---
title: "Expand access for resource"
url: https://hexelstudio.com/docs/api/ciam-iam/authz/expand
---

# Expand access for resource

**GET** `/authz/expand`

Lists principals with access in the caller's organization.

## Query parameters

- `resource_type: string`

  Resource Type

- `resource_id: optional string`

  Resource ID

## Headers

- `Authorization: string`

  `Bearer <token>`.

## Returns

`200` OK (`ExpandResponse`)

- `principals: optional array of string`

## Errors

- `400` Bad Request

## Example

```bash
curl --request GET \
  --url 'https://api.hexelstudio.com/v1/authz/expand?resource_type=RESOURCE_TYPE' \
  --header "Authorization: Bearer $ACCESS_TOKEN"
```

### Response (200)

```json
{
  "principals": [
    "string"
  ]
}
```

### Response (400)

```json
{
  "key": "string"
}
```