---
search:
  tags:
    - Portfolio
    - GET
seo:
  description: >-
    Returns the grants on an account the caller can reach — which of… Reference
    for the GET /portfolio/accounts/{account_id}/grants endpoint in the REST API
    API.
sidebar:
  badge: GET
  label: List an Account's Grants
title: List an Account's Grants
type: openapi-operation
---
Returns the grants on an account the caller can reach — which of the member's users hold access to it.

### Endpoint

- Method and path: `GET /portfolio/accounts/{account_id}/grants`
- Operation ID: `listAccountGrants`
- API reference: [GET /portfolio/accounts/{account_id}/grants](/api-reference/portfolio/listaccountgrants)

#### Authorization

- Accepted credentials: `UDX-Access-Key` header and `UDX-Access-Timestamp` header and `UDX-Access-Signature` header; or Bearer token in `Authorization`
- Details: [Authentication](/authentication)

#### Parameters

- `UDX-Version` (`header`) — Dated API version (YYYY-MM-DD). Omit to use the oldest supported version. An unknown version returns `400`.
- `account_id` (`path`, required) — The public identifier of the account whose grants are managed.
- `limit` (`query`) — Maximum number of items to return in one page. Defaults to 10 when omitted; must be an integer from 1 to 100. A value outside that range is rejected with 400 rather than silently clamped. A returned next_page_url preserves the effective value.
- `page` (`query`) — Opaque token identifying the requested page. Clients should not construct or extract this value; follow next_page_url from the previous response unchanged instead.
- `sort` (`query`) — Field to sort grants by. Defaults to created_at (when access was granted). The grant identifier is appended as a tie-breaker.
- `order` (`query`) — Sort direction. Defaults to desc. Applies to the default sort field when sort is omitted. Nulls sort last in both directions.

#### Responses

- `200` — One page of the account's grants.
- `400` — The request doesn't conform to this spec.
- `401` — No valid credential was provided.
- `403` — The credential lacks the `grants:manage` scope or is restricted to one account.
- `404` — The account doesn't exist or the caller holds no grant on it. The two cases are deliberately indistinguishable.
- `429` — The member rate limit was exceeded. Wait for `Retry-After`.
- `500` — Something went wrong on UDX's side.
- `503` — Request admission is unavailable. Retry later.