# List session store permissions

Launch stage: Beta

`GET /api/2.0/agents/{parent=session-stores/*}/permissions`

`GET /api/agents/v1/{parent=session-stores/*}/permissions`

Lists explicit session store grants. Only the owner or a workspace admin may list permissions.

API scopes: agent-kit

## Path parameters

- `parent` (string, required)
  Resource name of the store, in the form `session-stores/{session_store_id}`.

## Query parameters

- `page_size` (int32, optional)
  Maximum number of permissions to return. Defaults to 100; maximum is 1000.
- `page_token` (string, optional)
  Continuation token from a previous response.

## Returns

- `session_store_permissions` (array of object, optional, Output only)
  Explicit READ or WRITE grants. Implicit owner/admin access and inherited grants are excluded.
  - `principal` (object, optional, Output only)
    The principal whose permission is reported.
    - `name` (string, required)
    - `principal_type` (string, optional)
      The kind of principal. Required unless the deprecated type alias is supplied.
      Possible values:
      - `USER`
      - `SERVICE_PRINCIPAL`
  - `permission` (string, optional, Output only)
    The permission level. WRITE includes READ; PERMISSION_LEVEL_UNSPECIFIED means neither is available.
    Possible values:
    - `READ`
    - `WRITE`
- `next_page_token` (string, optional, Output only)
  Token for the next page, omitted when all permissions have been returned.

## Response

```json
{
  "session_store_permissions": [
    {
      "principal": {},
      "permission": "READ"
    }
  ],
  "next_page_token": "string"
}
```