<!--
{
  "availability" : [
    "Apple Ads Platform API: 1.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "apple-ads-platform-api",
  "identifier" : "/documentation/Apple-Ads-Platform-API/Get-user-ACLs",
  "metadataVersion" : "0.1.0",
  "role" : "Web Service Endpoint",
  "symbol" : {
    "kind" : "Web Service Endpoint",
    "modules" : [
      "Apple Ads Platform API"
    ],
    "preciseIdentifier" : "rest:apple-ads-platform-api:get:acls"
  },
  "title" : "Get User ACL"
}
-->

# Get User ACL

Return the ad accounts and roles accessible to the authenticated API caller.

## Discussion

This endpoint retrieves a `UserAclListResponse` for the authenticated user. The response contains a `result` object with an `acls` array. Each `UserAcl` entry contains an `adAccount` object and a `roles` array listing the roles the user holds for that account.

To discover which ad accounts an API token can access and what permission level applies, use this endpoint at the start of a session. Each access token binds to exactly one org. The `orgId` on every returned `adAccount` will be the same.

## Payload Examples

**Get User ACL:**

### Request

```
GET https://api.ads.apple.com/v1/acls
```

### Response

```json
{
 "result": {
   "acls": [
     {
       "adAccount": {
         "id": 123456789,
         "name": "AwayFinder",
         "orgId": 40669820
       },
       "roles": [
         "Admin"
       ]
     }
   ]
 }
}
```

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)