> ## Documentation Index
> Fetch the complete documentation index at: https://developers.liara.ir/llms.txt
> Use this file to discover all available pages before exploring further.

# List resource permissions

> Lists the resource permissions given to the team's members, with the member and resource each one applies to. Needs the `team.manage` permission.



## OpenAPI

````yaml /spec/platform-teams.yaml get /v2/teams/{teamID}/assigned-permissions
openapi: 3.0.1
info:
  title: Teams & Access
  version: 1.0.0
  description: >
    Create teams, invite people, and control what each member can do.


    A team is a separate account that owns its own resources and billing.

    Members work on the team's resources with their own API token by adding

    `teamID` to their requests. Access comes from two places:


    - **Role permissions** apply across the whole team. Every member has
      exactly one role.
    - **Resource permissions** give one member access to one specific
      resource, such as a single app or database.

    A request is allowed if either source grants a required permission.


    Every team starts with these built-in roles:


    | Role | Permissions |

    |------|-------------|

    | مالک | `manage` and `create` on every resource type, plus `billing.manage`
    and `team.manage`. The team creator always has this role. |

    | مدیر | `manage` and `create` on every resource type |

    | گرداننده | `operate` on every resource type |

    | بازرس | `view` on every resource type |

    | حسابدار | `billing.manage` |

    | مهمان | No permissions |


    The number of members, custom roles and resource permissions per team,

    and the number of teams per user, are limited.
servers:
  - url: https://api.liara.ir
security:
  - bearerAuth: []
tags:
  - name: Teams
    description: Create, list, rename and delete teams.
  - name: Invitations
    description: Invite people to a team and accept invitations.
  - name: Members
    description: List members, remove them, change their role, or leave a team.
  - name: Roles
    description: List roles and manage custom roles.
  - name: Resource Permissions
    description: Give members access to specific resources.
paths:
  /v2/teams/{teamID}/assigned-permissions:
    get:
      tags:
        - Resource Permissions
      summary: List resource permissions
      description: >-
        Lists the resource permissions given to the team's members, with the
        member and resource each one applies to. Needs the `team.manage`
        permission.
      operationId: listAssignedPermissions
      parameters:
        - $ref: '#/components/parameters/TeamIDPath'
        - $ref: '#/components/parameters/Page'
        - $ref: '#/components/parameters/Count'
      responses:
        '200':
          description: Resource permissions.
          content:
            application/json:
              schema:
                type: object
                properties:
                  totalAssignedPermissions:
                    type: integer
                  assignedPermissions:
                    type: array
                    items:
                      $ref: '#/components/schemas/AssignedPermission'
              example:
                totalAssignedPermissions: 1
                assignedPermissions:
                  - _id: '000000000000000000000040'
                    name: deploy
                    type: project
                    team: '000000000000000000000002'
                    member:
                      _id: '000000000000000000000011'
                      team: '000000000000000000000002'
                      user:
                        fullname: نام نمونه
                        email: teammate@example.com
                      role: '000000000000000000000022'
                    project:
                      _id: '000000000000000000000050'
                      project_id: my-app
                    createdAt: '2026-01-01T08:00:00.000Z'
                    updatedAt: '2026-01-01T08:00:00.000Z'
        '400':
          $ref: '#/components/responses/InvalidTeamIDOrParams'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/TeamForbidden'
components:
  parameters:
    TeamIDPath:
      name: teamID
      in: path
      required: true
      description: The team's ID.
      schema:
        $ref: '#/components/schemas/ObjectID'
      example: '000000000000000000000002'
    Page:
      name: page
      in: query
      required: false
      description: Page number, starting at 1.
      schema:
        type: integer
        minimum: 1
        default: 1
    Count:
      name: count
      in: query
      required: false
      description: Items per page.
      schema:
        type: integer
        minimum: 1
        default: 10
  schemas:
    AssignedPermission:
      type: object
      description: >-
        Exactly one of `project`, `database`, `zone`, `bucket`, `mailServer`,
        `vm` or `ai` is set, matching `type`.
      properties:
        _id:
          type: string
          description: Permission ID. Use it as `permissionID`.
        name:
          type: string
        type:
          $ref: '#/components/schemas/PermissionType'
        team:
          type: string
        member:
          type: object
          description: The member the permission is given to.
          properties:
            _id:
              type: string
            team:
              type: string
            user:
              $ref: '#/components/schemas/MemberUser'
            role:
              type: string
              description: ID of the member's role.
        project:
          type: object
          properties:
            _id:
              type: string
            project_id:
              type: string
              description: The app's name.
        database:
          type: object
          properties:
            _id:
              type: string
            hostname:
              type: string
        zone:
          type: object
          properties:
            _id:
              type: string
            name:
              type: string
        mailServer:
          type: object
          properties:
            _id:
              type: string
            domain:
              type: string
        bucket:
          type: object
          properties:
            _id:
              type: string
            name:
              type: string
        vm:
          type: object
          properties:
            _id:
              type: string
            name:
              type: string
        ai:
          type: object
          properties:
            _id:
              type: string
            name:
              type: string
        createdAt:
          type: string
          format: date-time
        updatedAt:
          type: string
          format: date-time
    ObjectID:
      type: string
      pattern: ^[0-9a-fA-F]{24}$
      description: 24-character hexadecimal ID.
    PermissionType:
      type: string
      description: The kind of resource or area a permission applies to.
      enum:
        - project
        - database
        - zone
        - bucket
        - mailServer
        - vm
        - ai
        - billing
        - team
    MemberUser:
      type: object
      properties:
        fullname:
          type: string
        email:
          type: string
          format: email
        avatar:
          type: string
          format: uri
          description: Only present if the user set a custom avatar.
    Error:
      type: object
      description: Standard error body.
      properties:
        statusCode:
          type: integer
        error:
          type: string
          description: HTTP status text.
        message:
          type: string
          description: What went wrong.
        data:
          type: object
          nullable: true
          description: >-
            Extra details. When present, `code` is a stable, machine-readable
            error code.
          properties:
            code:
              type: string
    AuthError:
      type: object
      description: Error body returned when the API token is rejected.
      properties:
        error:
          type: string
  responses:
    InvalidTeamIDOrParams:
      description: '`teamID`, another ID or a query parameter is invalid.'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            statusCode: 400
            error: Bad Request
            message: Invalid team ID.
            data: null
    Unauthorized:
      description: The API token is missing, invalid or expired.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/AuthError'
          example:
            error: Unauthorized.
    TeamForbidden:
      description: >-
        You aren't a member of this team (`team_not_found`), or your role
        doesn't have the required permission (`no_permission`).
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          examples:
            teamNotFound:
              summary: Not a team member
              value:
                statusCode: 403
                error: Forbidden
                message: Team not found
                data:
                  code: team_not_found
            noPermission:
              summary: Missing permission
              value:
                statusCode: 403
                error: Forbidden
                message: You do not have permission to access this resource.
                data:
                  code: no_permission
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: 'Send your API token as `Authorization: Bearer <api-token>`.'

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.