---
title: pingcli pingone authorize application-roles app-role-permissions get
description: Read a specific application role permission
component: pingcli
version: 1.2
page_id: pingcli:command_reference:pingcli_pingone_authorize_application-roles_app-role-permissions_get
canonical_url: https://developer.pingidentity.com/pingcli/1.2/command_reference/pingcli_pingone_authorize_application-roles_app-role-permissions_get.html
llms_txt: https://developer.pingidentity.com/pingcli/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 1, 2026
section_ids:
  synopsis: Synopsis
  examples: Examples
  options: Options
  options-inherited-from-parent-commands: Options inherited from parent commands
  more-information: More information
---

# pingcli pingone authorize application-roles app-role-permissions get

Read a specific application role permission

## Synopsis

Read a specific application role permission in a PingOne Authorize environment

```
pingcli pingone authorize application-roles app-role-permissions get [flags]
```

## Examples

```
  # Read a specific application role permission
  pingcli pingone authorize application-roles app-role-permissions get --environment-id <env-id> --application-role-id <role-id> --permission-id <permission-id>
```

## Options

```
  -e, --environment-id string        The PingOne environment ID
  -h, --help                         help for get
  -p, --permission-id string         The application role permission ID
  -r, --application-role-id string   The application role ID
      --template string              A Go text/template string. When provided, the command output is rendered through the template instead of the default format. The template receives the command's structured response data, so fields are addressed by their JSON names and may be traversed by path. Example: --template '{{.id}}' or --template '{{.data._embedded.environments}}'
```

## Options inherited from parent commands

```
  -C, --config string           The relative or full path to a custom Ping CLI configuration file. (default $HOME/.pingcli/config.yaml)
  -D, --detailed-exitcode       Enable detailed exit code output. (default false) 0 - pingcli command succeeded with no errors or warnings. 1 - pingcli command failed with errors. 2 - pingcli command succeeded with warnings.
  -O, --output-format string    Specify the console output format. (default text) Options are: json, ndjson, ndjson-typed, ndjson-wrapped, text.
  -P, --profile string          The name of a configuration profile to use.
      --debug                   Enable debug output for error messages, including stack traces and transaction IDs. (default false)
      --log-file string         Write logs to a file at the given path. File logging is disabled when not set.
      --log-file-level string   Set the file log level. Options are: DEBUG, INFO, WARN, ERROR. (default DEBUG)
      --log-level string        Set the console log level. Options are: DEBUG, INFO, WARN, ERROR. (default WARN)
      --no-color                Disable text output in color. (default false)
      --query string            JMESPath expression to filter JSON output. Requires -O json, ndjson, ndjson-typed, or ndjson-wrapped. Example: --query 'data[?enabled].name'
```

## More information

* [pingcli pingone authorize application-roles app-role-permissions](pingcli_pingone_authorize_application-roles_app-role-permissions.html) - Application Role Permissions