> ## Documentation Index > Fetch the complete documentation index at: https://help.dingtalk.io/llms.txt > Use this file to discover all available pages before exploring further. # Add permissions > Call this API to grant access permissions to file members based on parameters such as the file uuid, operator unionId, and permission ID. Call this API to add permissions for a permission member based on the file UUID, operator unionId, role ID, and other information. ## Request ### Basic information | Field | Value | | -------------------- | ------------------------------------------------------------------------------------------------------- | | HTTP URL | `https://api.dingtalk.io/v2.0/storage/spaces/dentries/{dentryUuid}/permissions` | | HTTP Method | POST | | Supported app type | appType-Internal app | | Required permissions | permission-Storage.Permission.Write-Write permission for organization storage authorization information | ### Request headers | Name | Type | Required | Description | | --------------------------- | ------ | -------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | x-acs-dingtalk-access-token | String | Yes | The access credential used to call this API. Obtain it by calling the [Get the access token of an internal app](/open/development/obtain-the-access-token-of-an-internal-app) API. | ### Path parameters | Name | Type | Required | Description | | ---------- | ------ | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | dentryUuid | String | Yes | The file UUID. Call the [File Search](/open/development/search-for-files) API or the [Get dentryUuid information](/open/development/api-getuuidbydentryid) API to obtain the value of the `dentryUuid` response parameter. | ### Query parameters | Name | Type | Required | Description | | ------- | ------ | -------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | | unionId | String | Yes | The unionId of the user. Call the [Query user details](/open/development/query-user-details) API to obtain the value of the unionid parameter. | ### Request body | Name | Type | Required | Description | | -------- | ------ | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | roleId | String | Yes | The role ID. Enum values: - **OWNER**: Owner, with the following permission scopes: - PermissionPrivilegeEnum.INFO - PermissionPrivilegeEnum.LIST - PermissionPrivilegeEnum.PREVIEW - PermissionPrivilegeEnum.READ - PermissionPrivilegeEnum.WRITE - PermissionPrivilegeEnum.DOWNLOAD - PermissionPrivilegeEnum.ADD - PermissionPrivilegeEnum.DELETE - PermissionPrivilegeEnum.MODIFY - PermissionPrivilegeEnum.COPY - PermissionPrivilegeEnum.RENAME - PermissionPrivilegeEnum.READ\_PERMISSION - PermissionPrivilegeEnum.WRITE\_PERMISSION - PermissionPrivilegeEnum.ASSIGN - **MANAGER**: Manager, with the following permission scopes: - PermissionPrivilegeEnum.INFO - PermissionPrivilegeEnum.LIST - PermissionPrivilegeEnum.PREVIEW - PermissionPrivilegeEnum.READ - PermissionPrivilegeEnum.WRITE - PermissionPrivilegeEnum.DOWNLOAD - PermissionPrivilegeEnum.ADD - PermissionPrivilegeEnum.DELETE - PermissionPrivilegeEnum.MODIFY - PermissionPrivilegeEnum.COPY - PermissionPrivilegeEnum.RENAME - PermissionPrivilegeEnum.READ\_PERMISSION - PermissionPrivilegeEnum.WRITE\_PERMISSION - **EDITOR**: Editor, with the following permission scopes: - PermissionPrivilegeEnum.INFO - PermissionPrivilegeEnum.LIST - PermissionPrivilegeEnum.PREVIEW - PermissionPrivilegeEnum.READ - PermissionPrivilegeEnum.WRITE - PermissionPrivilegeEnum.DOWNLOAD - PermissionPrivilegeEnum.ADD - **DOWNLOADER**: Viewer with download permission, with the following permission scopes: - PermissionPrivilegeEnum.INFO - PermissionPrivilegeEnum.LIST - PermissionPrivilegeEnum.PREVIEW - PermissionPrivilegeEnum.READ - PermissionPrivilegeEnum.DOWNLOAD - **READER**: View-only, with the following permission scopes: - PermissionPrivilegeEnum.INFO - PermissionPrivilegeEnum.LIST - PermissionPrivilegeEnum.PREVIEW | | members | Array | Yes | The list of permission members. A maximum of 30 members is allowed. | | type | String | Yes | The type of the permission member. Enum values: - **ORG**: Organization - **DEPT**: Department - **TAG**: Custom tag - **CONVERSATION**: Chat - **USER**: User | | id | String | Yes | The ID of the permission member: - When `type=ORG`, id is the organization ID. - When `type=DEPT`, id is the department ID. - When `type=TAG`, id is the tag ID. - When `type=CONVERSATION`, id is the chat ID. - When `type=USER`, id is the userId of the employee. | | corpId | String | No | The organization to which the permission belongs: - If an organization ID exists, the permission is automatically cleared when the corresponding member leaves the organization. - If memberType is dept, an organization ID is required. | | name | String | No | The user name: - When `type=ORG`, name is the organization name. - When `type=DEPT`, name is the department name. - When `type=TAG`, name is the tag name. - When `type=CONVERSATION`, name is the chat name. - When `type=USER`, name is the employee name. | | option | Object | No | Optional parameters. | | duration | Long | No | The validity period, in seconds. - Currently, only Spaces with an OwnerType of APP support temporary permissions. - The maximum value is 3600. | ### Request example HTTP ```http theme={"theme":{"light":"github-light","dark":"github-dark"}} POST /v2.0/storage/spaces/dentries/EpGBxxxx7R35y/permissions?unionId=tXguNxxxxAiEiE HTTP/1.1 Host:api.dingtalk.io x-acs-dingtalk-access-token:access_token Content-Type:application/json { "roleId" : "MANAGER", "members" : [ { "type" : "USER", "id" : "01472825524039877041", "corpId" : "ding16b241fd05********288" } ], "option" : { "duration" : 3600 } } ``` Java ```java theme={"theme":{"light":"github-light","dark":"github-dark"}} package com.aliyun.sample; import com.aliyun.tea.*; public class Sample { /** * description : *

Initialize the account Client with the Token

* @return Client * * @throws Exception */ public static com.aliyun.dingtalkstorage_2_0.Client createClient() throws Exception { com.aliyun.teaopenapi.models.Config config = new com.aliyun.teaopenapi.models.Config(); config.protocol = "https"; config.regionId = "central"; return new com.aliyun.dingtalkstorage_2_0.Client(config); } public static void main(String[] args_) throws Exception { com.aliyun.dingtalkstorage_2_0.Client client = Sample.createClient(); com.aliyun.dingtalkstorage_2_0.models.AddPermissionHeaders addPermissionHeaders = new com.aliyun.dingtalkstorage_2_0.models.AddPermissionHeaders(); addPermissionHeaders.xAcsDingtalkAccessToken = ""; com.aliyun.dingtalkstorage_2_0.models.AddPermissionRequest.AddPermissionRequestOption option = new com.aliyun.dingtalkstorage_2_0.models.AddPermissionRequest.AddPermissionRequestOption() .setDuration(3600L); com.aliyun.dingtalkstorage_2_0.models.AddPermissionRequest.AddPermissionRequestMembers members0 = new com.aliyun.dingtalkstorage_2_0.models.AddPermissionRequest.AddPermissionRequestMembers() .setType("USER") .setId("01472825524039877041") .setCorpId("ding16b241fd05********288"); com.aliyun.dingtalkstorage_2_0.models.AddPermissionRequest addPermissionRequest = new com.aliyun.dingtalkstorage_2_0.models.AddPermissionRequest() .setUnionId("tXguNxxxxAiEiE") .setRoleId("MANAGER") .setMembers(java.util.Arrays.asList( members0 )) .setOption(option); try { client.addPermissionWithOptions("EpGBxxxx7R35y", addPermissionRequest, addPermissionHeaders, new com.aliyun.teautil.models.RuntimeOptions()); } catch (TeaException err) { if (!com.aliyun.teautil.Common.empty(err.code) && !com.aliyun.teautil.Common.empty(err.message)) { // err contains the code and message properties, which help you locate the issue } } catch (Exception _err) { TeaException err = new TeaException(_err.getMessage(), _err); if (!com.aliyun.teautil.Common.empty(err.code) && !com.aliyun.teautil.Common.empty(err.message)) { // err contains the code and message properties, which help you locate the issue } } } } ``` Python ```python theme={"theme":{"light":"github-light","dark":"github-dark"}} # -*- coding: utf-8 -*- # This file is auto-generated, don't edit it. Thanks. import os import sys import json from typing import List from alibabacloud_dingtalk.storage_2_0.client import Client as dingtalkstorage_2_0Client from alibabacloud_tea_openapi import models as open_api_models from alibabacloud_dingtalk.storage_2_0 import models as dingtalkstorage__2__0_models from alibabacloud_tea_util import models as util_models from alibabacloud_tea_util.client import Client as UtilClient class Sample: def __init__(self): pass @staticmethod def create_client() -> dingtalkstorage_2_0Client: """ Initialize the account Client with the Token @return: Client @throws Exception """ config = open_api_models.Config() config.protocol = 'https' config.region_id = 'central' return dingtalkstorage_2_0Client(config) @staticmethod def main( args: List[str], ) -> None: client = Sample.create_client() add_permission_headers = dingtalkstorage__2__0_models.AddPermissionHeaders() add_permission_headers.x_acs_dingtalk_access_token = '' option = dingtalkstorage__2__0_models.AddPermissionRequestOption( duration=3600 ) members_0 = dingtalkstorage__2__0_models.AddPermissionRequestMembers( type='USER', id='01472825524039877041', corp_id='ding16b241fd05********288' ) add_permission_request = dingtalkstorage__2__0_models.AddPermissionRequest( union_id='tXguNxxxxAiEiE', role_id='MANAGER', members=[ members_0 ], option=option ) try: client.add_permission_with_options('EpGBxxxx7R35y', add_permission_request, add_permission_headers, util_models.RuntimeOptions()) except Exception as err: if not UtilClient.empty(err.code) and not UtilClient.empty(err.message): # err contains the code and message properties, which help you locate the issue pass @staticmethod async def main_async( args: List[str], ) -> None: client = Sample.create_client() add_permission_headers = dingtalkstorage__2__0_models.AddPermissionHeaders() add_permission_headers.x_acs_dingtalk_access_token = '' option = dingtalkstorage__2__0_models.AddPermissionRequestOption( duration=3600 ) members_0 = dingtalkstorage__2__0_models.AddPermissionRequestMembers( type='USER', id='01472825524039877041', corp_id='ding16b241fd05********288' ) add_permission_request = dingtalkstorage__2__0_models.AddPermissionRequest( union_id='tXguNxxxxAiEiE', role_id='MANAGER', members=[ members_0 ], option=option ) try: await client.add_permission_with_options_async('EpGBxxxx7R35y', add_permission_request, add_permission_headers, util_models.RuntimeOptions()) except Exception as err: if not UtilClient.empty(err.code) and not UtilClient.empty(err.message): # err contains the code and message properties, which help you locate the issue pass if __name__ == '__main__': Sample.main(sys.argv[1:]) ``` PHP ```java theme={"theme":{"light":"github-light","dark":"github-dark"}} protocol = "https"; $config->regionId = "central"; return new Dingtalk($config); } /** * @param string[] $args * @return void */ public static function main($args){ $client = self::createClient(); $addPermissionHeaders = new AddPermissionHeaders([]); $addPermissionHeaders->xAcsDingtalkAccessToken = ""; $option = new option([ "duration" => 3600 ]); $members0 = new members([ "type" => "USER", "id" => "01472825524039877041", "corpId" => "ding16b241fd05********288" ]); $addPermissionRequest = new AddPermissionRequest([ "unionId" => "tXguNxxxxAiEiE", "roleId" => "MANAGER", "members" => [ $members0 ], "option" => $option ]); try { $client->addPermissionWithOptions("EpGBxxxx7R35y", $addPermissionRequest, $addPermissionHeaders, new RuntimeOptions([])); } catch (Exception $err) { if (!($err instanceof TeaError)) { $err = new TeaError([], $err->getMessage(), $err->getCode(), $err); } if (!Utils::empty_($err->code) && !Utils::empty_($err->message)) { // err contains the code and message properties, which help you locate the issue } } } } $path = __DIR__ . \DIRECTORY_SEPARATOR . '..' . \DIRECTORY_SEPARATOR . 'vendor' . \DIRECTORY_SEPARATOR . 'autoload.php'; if (file_exists($path)) { require_once $path; } Sample::main(array_slice($argv, 1)); ``` Go ```go theme={"theme":{"light":"github-light","dark":"github-dark"}} package main import ( "encoding/json" "strings" "fmt" "os" util "github.com/alibabacloud-go/tea-utils/v2/service" dingtalkstorage_2_0 "github.com/alibabacloud-go/dingtalk/storage_2_0" openapi "github.com/alibabacloud-go/darabonba-openapi/v2/client" "github.com/alibabacloud-go/tea/tea" ) // Description: // // Initialize the account Client with the Token // // @return Client // // @throws Exception func CreateClient () (_result *dingtalkstorage_2_0.Client, _err error) { config := &openapi.Config{} config.Protocol = tea.String("https") config.RegionId = tea.String("central") _result = &dingtalkstorage_2_0.Client{} _result, _err = dingtalkstorage_2_0.NewClient(config) return _result, _err } func _main (args []*string) (_err error) { client, _err := CreateClient() if _err != nil { return _err } addPermissionHeaders := &dingtalkstorage_2_0.AddPermissionHeaders{} addPermissionHeaders.XAcsDingtalkAccessToken = tea.String("") option := &dingtalkstorage_2_0.AddPermissionRequestOption{ Duration: tea.Int64(3600), } members0 := &dingtalkstorage_2_0.AddPermissionRequestMembers{ Type: tea.String("USER"), Id: tea.String("01472825524039877041"), CorpId: tea.String("ding16b241fd05********288"), } addPermissionRequest := &dingtalkstorage_2_0.AddPermissionRequest{ UnionId: tea.String("tXguNxxxxAiEiE"), RoleId: tea.String("MANAGER"), Members: []*dingtalkstorage_2_0.AddPermissionRequestMembers{members0}, Option: option, } tryErr := func()(_e error) { defer func() { if r := tea.Recover(recover()); r != nil { _e = r } }() _, _err = client.AddPermissionWithOptions(tea.String("EpGBxxxx7R35y"), addPermissionRequest, addPermissionHeaders, &util.RuntimeOptions{}) if _err != nil { return _err } return nil }() if tryErr != nil { var err = &tea.SDKError{} if _t, ok := tryErr.(*tea.SDKError); ok { err = _t } else { err.Message = tea.String(tryErr.Error()) } if !tea.BoolValue(util.Empty(err.Code)) && !tea.BoolValue(util.Empty(err.Message)) { // err contains the code and message properties, which help you locate the issue } } return _err } func main() { err := _main(tea.StringSlice(os.Args[1:])) if err != nil { panic(err) } } ``` Node.js ```text theme={"theme":{"light":"github-light","dark":"github-dark"}} 'use strict'; // This file is auto-generated, don't edit it const Util = require('@alicloud/tea-util'); const dingtalkstorage_2_0 = require('@alicloud/dingtalk/storage_2_0'); const OpenApi = require('@alicloud/openapi-client'); const Tea = require('@alicloud/tea-typescript'); class Client { /** * Initialize the account Client with the Token * @return Client * @throws Exception */ static createClient() { let config = new OpenApi.Config({ }); config.protocol = 'https'; config.regionId = 'central'; return new dingtalkstorage_2_0.default(config); } static async main(args) { let client = Client.createClient(); let addPermissionHeaders = new dingtalkstorage_2_0.AddPermissionHeaders({ }); addPermissionHeaders.xAcsDingtalkAccessToken = ''; let option = new dingtalkstorage_2_0.AddPermissionRequestOption({ duration: 3600, }); let members0 = new dingtalkstorage_2_0.AddPermissionRequestMembers({ type: 'USER', id: '01472825524039877041', corpId: 'ding16b241fd05********288', }); let addPermissionRequest = new dingtalkstorage_2_0.AddPermissionRequest({ unionId: 'tXguNxxxxAiEiE', roleId: 'MANAGER', members: [ members0 ], option: option, }); try { await client.addPermissionWithOptions('EpGBxxxx7R35y', addPermissionRequest, addPermissionHeaders, new Util.RuntimeOptions({ })); } catch (err) { if (!Util.default.empty(err.code) && !Util.default.empty(err.message)) { // err contains the code and message properties, which help you locate the issue } } } } exports.Client = Client; Client.main(process.argv.slice(2)); ``` C# ```java theme={"theme":{"light":"github-light","dark":"github-dark"}} using Newtonsoft.Json; using System; using System.Collections; using System.Collections.Generic; using System.IO; using System.Threading.Tasks; using Tea; using Tea.Utils; namespace AlibabaCloud.SDK.Sample { public class Sample { /// Description: /// /// Initialize the account Client with the Token /// /// /// /// Client /// /// /// Exception: /// Exception public static AlibabaCloud.SDK.Dingtalkstorage_2_0.Client CreateClient() { AlibabaCloud.OpenApiClient.Models.Config config = new AlibabaCloud.OpenApiClient.Models.Config(); config.Protocol = "https"; config.RegionId = "central"; return new AlibabaCloud.SDK.Dingtalkstorage_2_0.Client(config); } public static void Main(string[] args) { AlibabaCloud.SDK.Dingtalkstorage_2_0.Client client = CreateClient(); AlibabaCloud.SDK.Dingtalkstorage_2_0.Models.AddPermissionHeaders addPermissionHeaders = new AlibabaCloud.SDK.Dingtalkstorage_2_0.Models.AddPermissionHeaders(); addPermissionHeaders.XAcsDingtalkAccessToken = ""; AlibabaCloud.SDK.Dingtalkstorage_2_0.Models.AddPermissionRequest.AddPermissionRequestOption option = new AlibabaCloud.SDK.Dingtalkstorage_2_0.Models.AddPermissionRequest.AddPermissionRequestOption { Duration = 3600, }; AlibabaCloud.SDK.Dingtalkstorage_2_0.Models.AddPermissionRequest.AddPermissionRequestMembers members0 = new AlibabaCloud.SDK.Dingtalkstorage_2_0.Models.AddPermissionRequest.AddPermissionRequestMembers { Type = "USER", Id = "01472825524039877041", CorpId = "ding16b241fd05********288", }; AlibabaCloud.SDK.Dingtalkstorage_2_0.Models.AddPermissionRequest addPermissionRequest = new AlibabaCloud.SDK.Dingtalkstorage_2_0.Models.AddPermissionRequest { UnionId = "tXguNxxxxAiEiE", RoleId = "MANAGER", Members = new List { members0 }, Option = option, }; try { client.AddPermissionWithOptions("EpGBxxxx7R35y", addPermissionRequest, addPermissionHeaders, new AlibabaCloud.TeaUtil.Models.RuntimeOptions()); } catch (TeaException err) { if (!AlibabaCloud.TeaUtil.Common.Empty(err.Code) && !AlibabaCloud.TeaUtil.Common.Empty(err.Message)) { // err contains the code and message properties, which help you locate the issue } } catch (Exception _err) { TeaException err = new TeaException(new Dictionary { { "message", _err.Message } }); if (!AlibabaCloud.TeaUtil.Common.Empty(err.Code) && !AlibabaCloud.TeaUtil.Common.Empty(err.Message)) { // err contains the code and message properties, which help you locate the issue } } } } } ``` ## Response ### Response body | Name | Type | Description | | ------- | ------- | ------------------------------------------ | | success | Boolean | Indicates whether the operation succeeded. | ### Response body example ```text theme={"theme":{"light":"github-light","dark":"github-dark"}} HTTP/1.1 200 OK Content-Type:application/json { "success" : true } ``` ### Error codes If an error is returned when you call this API, look up the solution in the [Global error codes](/open/development/server-api-error-codes-1) document based on the error message. | HttpCode | Error code | Error message | Description | | -------- | ------------------------------- | ------------- | ------------------------------------------ | | 400 | paramError | %s | Parameter error | | 400 | paramError.dentryUuid | %s | Parameter error - dentryUuid | | 400 | paramError.roleId | %s | Parameter error - roleId | | 400 | paramError.permissionMemberType | %s | Parameter error - permissionMemberType | | 403 | permissionDenied | %s | The user lacks the required authorization. | | 404 | spaceNotExist | %s | The space does not exist. | | 404 | dentryNotExist | %s | The file does not exist. | | 500 | systemError | %s | System error | | 500 | unknownError | Unknown Error | Unknown error | | 503 | operationTimeout | %s | Request timed out |