---
title: Application Role Permissions
description: Explains the PingOne Authorize application role permissions endpoint used to add, read, and delete permissions associated with application roles
component: pingone-api
page_id: pingone-api:authorize:application-permissions/application-role-permissions/index
canonical_url: https://developer.pingidentity.com/pingone-api/authorize/application-permissions/application-role-permissions/index.html
llms_txt: https://developer.pingidentity.com/pingone-api/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2026-08-07
section_ids:
  application-roles-permissions-data-model: Application roles permissions data model
  response-codes: Response codes
---

# Application Role Permissions

The PingOne Authorize `{{apiPath}}/v1/environments/{{envID}}/applicationRoles/{{appRoleID}}/permissions` endpoint provides operations to add, read, and delete the permissions associated with application roles.

## Application roles permissions data model

| Property        | Type   | Required | Mutable   | Description                                                    |
| --------------- | ------ | -------- | --------- | -------------------------------------------------------------- |
| `action`        | String | N/A      | Read-only | The action associated with this permission.                    |
| `description`   | String | N/A      | Read-only | The permission description.                                    |
| `id`            | String | N/A      | Read-only | The permission's unique identifier.                            |
| `key`           | String | N/A      | Read-only | The `resource.name:action` pair of the permission.             |
| `resource`      | Object | N/A      | Read-only | An object that identifies the associated application resource. |
| `resource.id`   | String | N/A      | Read-only | The ID of the resource associated with this role.              |
| `resource.name` | String | N/A      | Read-only | The name of the resource associated with this role.            |

## Response codes

| Code | Message                                                               |
| ---- | --------------------------------------------------------------------- |
| 200  | Successful operation.                                                 |
| 201  | Successfully created.                                                 |
| 204  | Successfully removed. No content.                                     |
| 400  | The request could not be completed.                                   |
| 401  | You do not have access to this resource.                              |
| 403  | You do not have permissions or are not licensed to make this request. |
| 404  | The requested resource was not found.                                 |