# Get User Product Permissions

This api returns the list of permitted actions for the logged-in user and the a given product

Endpoint: GET /api/v2.0/products/{productToken}/permissions
Version: 3.0.1
Security: bearer-key

## Path parameters:

  - `productToken` (string, required)
    product UUID (by running Entities - Organization > Get Organization Products) or Product Token (from the Mend SCA App:  tab > ).

## Response 200 fields (application/json):

  - `supportToken` (string)
    Example: "1171c60d"

  - `retVal` (object)

  - `retVal.permissions` (array)
    Example: ["POLICIES__POLICY__VIEW"]

## Response 400 fields (*/*):

  - `supportToken` (string)
    Example: "1171c60d"

## Response 403 fields (*/*):

  - `supportToken` (string)
    Example: "1171c60d"