> ## Documentation Index
> Fetch the complete documentation index at: https://developers.liara.ir/llms.txt
> Use this file to discover all available pages before exploring further.

# List all permissions

> Lists every permission, and whether it can be used in custom roles (`availableForRBAC`) or assigned on a specific resource (`availableForDAC`).



## OpenAPI

````yaml /spec/platform-teams.yaml get /v2/teams/permissions
openapi: 3.0.1
info:
  title: Teams & Access
  version: 1.0.0
  description: >
    Create teams, invite people, and control what each member can do.


    A team is a separate account that owns its own resources and billing.

    Members work on the team's resources with their own API token by adding

    `teamID` to their requests. Access comes from two places:


    - **Role permissions** apply across the whole team. Every member has
      exactly one role.
    - **Resource permissions** give one member access to one specific
      resource, such as a single app or database.

    A request is allowed if either source grants a required permission.


    Every team starts with these built-in roles:


    | Role | Permissions |

    |------|-------------|

    | مالک | `manage` and `create` on every resource type, plus `billing.manage`
    and `team.manage`. The team creator always has this role. |

    | مدیر | `manage` and `create` on every resource type |

    | گرداننده | `operate` on every resource type |

    | بازرس | `view` on every resource type |

    | حسابدار | `billing.manage` |

    | مهمان | No permissions |


    The number of members, custom roles and resource permissions per team,

    and the number of teams per user, are limited.
servers:
  - url: https://api.liara.ir
security:
  - bearerAuth: []
tags:
  - name: Teams
    description: Create, list, rename and delete teams.
  - name: Invitations
    description: Invite people to a team and accept invitations.
  - name: Members
    description: List members, remove them, change their role, or leave a team.
  - name: Roles
    description: List roles and manage custom roles.
  - name: Resource Permissions
    description: Give members access to specific resources.
paths:
  /v2/teams/permissions:
    get:
      tags:
        - Roles
      summary: List all permissions
      description: >-
        Lists every permission, and whether it can be used in custom roles
        (`availableForRBAC`) or assigned on a specific resource
        (`availableForDAC`).
      operationId: listPermissions
      parameters:
        - $ref: '#/components/parameters/Page'
        - $ref: '#/components/parameters/Count'
      responses:
        '200':
          description: Permissions.
          content:
            application/json:
              schema:
                type: object
                properties:
                  totalPermissions:
                    type: integer
                  permissions:
                    type: array
                    items:
                      $ref: '#/components/schemas/Permission'
              example:
                totalPermissions: 32
                permissions:
                  - name: view
                    type: project
                    available: true
                    availableForRBAC: true
                    availableForDAC: true
                  - name: manage
                    type: billing
                    available: true
                    availableForRBAC: true
                    availableForDAC: false
        '400':
          $ref: '#/components/responses/ValidationError'
        '401':
          $ref: '#/components/responses/Unauthorized'
components:
  parameters:
    Page:
      name: page
      in: query
      required: false
      description: Page number, starting at 1.
      schema:
        type: integer
        minimum: 1
        default: 1
    Count:
      name: count
      in: query
      required: false
      description: Items per page.
      schema:
        type: integer
        minimum: 1
        default: 10
  schemas:
    Permission:
      type: object
      properties:
        name:
          type: string
        type:
          $ref: '#/components/schemas/PermissionType'
        available:
          type: boolean
          description: Whether the permission can be used at all.
        availableForRBAC:
          type: boolean
          description: Whether it can be included in a custom role.
        availableForDAC:
          type: boolean
          description: Whether it can be assigned on a specific resource.
    PermissionType:
      type: string
      description: The kind of resource or area a permission applies to.
      enum:
        - project
        - database
        - zone
        - bucket
        - mailServer
        - vm
        - ai
        - billing
        - team
    Error:
      type: object
      description: Standard error body.
      properties:
        statusCode:
          type: integer
        error:
          type: string
          description: HTTP status text.
        message:
          type: string
          description: What went wrong.
        data:
          type: object
          nullable: true
          description: >-
            Extra details. When present, `code` is a stable, machine-readable
            error code.
          properties:
            code:
              type: string
    AuthError:
      type: object
      description: Error body returned when the API token is rejected.
      properties:
        error:
          type: string
  responses:
    ValidationError:
      description: The request is invalid. `message` says which field failed.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            statusCode: 400
            error: Bad Request
            message: '"count" must be greater than or equal to 1'
    Unauthorized:
      description: The API token is missing, invalid or expired.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/AuthError'
          example:
            error: Unauthorized.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: 'Send your API token as `Authorization: Bearer <api-token>`.'

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.