Skip to main content
GET
Error

Authorizations

Authorization
string
header
required

Authorization: Bearer <token>. Accepts EITHER a Keycloak access token (scopes-in-token) OR an opaque POS session token; both resolve to the same pos.* scope vocabulary the route guards enforce.

Path Parameters

memberId
string
required

The team-member id to act on, e.g. user-julie.

Minimum string length: 1

Query Parameters

storeId
string

Resolve the effective permissions at ONE store's scope; omit to resolve network-wide (franchise scope). A franchise grant covers every store; a store grant only that store.

Minimum string length: 1

Response

The resolved effective permissions the member holds at the target scope.

The resolved effective permissions the member holds at the target scope.

actorId
string
required
scope
object
required
permissions
string[]
required