# Security rule: Get user actions

Information note**LOCKED.**   
  
This API is extremely reliable and will not be broken unless absolutely necessary.

## Method

POST

## Path

/qrs/systemrule/security/useractions?privileges={appendprivileges}

## Description

Get a list that contains information on the users and the number of objects that each user is allowed to perform an action on based on resource type, a selection of resources, and a selection of actions. Optionally, add privileges to the returned entities.

## Body

```
UserInput:
{
   "type": "App" // or any type at all,
   "selectionSetId": "[GUID]",
   "flags": what the user is allowed to do,
   "limit": integer
   "userFilter": some filter
}
```

## Return value

```
List<UserActions>:
[
   {
      "user": {
         "id": "[GUID] " // a user
      },
      [
         { "actions", "count" }, // actions are the same as the flags above
         { ... }
      ]
   },
   { ... }
]
```

## Optional parameters

* `{appendPrivileges}`: See [Adding privileges](https://help.qlik.com/en-US/sense-developer/November2024/Subsystems/RepositoryServiceAPI/Content/Sense_RepositoryServiceAPI/RepositoryServiceAPI-Adding-Privileges.htm).