# Grant content access

Grants resource-level access on one or more content entities to specified users or groups. Each grant specifies an access level of READ (view and retrieve) or MODIFY (update and delete).

Request:
entityIds              - List of content entity IDs to grant access on.
principalPermissions   - List of grants, each specifying a user or group ID and the permission level to grant (READ or MODIFY).

Response:
entityIds              - List of entity IDs on which access was successfully granted.
principalPermissions   - The list of grants that were applied.

Endpoint: POST /api/v1/access-control/grant-access
Version: 3.0
Security: bearerAuth

## Request fields (application/json):

  - `entityIds` (array)

  - `principalPermissions` (array)

  - `principalPermissions.principalResourceId` (string)
    Rule data fields

  - `principalPermissions.permission` (integer)
    Enum: 0, 1

## Response 200 fields (application/json):

  - `entityIds` (array)

  - `principalPermissions` (array)

  - `principalPermissions.principalResourceId` (string)
    Rule data fields

  - `principalPermissions.permission` (integer)
    Enum: 0, 1

## Response 400 fields (application/json):

  - `message` (string)

## Response 401 fields (application/json):

  - `message` (string)

## Response 403 fields (application/json):

  - `message` (string)

## Response 404 fields (application/json):

  - `message` (string)

## Response 409 fields (application/json):

  - `message` (string)

## Response 429 fields (application/json):

  - `message` (string)

## Response 499 fields (application/json):

  - `message` (string)

## Response 500 fields (application/json):

  - `message` (string)

## Response 501 fields (application/json):

  - `message` (string)

## Response 503 fields (application/json):

  - `message` (string)

## Response 504 fields (application/json):

  - `message` (string)