Get a permission
/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environments/{envSlug}/permissions/{id}Returns a single permission by id, scoped to the active Application and current Environment. Returns 404 when no permission with that id exists in the Environment. Requires the rbac.view_roles permission.
Authentication
AuthorizationJWT access token. Never send alongside X-API-Key: a request carrying both is refused.
env_permissions.viewDeveloper ConsoleView the permission catalog. Granted through an administrator role in the Admin Workspace; a valid token without it is refused with 403.
Path Parameters
idstring Required Responses
application/json
data *PermissionResponseDto
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
Errors
When the request can't be completed, the response body includes a stable error code you can branch on.
account.capability_requiredForbiddenThe signed-in user's administrator roles do not grant the capability this endpoint requires.
Ask an account administrator to grant a role carrying the capability named in the Authentication section, then retry.
Returned object
curl -X GET "https://auth.canopy-io.com/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environments/{envSlug}/permissions/value" \ -H "Authorization: Bearer $CANOPY_TOKEN"
{ "data": { "id": "string", "application_id": "string", "key": "string", "name": "string", "description": "string", "category": "string", "source": "system", "created_at": "2026-04-20T12:00:00.000Z", "version": 0 } }
Tell us how we can improve this guide.