{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40351,"path":"platform-security/access-control/view-permissions-for-a-role.md","title":"View permissions for a role","bundle":null,"doc_type":null,"release":"australia","body":"\n# View permissions for a role\n\nUse Access Analyzer to view permissions for a selected role.\n\n## Before you begin\n\nRole required: access\\_analyzer\\_admin\n\nThis procedure explains how to view the permissions for a specific role \\(such as **user\\_admin**\\) on a REST API endpoint by using the Evaluate Access feature in Access Analyzer.\n\n**Note:** Access Analyzer is a ServiceNow® Store product.\n\n## Procedure\n\n1.  Navigate to **All** &gt; **Access Analyzer** &gt; **Analyze Permissions**.\n\n    The system displays the Analyze access and permissions homepage.\n\n2.  Select your criteria as follows:\n\n<table id=\"table_cpw_mgd_qxb\"><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nAnalyze by \\*\n\n</td><td>\n\nSelect **Role**.\n\n</td></tr><tr><td>\n\nSelect user \\*\n\n</td><td>\n\nSpecify a role to select from the list. For example, **user\\_admin**.\n\n</td></tr><tr><td>\n\nRule type \\*\n\n</td><td>\n\nAnalyze access for the following:-   Table\n-   UI page\n-   REST Endpoint\n-   Client callable script include\n-   AI Agent\n-   Agentic workflow.\nFor example, **REST Endpoint**.\n\n</td></tr><tr><td>\n\nREST endpoint\\*\n\n</td><td>\n\nSpecify a REST endpoint. For example, `/api/global/user_role_inheritance`.**Note:** The complete REST endpoint must be used when using the selected field.\n\n</td></tr><tr><td>\n\nREST endpoint method \\*\n\n</td><td>\n\nSpecify a REST endpoint method. For example, GET.\n\n</td></tr></tbody>\n</table>3.  Specify the description in the **Description** field.\n\n4.  Click **Analyze permissions**.\n\n    \\[Omitted image \"view-permissions-for-a-role.png\"\\] Alt text: REST endpoint permissions\n\n    The **Access results** for the **user\\_admin** role is displayed.\n\n    The results can be read by referring to the Legends, access control list \\(ACL\\), IAccesshandler, and Data filters.\n\n    The overall access for the role is `passed`, which means that the role \\(**user\\_admin**\\) is able to access the **REST endpoint** for the selected **GET** method.\n\n\n"}}