Permission schemes overview
Permission schemes are the named bundles of grants a role can carry.
The permission scheme object
Attributes
descriptionstringFree-form description.
idstring (uuid)Unique identifier.
is_systembooleanWhether the scheme is a built-in system scheme.
namestringDisplay name.
namespacestringThe namespace.
permissionsarray of stringThe permissions.
slugstringThe slug.
sort_orderintegerManual ordering weight. Lower sorts first.
updated_atstring (date-time)When the permission scheme was last updated.
Response200
json
{
"description": "What this is for.",
"id": "b7e42a19-3c5d-4f80-9a26-8d1c0f4e7b53",
"is_system": false,
"name": "Example name",
"namespace": "instance",
"permissions": ["example"],
"slug": "my-team",
"sort_order": 65535,
"updated_at": "2026-01-14T09:22:41.478363Z"
}Endpoints
| Method | Path | Description |
|---|---|---|
GET | /api/v2/workspaces/{slug}/permission-schemes/ | List permission schemes |
GET | /api/v2/workspaces/{slug}/permission-schemes/{pk}/ | Get a permission scheme |
Response shaping
Every permission scheme read accepts ?fields= for sparse responses. See Sparse fields. Errors follow the shared problem+json contract.

