---
title: Privileges
description: Privileges are a part of internal roles, and can be created or modified using the REST calls specified in Internal objects. Additionally, openidm/privilege can be used for getting information about privileges on a resource as they apply to the authenticated user.
component: pingidm
version: 8.1
page_id: pingidm:rest-api-reference:endpoints/rest-privileges
canonical_url: https://docs.pingidentity.com/pingidm/8.1/rest-api-reference/endpoints/rest-privileges.html
keywords: ["REST API", "Delegated Administration"]
---

# Privileges

Privileges are a part of internal roles, and can be created or modified using the REST calls specified in [Internal objects](rest-internal.html). Additionally, `openidm/privilege` can be used for getting information about privileges on a resource as they apply to the authenticated user.

| URI                                        | HTTP Operation | Description                                                                                                    |
| ------------------------------------------ | -------------- | -------------------------------------------------------------------------------------------------------------- |
| /openidm/privilege?\_action=listPrivileges | POST           | Lists an array of privilege paths for the authenticated user, with additional detail required by the admin UI. |
| /openidm/privilege/resource                | GET            | Lists the privileges for the logged in user associated with the given resource path.                           |
| /openidm/privilege/resource/guid           | GET            | Lists the privileges for the logged in user associated with the specified object.                              |