> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ilyama.golain.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Get a permission group



## OpenAPI

````yaml /api-reference/ilyama.v1.json get /organizations/permission-groups/{group_id}
openapi: 3.1.0
info:
  description: >
    Generation-ready starter contract for ilyama's HTTP API.

    This is intentionally scoped to stable routes already mounted in
    services/apis

    so frontend clients can begin integrating against the rewrite immediately.
  title: ilyama Core API
  version: 0.1.0
servers:
  - url: /core/api/v1
security:
  - bearerAuth: []
tags:
  - name: Certificates (HTTP)
  - name: Device JITR
  - name: Device RPC
  - name: Devices
  - name: Edge replication
  - name: Fleets
  - name: Integrations
  - name: MDM
  - name: Notification Event Registry
  - name: Notifications
  - name: OTA
  - name: Observability & data
  - name: Organizations
  - name: Project settings
  - name: Projects
  - name: Projects — Email Templates
  - name: Projects — Notification Subscriptions
  - name: Projects — Status
  - name: System
  - name: Tickets & workflows
  - name: Webhooks
paths:
  /organizations/permission-groups/{group_id}:
    get:
      tags:
        - Organizations
      summary: Get a permission group
      operationId: getPermissionGroup
      parameters:
        - in: header
          name: ORG-ID
          required: true
          schema:
            format: uuid
            type: string
        - in: path
          name: group_id
          required: true
          schema:
            format: uuid
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PermissionGroupResponse'
          description: Permission group loaded
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
          description: Invalid organization or group ID
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
          description: Unauthorized
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
          description: Forbidden
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
          description: Permission group not found
      security:
        - bearerAuth: []
components:
  schemas:
    PermissionGroupResponse:
      properties:
        data:
          $ref: '#/components/schemas/PermissionGroup'
        ok:
          enum:
            - 1
          type: integer
      required:
        - ok
        - data
      type: object
    ErrorEnvelope:
      properties:
        detail:
          type: string
        message:
          oneOf:
            - type: string
            - type: object
        ok:
          enum:
            - 0
          type: integer
      required:
        - ok
        - message
        - detail
      type: object
    PermissionGroup:
      properties:
        access:
          items:
            $ref: '#/components/schemas/PermissionGroupAccess'
          type: array
        active:
          type: boolean
        created_at:
          format: date-time
          type: string
        created_by:
          type: string
        description:
          type: string
        id:
          format: uuid
          type: string
        integrity_status:
          enum:
            - valid
            - degraded
          type: string
        name:
          type: string
        org_id:
          format: uuid
          type: string
        project_id:
          format: uuid
          type:
            - string
            - 'null'
        updated_at:
          format: date-time
          type: string
      required:
        - id
        - org_id
        - project_id
        - name
        - description
        - active
        - integrity_status
        - created_by
        - created_at
        - updated_at
      type: object
    PermissionGroupAccess:
      allOf:
        - $ref: '#/components/schemas/EntityAccess'
        - properties:
            invalid_reason:
              type: string
            invalidated_at:
              format: date-time
              type:
                - string
                - 'null'
            status:
              enum:
                - valid
                - invalid
              type: string
          required:
            - status
          type: object
    EntityAccess:
      properties:
        actions:
          items:
            type: string
          type: array
        resource:
          type: string
        resource_type:
          enum:
            - organizations
            - projects
            - device_data_definitions
            - device_data_points
            - device_shadow_definitions
            - context_definitions
            - device_profiles
            - logs
            - ota_updates
            - dashboards
            - fleets
            - tags
            - devices
            - groups
            - collections
            - dataspaces
          type: string
      required:
        - resource_type
        - resource
        - actions
      type: object
  securitySchemes:
    bearerAuth:
      bearerFormat: JWT
      scheme: bearer
      type: http

````