<!--
{
  "availability" : [
    "Search Ads: 5.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "Apple_Ads",
  "identifier" : "/documentation/apple_ads/Get-User-ACL",
  "metadataVersion" : "0.1.0",
  "role" : "Web Service Endpoint",
  "symbol" : {
    "kind" : "Web Service Endpoint",
    "modules" : [
      "Apple Ads"
    ],
    "preciseIdentifier" : "rest:apple_ads:get:v5-acls"
  },
  "title" : "Get User ACL"
}
-->

# Get User ACL

Fetches roles and organizations that the API has access to.

## Discussion

The API uses a user access control list (ACL) for policy-based authorization to determine access to resources. The Get User ACL call fetches roles in all organizations. Each role has access to all organizations or a subset of them.

### Get user ACL example

**Request:**

```
GET https://api.searchads.apple.com/api/v5/acls
```

**Response:**

```json
{
  "data": {
    "orgName": "Trip Trek",
    "orgId": 40669820,
    "currency": "USD",
    "timeZone": "America/Los_Angeles",
    "paymentModel": "PAYG",
    "roleNames": [
      "Admin"
    ],
    "parentOrgId": "27154130",
    "displayName": "Trip Trek"
  },
  "pagination": null,
  "error": null
}
```

### Campaign Groups

The API treats your `orgId` like a campaign group. If you need to manage Apple Ads for multiple clients, or if you need to restrict user access to a subset of your campaigns, you can create additional campaign groups within your account. Otherwise, you can create and manage all your campaigns under your default `orgId` and campaign group.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)