> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ilyama.golain.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Get the current user's effective permission graph



## OpenAPI

````yaml /api-reference/ilyama.v1.json get /me/permissions/graph
openapi: 3.1.0
info:
  description: >
    Generation-ready starter contract for ilyama's HTTP API.

    This is intentionally scoped to stable routes already mounted in
    services/apis

    so frontend clients can begin integrating against the rewrite immediately.
  title: ilyama Core API
  version: 0.1.0
servers:
  - url: /core/api/v1
security:
  - bearerAuth: []
tags:
  - name: Certificates (HTTP)
  - name: Device JITR
  - name: Device RPC
  - name: Devices
  - name: Edge replication
  - name: Fleets
  - name: Integrations
  - name: MDM
  - name: Notification Event Registry
  - name: Notifications
  - name: OTA
  - name: Observability & data
  - name: Organizations
  - name: Project settings
  - name: Projects
  - name: Projects — Email Templates
  - name: Projects — Notification Subscriptions
  - name: Projects — Status
  - name: System
  - name: Tickets & workflows
  - name: Webhooks
paths:
  /me/permissions/graph:
    get:
      tags:
        - System
      summary: Get the current user's effective permission graph
      operationId: getMyPermissionGraph
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PermissionGraphResponse'
          description: Permission graph loaded
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
          description: Unauthorized
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
          description: Forbidden
      security:
        - bearerAuth: []
components:
  schemas:
    PermissionGraphResponse:
      properties:
        data:
          properties:
            nodes:
              items:
                $ref: '#/components/schemas/PermissionGraphNode'
              type: array
            subject:
              $ref: '#/components/schemas/PermissionGraphSubject'
          required:
            - subject
            - nodes
          type: object
        ok:
          enum:
            - 1
          type: integer
      required:
        - ok
        - data
      type: object
    ErrorEnvelope:
      properties:
        detail:
          type: string
        message:
          oneOf:
            - type: string
            - type: object
        ok:
          enum:
            - 0
          type: integer
      required:
        - ok
        - message
        - detail
      type: object
    PermissionGraphNode:
      properties:
        display:
          oneOf:
            - $ref: '#/components/schemas/PermissionGraphDisplay'
            - type: 'null'
        edge_kind:
          type:
            - string
            - 'null'
        entity_id:
          format: uuid
          type: string
        entity_type:
          type: string
        org_id:
          format: uuid
          type: string
        parent:
          oneOf:
            - $ref: '#/components/schemas/PermissionGraphParent'
            - type: 'null'
        parents:
          items:
            $ref: '#/components/schemas/PermissionGraphParent'
          type: array
        path_class:
          type:
            - string
            - 'null'
        permissions:
          items:
            type: string
          type: array
        project_id:
          format: uuid
          type:
            - string
            - 'null'
      required:
        - entity_type
        - entity_id
        - org_id
        - parent
        - permissions
      type: object
    PermissionGraphSubject:
      properties:
        id:
          type: string
        kind:
          type: string
      required:
        - kind
        - id
      type: object
    PermissionGraphDisplay:
      properties:
        name:
          type: string
      required:
        - name
      type: object
    PermissionGraphParent:
      properties:
        accessible:
          type: boolean
        edge_kind:
          type: string
        entity_id:
          format: uuid
          type: string
        entity_type:
          type: string
        path_class:
          type: string
      required:
        - entity_type
        - entity_id
        - edge_kind
        - path_class
        - accessible
      type: object
  securitySchemes:
    bearerAuth:
      bearerFormat: JWT
      scheme: bearer
      type: http

````