{
  "info": {
    "_postman_id": "5359e5c8-305a-4f73-870b-9d793be192dc",
    "name": "WorkOS admin-portal permissions API",
    "description": "WorkOS REST API\n\nContact Support:\n Name: WorkOS\n Email: support@workos.com",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "createdAt": "2026-07-28T03:34:29.000Z",
    "updatedAt": "2026-07-28T03:34:29.000Z",
    "lastUpdatedBy": "35240",
    "uid": "35240-5359e5c8-305a-4f73-870b-9d793be192dc"
  },
  "item": [
    {
      "name": "authorization",
      "item": [
        {
          "name": "permissions",
          "item": [
            {
              "name": "{slug}",
              "item": [
                {
                  "name": "Get a Permission",
                  "id": "dfa2b17f-dce2-423e-b0f6-2f8833706ff8",
                  "protocolProfileBehavior": {
                    "disableBodyPruning": true
                  },
                  "request": {
                    "method": "GET",
                    "header": [
                      {
                        "key": "Accept",
                        "value": "application/json"
                      }
                    ],
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions/:slug",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions",
                        ":slug"
                      ],
                      "variable": [
                        {
                          "id": "3a53d9d6-5053-444b-94dd-e28f15b4e7b5",
                          "key": "slug",
                          "value": "<string>",
                          "description": "(Required) A unique key to reference the permission. Must be lowercase and contain only letters, numbers, hyphens, underscores, colons, periods, and asterisks."
                        }
                      ]
                    },
                    "description": "Retrieve a permission by its unique slug."
                  },
                  "response": [
                    {
                      "id": "9ea0ad03-729b-426f-b709-7ec68988cdf8",
                      "name": "OK",
                      "originalRequest": {
                        "method": "GET",
                        "header": [
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: bearer",
                            "key": "Authorization",
                            "value": "Bearer <token>"
                          }
                        ],
                        "url": {
                          "raw": "{{baseUrl}}/authorization/permissions/:slug",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "authorization",
                            "permissions",
                            ":slug"
                          ],
                          "variable": [
                            {
                              "key": "slug"
                            }
                          ]
                        }
                      },
                      "status": "OK",
                      "code": 200,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"object\": \"<string>\",\n  \"id\": \"<string>\",\n  \"slug\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\",\n  \"system\": \"<boolean>\",\n  \"resource_type_slug\": \"<string>\",\n  \"created_at\": \"<dateTime>\",\n  \"updated_at\": \"<dateTime>\"\n}",
                      "createdAt": "2026-07-28T03:34:30.000Z",
                      "updatedAt": "2026-07-28T03:34:30.000Z",
                      "uid": "35240-9ea0ad03-729b-426f-b709-7ec68988cdf8"
                    },
                    {
                      "id": "70003ae4-eea8-4b48-ba77-721f158352e6",
                      "name": "Not Found",
                      "originalRequest": {
                        "method": "GET",
                        "header": [
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: bearer",
                            "key": "Authorization",
                            "value": "Bearer <token>"
                          }
                        ],
                        "url": {
                          "raw": "{{baseUrl}}/authorization/permissions/:slug",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "authorization",
                            "permissions",
                            ":slug"
                          ],
                          "variable": [
                            {
                              "key": "slug"
                            }
                          ]
                        }
                      },
                      "status": "Not Found",
                      "code": 404,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"message\": \"<string>\"\n}",
                      "createdAt": "2026-07-28T03:34:30.000Z",
                      "updatedAt": "2026-07-28T03:34:30.000Z",
                      "uid": "35240-70003ae4-eea8-4b48-ba77-721f158352e6"
                    }
                  ],
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-dfa2b17f-dce2-423e-b0f6-2f8833706ff8"
                },
                {
                  "name": "Update a Permission",
                  "id": "84de01e4-b9fa-46de-8a32-daf8f19d7c2d",
                  "protocolProfileBehavior": {
                    "disableBodyPruning": true
                  },
                  "request": {
                    "method": "PATCH",
                    "header": [
                      {
                        "key": "Content-Type",
                        "value": "application/json"
                      },
                      {
                        "key": "Accept",
                        "value": "application/json"
                      }
                    ],
                    "body": {
                      "mode": "raw",
                      "raw": "{\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\"\n}",
                      "options": {
                        "raw": {
                          "headerFamily": "json",
                          "language": "json"
                        }
                      }
                    },
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions/:slug",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions",
                        ":slug"
                      ],
                      "variable": [
                        {
                          "id": "cbe0e5b2-e58c-4383-aab8-be76f03006ac",
                          "key": "slug",
                          "value": "<string>",
                          "description": "(Required) A unique key to reference the permission. Must be lowercase and contain only letters, numbers, hyphens, underscores, colons, periods, and asterisks."
                        }
                      ]
                    },
                    "description": "Update an existing permission. Only the fields provided in the request body will be updated."
                  },
                  "response": [
                    {
                      "id": "44a97ca2-ee5c-4678-b6b0-94fa22a24269",
                      "name": "OK",
                      "originalRequest": {
                        "method": "PATCH",
                        "header": [
                          {
                            "key": "Content-Type",
                            "value": "application/json"
                          },
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: bearer",
                            "key": "Authorization",
                            "value": "Bearer <token>"
                          }
                        ],
                        "body": {
                          "mode": "raw",
                          "raw": "{\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\"\n}",
                          "options": {
                            "raw": {
                              "headerFamily": "json",
                              "language": "json"
                            }
                          }
                        },
                        "url": {
                          "raw": "{{baseUrl}}/authorization/permissions/:slug",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "authorization",
                            "permissions",
                            ":slug"
                          ],
                          "variable": [
                            {
                              "key": "slug"
                            }
                          ]
                        }
                      },
                      "status": "OK",
                      "code": 200,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"object\": \"<string>\",\n  \"id\": \"<string>\",\n  \"slug\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\",\n  \"system\": \"<boolean>\",\n  \"resource_type_slug\": \"<string>\",\n  \"created_at\": \"<dateTime>\",\n  \"updated_at\": \"<dateTime>\"\n}",
                      "createdAt": "2026-07-28T03:34:30.000Z",
                      "updatedAt": "2026-07-28T03:34:30.000Z",
                      "uid": "35240-44a97ca2-ee5c-4678-b6b0-94fa22a24269"
                    },
                    {
                      "id": "bda49f30-da11-4bb4-b40b-87d119fa8688",
                      "name": "Forbidden",
                      "originalRequest": {
                        "method": "PATCH",
                        "header": [
                          {
                            "key": "Content-Type",
                            "value": "application/json"
                          },
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: bearer",
                            "key": "Authorization",
                            "value": "Bearer <token>"
                          }
                        ],
                        "body": {
                          "mode": "raw",
                          "raw": "{\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\"\n}",
                          "options": {
                            "raw": {
                              "headerFamily": "json",
                              "language": "json"
                            }
                          }
                        },
                        "url": {
                          "raw": "{{baseUrl}}/authorization/permissions/:slug",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "authorization",
                            "permissions",
                            ":slug"
                          ],
                          "variable": [
                            {
                              "key": "slug"
                            }
                          ]
                        }
                      },
                      "status": "Forbidden",
                      "code": 403,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"message\": \"<string>\"\n}",
                      "createdAt": "2026-07-28T03:34:30.000Z",
                      "updatedAt": "2026-07-28T03:34:30.000Z",
                      "uid": "35240-bda49f30-da11-4bb4-b40b-87d119fa8688"
                    },
                    {
                      "id": "6243e569-48de-417a-ba26-7cd0fa0343b0",
                      "name": "Not Found",
                      "originalRequest": {
                        "method": "PATCH",
                        "header": [
                          {
                            "key": "Content-Type",
                            "value": "application/json"
                          },
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: bearer",
                            "key": "Authorization",
                            "value": "Bearer <token>"
                          }
                        ],
                        "body": {
                          "mode": "raw",
                          "raw": "{\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\"\n}",
                          "options": {
                            "raw": {
                              "headerFamily": "json",
                              "language": "json"
                            }
                          }
                        },
                        "url": {
                          "raw": "{{baseUrl}}/authorization/permissions/:slug",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "authorization",
                            "permissions",
                            ":slug"
                          ],
                          "variable": [
                            {
                              "key": "slug"
                            }
                          ]
                        }
                      },
                      "status": "Not Found",
                      "code": 404,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"message\": \"<string>\"\n}",
                      "createdAt": "2026-07-28T03:34:30.000Z",
                      "updatedAt": "2026-07-28T03:34:30.000Z",
                      "uid": "35240-6243e569-48de-417a-ba26-7cd0fa0343b0"
                    },
                    {
                      "id": "435f4f21-503f-4abd-b2f5-2ce404e26931",
                      "name": "Unprocessable Entity",
                      "originalRequest": {
                        "method": "PATCH",
                        "header": [
                          {
                            "key": "Content-Type",
                            "value": "application/json"
                          },
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: bearer",
                            "key": "Authorization",
                            "value": "Bearer <token>"
                          }
                        ],
                        "body": {
                          "mode": "raw",
                          "raw": "{\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\"\n}",
                          "options": {
                            "raw": {
                              "headerFamily": "json",
                              "language": "json"
                            }
                          }
                        },
                        "url": {
                          "raw": "{{baseUrl}}/authorization/permissions/:slug",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "authorization",
                            "permissions",
                            ":slug"
                          ],
                          "variable": [
                            {
                              "key": "slug"
                            }
                          ]
                        }
                      },
                      "status": "Unprocessable Entity (WebDAV) (RFC 4918)",
                      "code": 422,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"message\": \"<string>\"\n}",
                      "createdAt": "2026-07-28T03:34:30.000Z",
                      "updatedAt": "2026-07-28T03:34:30.000Z",
                      "uid": "35240-435f4f21-503f-4abd-b2f5-2ce404e26931"
                    }
                  ],
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-84de01e4-b9fa-46de-8a32-daf8f19d7c2d"
                },
                {
                  "name": "Delete a Permission",
                  "id": "b2d66e82-d627-4490-ad63-ca0a15dad22a",
                  "protocolProfileBehavior": {
                    "disableBodyPruning": true
                  },
                  "request": {
                    "method": "DELETE",
                    "header": [
                      {
                        "key": "Accept",
                        "value": "application/json"
                      }
                    ],
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions/:slug",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions",
                        ":slug"
                      ],
                      "variable": [
                        {
                          "id": "2288ed3c-8f41-47cf-a23d-a2577872544b",
                          "key": "slug",
                          "value": "<string>",
                          "description": "(Required) A unique key to reference the permission. Must be lowercase and contain only letters, numbers, hyphens, underscores, colons, periods, and asterisks."
                        }
                      ]
                    },
                    "description": "Delete an existing permission. System permissions cannot be deleted."
                  },
                  "response": [
                    {
                      "id": "20b2f3af-1384-4db9-8e3f-e948ca1af012",
                      "name": "No Content",
                      "originalRequest": {
                        "method": "DELETE",
                        "header": [
                          {
                            "description": "Added as a part of security scheme: bearer",
                            "key": "Authorization",
                            "value": "Bearer <token>"
                          }
                        ],
                        "url": {
                          "raw": "{{baseUrl}}/authorization/permissions/:slug",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "authorization",
                            "permissions",
                            ":slug"
                          ],
                          "variable": [
                            {
                              "key": "slug"
                            }
                          ]
                        }
                      },
                      "status": "No Content",
                      "code": 204,
                      "_postman_previewlanguage": "text",
                      "header": [],
                      "cookie": [],
                      "responseTime": null,
                      "body": null,
                      "createdAt": "2026-07-28T03:34:30.000Z",
                      "updatedAt": "2026-07-28T03:34:30.000Z",
                      "uid": "35240-20b2f3af-1384-4db9-8e3f-e948ca1af012"
                    },
                    {
                      "id": "7f15e794-341e-4b8a-bf28-e61eb094ad3b",
                      "name": "Forbidden",
                      "originalRequest": {
                        "method": "DELETE",
                        "header": [
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: bearer",
                            "key": "Authorization",
                            "value": "Bearer <token>"
                          }
                        ],
                        "url": {
                          "raw": "{{baseUrl}}/authorization/permissions/:slug",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "authorization",
                            "permissions",
                            ":slug"
                          ],
                          "variable": [
                            {
                              "key": "slug"
                            }
                          ]
                        }
                      },
                      "status": "Forbidden",
                      "code": 403,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"message\": \"<string>\"\n}",
                      "createdAt": "2026-07-28T03:34:30.000Z",
                      "updatedAt": "2026-07-28T03:34:30.000Z",
                      "uid": "35240-7f15e794-341e-4b8a-bf28-e61eb094ad3b"
                    },
                    {
                      "id": "59e312d0-2084-47ab-9886-89de83971102",
                      "name": "Not Found",
                      "originalRequest": {
                        "method": "DELETE",
                        "header": [
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: bearer",
                            "key": "Authorization",
                            "value": "Bearer <token>"
                          }
                        ],
                        "url": {
                          "raw": "{{baseUrl}}/authorization/permissions/:slug",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "authorization",
                            "permissions",
                            ":slug"
                          ],
                          "variable": [
                            {
                              "key": "slug"
                            }
                          ]
                        }
                      },
                      "status": "Not Found",
                      "code": 404,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"message\": \"<string>\"\n}",
                      "createdAt": "2026-07-28T03:34:30.000Z",
                      "updatedAt": "2026-07-28T03:34:30.000Z",
                      "uid": "35240-59e312d0-2084-47ab-9886-89de83971102"
                    }
                  ],
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-b2d66e82-d627-4490-ad63-ca0a15dad22a"
                }
              ],
              "id": "467abb57-49a9-416f-a181-227d1592c396",
              "createdAt": "2026-07-28T03:34:30.000Z",
              "updatedAt": "2026-07-28T03:34:30.000Z",
              "uid": "35240-467abb57-49a9-416f-a181-227d1592c396"
            },
            {
              "name": "List Permissions",
              "id": "008c91be-26a7-4e1e-88d2-b616204bcc1a",
              "protocolProfileBehavior": {
                "disableBodyPruning": true
              },
              "request": {
                "method": "GET",
                "header": [
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "url": {
                  "raw": "{{baseUrl}}/authorization/permissions?before=<string>&after=<string>&limit=10&order=desc",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "authorization",
                    "permissions"
                  ],
                  "query": [
                    {
                      "description": "An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `\"obj_123\"`, your subsequent call can include `before=\"obj_123\"` to fetch a new batch of objects before `\"obj_123\"`.",
                      "key": "before",
                      "value": "<string>"
                    },
                    {
                      "description": "An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `\"obj_123\"`, your subsequent call can include `after=\"obj_123\"` to fetch a new batch of objects after `\"obj_123\"`.",
                      "key": "after",
                      "value": "<string>"
                    },
                    {
                      "description": "Upper limit on the number of objects to return, between `1` and `100`.",
                      "key": "limit",
                      "value": "10"
                    },
                    {
                      "description": "Order the results by the creation time. Supported values are `\"asc\"` (ascending), `\"desc\"` (descending), and `\"normal\"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.",
                      "key": "order",
                      "value": "desc"
                    }
                  ]
                },
                "description": "Get a list of all permissions in your WorkOS environment."
              },
              "response": [
                {
                  "id": "a5f07f6d-aece-45bf-bac6-30b719b11e1d",
                  "name": "OK",
                  "originalRequest": {
                    "method": "GET",
                    "header": [
                      {
                        "key": "Accept",
                        "value": "application/json"
                      },
                      {
                        "description": "Added as a part of security scheme: bearer",
                        "key": "Authorization",
                        "value": "Bearer <token>"
                      }
                    ],
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions?before=<string>&after=<string>&limit=10&order=desc",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions"
                      ],
                      "query": [
                        {
                          "description": "An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `\"obj_123\"`, your subsequent call can include `before=\"obj_123\"` to fetch a new batch of objects before `\"obj_123\"`.",
                          "key": "before",
                          "value": "<string>"
                        },
                        {
                          "description": "An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `\"obj_123\"`, your subsequent call can include `after=\"obj_123\"` to fetch a new batch of objects after `\"obj_123\"`.",
                          "key": "after",
                          "value": "<string>"
                        },
                        {
                          "description": "Upper limit on the number of objects to return, between `1` and `100`.",
                          "key": "limit",
                          "value": "10"
                        },
                        {
                          "description": "Order the results by the creation time. Supported values are `\"asc\"` (ascending), `\"desc\"` (descending), and `\"normal\"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.",
                          "key": "order",
                          "value": "desc"
                        }
                      ]
                    }
                  },
                  "status": "OK",
                  "code": 200,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"object\": \"<string>\",\n  \"data\": [\n    {\n      \"object\": \"<string>\",\n      \"id\": \"<string>\",\n      \"slug\": \"<string>\",\n      \"name\": \"<string>\",\n      \"description\": \"<string,null>\",\n      \"system\": \"<boolean>\",\n      \"resource_type_slug\": \"<string>\",\n      \"created_at\": \"<dateTime>\",\n      \"updated_at\": \"<dateTime>\"\n    },\n    {\n      \"object\": \"<string>\",\n      \"id\": \"<string>\",\n      \"slug\": \"<string>\",\n      \"name\": \"<string>\",\n      \"description\": \"<string,null>\",\n      \"system\": \"<boolean>\",\n      \"resource_type_slug\": \"<string>\",\n      \"created_at\": \"<dateTime>\",\n      \"updated_at\": \"<dateTime>\"\n    }\n  ],\n  \"list_metadata\": {\n    \"before\": \"<string,null>\",\n    \"after\": \"<string,null>\"\n  }\n}",
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-a5f07f6d-aece-45bf-bac6-30b719b11e1d"
                },
                {
                  "id": "400462f3-bfab-4036-aef1-d74f44b468f6",
                  "name": "Not Found",
                  "originalRequest": {
                    "method": "GET",
                    "header": [
                      {
                        "key": "Accept",
                        "value": "application/json"
                      },
                      {
                        "description": "Added as a part of security scheme: bearer",
                        "key": "Authorization",
                        "value": "Bearer <token>"
                      }
                    ],
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions?before=<string>&after=<string>&limit=10&order=desc",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions"
                      ],
                      "query": [
                        {
                          "description": "An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `\"obj_123\"`, your subsequent call can include `before=\"obj_123\"` to fetch a new batch of objects before `\"obj_123\"`.",
                          "key": "before",
                          "value": "<string>"
                        },
                        {
                          "description": "An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `\"obj_123\"`, your subsequent call can include `after=\"obj_123\"` to fetch a new batch of objects after `\"obj_123\"`.",
                          "key": "after",
                          "value": "<string>"
                        },
                        {
                          "description": "Upper limit on the number of objects to return, between `1` and `100`.",
                          "key": "limit",
                          "value": "10"
                        },
                        {
                          "description": "Order the results by the creation time. Supported values are `\"asc\"` (ascending), `\"desc\"` (descending), and `\"normal\"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.",
                          "key": "order",
                          "value": "desc"
                        }
                      ]
                    }
                  },
                  "status": "Not Found",
                  "code": 404,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"message\": \"<string>\"\n}",
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-400462f3-bfab-4036-aef1-d74f44b468f6"
                }
              ],
              "createdAt": "2026-07-28T03:34:30.000Z",
              "updatedAt": "2026-07-28T03:34:30.000Z",
              "uid": "35240-008c91be-26a7-4e1e-88d2-b616204bcc1a"
            },
            {
              "name": "Create a Permission",
              "id": "ba9943c1-85e5-48dc-b880-b51b54dbfaf7",
              "protocolProfileBehavior": {
                "disableBodyPruning": true
              },
              "request": {
                "method": "POST",
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  },
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"slug\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\",\n  \"resource_type_slug\": \"<string>\"\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/authorization/permissions",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "authorization",
                    "permissions"
                  ]
                },
                "description": "Create a new permission in your WorkOS environment. The permission can then be assigned to environment roles and custom roles."
              },
              "response": [
                {
                  "id": "231fbf40-ed04-4a0c-9722-9df597113c60",
                  "name": "Created",
                  "originalRequest": {
                    "method": "POST",
                    "header": [
                      {
                        "key": "Content-Type",
                        "value": "application/json"
                      },
                      {
                        "key": "Accept",
                        "value": "application/json"
                      },
                      {
                        "description": "Added as a part of security scheme: bearer",
                        "key": "Authorization",
                        "value": "Bearer <token>"
                      }
                    ],
                    "body": {
                      "mode": "raw",
                      "raw": "{\n  \"slug\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\",\n  \"resource_type_slug\": \"<string>\"\n}",
                      "options": {
                        "raw": {
                          "headerFamily": "json",
                          "language": "json"
                        }
                      }
                    },
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions"
                      ]
                    }
                  },
                  "status": "Created",
                  "code": 201,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"object\": \"<string>\",\n  \"id\": \"<string>\",\n  \"slug\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\",\n  \"system\": \"<boolean>\",\n  \"resource_type_slug\": \"<string>\",\n  \"created_at\": \"<dateTime>\",\n  \"updated_at\": \"<dateTime>\"\n}",
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-231fbf40-ed04-4a0c-9722-9df597113c60"
                },
                {
                  "id": "949df507-811a-4736-ae6a-3a5dbdc3df9d",
                  "name": "Bad Request",
                  "originalRequest": {
                    "method": "POST",
                    "header": [
                      {
                        "key": "Content-Type",
                        "value": "application/json"
                      },
                      {
                        "key": "Accept",
                        "value": "application/json"
                      },
                      {
                        "description": "Added as a part of security scheme: bearer",
                        "key": "Authorization",
                        "value": "Bearer <token>"
                      }
                    ],
                    "body": {
                      "mode": "raw",
                      "raw": "{\n  \"slug\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\",\n  \"resource_type_slug\": \"<string>\"\n}",
                      "options": {
                        "raw": {
                          "headerFamily": "json",
                          "language": "json"
                        }
                      }
                    },
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions"
                      ]
                    }
                  },
                  "status": "Bad Request",
                  "code": 400,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"code\": \"<string>\",\n  \"message\": \"<string>\"\n}",
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-949df507-811a-4736-ae6a-3a5dbdc3df9d"
                },
                {
                  "id": "dd97be4a-ecb6-45a4-87da-134d25fdefec",
                  "name": "Not Found",
                  "originalRequest": {
                    "method": "POST",
                    "header": [
                      {
                        "key": "Content-Type",
                        "value": "application/json"
                      },
                      {
                        "key": "Accept",
                        "value": "application/json"
                      },
                      {
                        "description": "Added as a part of security scheme: bearer",
                        "key": "Authorization",
                        "value": "Bearer <token>"
                      }
                    ],
                    "body": {
                      "mode": "raw",
                      "raw": "{\n  \"slug\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\",\n  \"resource_type_slug\": \"<string>\"\n}",
                      "options": {
                        "raw": {
                          "headerFamily": "json",
                          "language": "json"
                        }
                      }
                    },
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions"
                      ]
                    }
                  },
                  "status": "Not Found",
                  "code": 404,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"message\": \"<string>\"\n}",
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-dd97be4a-ecb6-45a4-87da-134d25fdefec"
                },
                {
                  "id": "66d21021-858d-4ae1-a24c-391eb34e9cd6",
                  "name": "New Response",
                  "originalRequest": {
                    "method": "POST",
                    "header": [
                      {
                        "key": "Content-Type",
                        "value": "application/json"
                      },
                      {
                        "key": "Accept",
                        "value": "application/json"
                      },
                      {
                        "description": "Added as a part of security scheme: bearer",
                        "key": "Authorization",
                        "value": "Bearer <token>"
                      }
                    ],
                    "body": {
                      "mode": "raw",
                      "raw": "{\n  \"slug\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\",\n  \"resource_type_slug\": \"<string>\"\n}",
                      "options": {
                        "raw": {
                          "headerFamily": "json",
                          "language": "json"
                        }
                      }
                    },
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions"
                      ]
                    }
                  },
                  "status": "Conflict",
                  "code": 409,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"code\": \"<string>\",\n  \"message\": \"<string>\"\n}",
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-66d21021-858d-4ae1-a24c-391eb34e9cd6"
                },
                {
                  "id": "9fe56a60-cad4-424d-b5d1-a3f19a5aa053",
                  "name": "Unprocessable Entity",
                  "originalRequest": {
                    "method": "POST",
                    "header": [
                      {
                        "key": "Content-Type",
                        "value": "application/json"
                      },
                      {
                        "key": "Accept",
                        "value": "application/json"
                      },
                      {
                        "description": "Added as a part of security scheme: bearer",
                        "key": "Authorization",
                        "value": "Bearer <token>"
                      }
                    ],
                    "body": {
                      "mode": "raw",
                      "raw": "{\n  \"slug\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string,null>\",\n  \"resource_type_slug\": \"<string>\"\n}",
                      "options": {
                        "raw": {
                          "headerFamily": "json",
                          "language": "json"
                        }
                      }
                    },
                    "url": {
                      "raw": "{{baseUrl}}/authorization/permissions",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "authorization",
                        "permissions"
                      ]
                    }
                  },
                  "status": "Unprocessable Entity (WebDAV) (RFC 4918)",
                  "code": 422,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"message\": \"<string>\"\n}",
                  "createdAt": "2026-07-28T03:34:30.000Z",
                  "updatedAt": "2026-07-28T03:34:30.000Z",
                  "uid": "35240-9fe56a60-cad4-424d-b5d1-a3f19a5aa053"
                }
              ],
              "createdAt": "2026-07-28T03:34:30.000Z",
              "updatedAt": "2026-07-28T03:34:30.000Z",
              "uid": "35240-ba9943c1-85e5-48dc-b880-b51b54dbfaf7"
            }
          ],
          "id": "b83c8ee6-922d-45fc-8b61-9634c0be0adc",
          "createdAt": "2026-07-28T03:34:30.000Z",
          "updatedAt": "2026-07-28T03:34:30.000Z",
          "uid": "35240-b83c8ee6-922d-45fc-8b61-9634c0be0adc"
        }
      ],
      "id": "751c46af-e027-4c88-aad6-c6a594a988ae",
      "createdAt": "2026-07-28T03:34:30.000Z",
      "updatedAt": "2026-07-28T03:34:30.000Z",
      "uid": "35240-751c46af-e027-4c88-aad6-c6a594a988ae"
    }
  ],
  "auth": {
    "type": "bearer",
    "bearer": [
      {
        "key": "token",
        "value": "{{bearerToken}}",
        "type": "string"
      }
    ]
  },
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://api.workos.com"
    }
  ]
}