# Get organization access
URL: https://docs.fluenta.io/en/docs/reference/organization/get-organization-access
Operation: `getOrganizationAccess`
Required permission: `read`

`GET /v1/external/organizations/{organizationId}/access`

The user’s roles and the credential’s «Permisos» in one organization.

### Authorization

- `apiToken` — Bearer token. An API token created in Configuración › Tokens de API, or a connected app’s access token

Send it as `Authorization: Bearer <your API token>`.

### Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `organizationId` | path | number | yes |  |

### Responses

| Status | Description |
| --- | --- |
| `200` | `ExternalOrganizationAccessDto` |
| `401` | Missing, malformed, unknown, expired or revoked credential: `INVALID_API_TOKEN`. |
| `402` | The organization is blocked: `ORG_BLOCKED`. |
| `403` | The credential lacks the «Permiso» the route names (`INSUFFICIENT_SCOPE`), or the organization’s plan does not include what was asked (`PLAN_LIMIT`): «Conectar con IA» for a connected app, or a report or analytics route whose plan feature a Light organization lacks (a Light of plan version 1 keeps `reports`). |
| `404` | The organization does not exist or is out of the credential’s reach: `ORGANIZATION_NOT_FOUND`. One body for both. |
| `429` | The credential is over its rate limit: `RATE_LIMITED`. Per credential, in fixed windows of 60 seconds: 60 requests in one organization on Light and 120 on Pro; 20 on the heavy reads (the range figures, the whole floor, the month and the pauses); 300 across every organization; 60 on the routes that name no organization. Wait `Retry-After` seconds; a refused request counts against nothing. |

### Example

```bash
curl -X GET 'https://api.fluenta.io/v1/external/organizations/{organizationId}/access' \
  -H 'Authorization: Bearer <your API token>'
```