> ## Documentation Index
> Fetch the complete documentation index at: https://docs.activeviam.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List users with access to a book.

> Use this read-only operation to inspect the users who can access a Derivitec book and their access levels.
The caller must own the named book; other access levels receive an unsuccessful response. The response is
returned after the lookup completes.



## OpenAPI

````yaml /risk-and-pricing/atoti-risk-services/apis-endpoints/openapi/openapi.mintlify.json post /api/BookAccess/ListBookAccessors
openapi: 3.0.4
info:
  title: Derivitec Api 1.0
  version: '1.0'
servers:
  - url: https://api.riskportal.activeviam.com
security:
  - oauth2: []
  - apikey: []
tags:
  - name: AdminUser
  - name: AtotiReport
  - name: AtotiSession
  - name: BloombergOAuth
  - name: Bond
  - name: BondYieldCurvePage
  - name: BookAccess
  - name: Books
  - name: Commodity
  - name: Counterparties
  - name: Currencies
  - name: Equity
  - name: EquityDividend
  - name: EquityPage
  - name: FeatureFlag
  - name: Fx
  - name: FxPage
  - name: GroupAccess
  - name: Home
  - name: LegacyPosition
  - name: MarketData
  - name: MarketDataProvider
  - name: MarketDataProviderAccess
  - name: Meta
  - name: Notification
  - name: Organisation
  - name: PnLReport
  - name: PortfolioAccess
  - name: Portfolios
  - name: Position
  - name: PositionFilter
  - name: PricingEnvironment
  - name: PricingEnvironmentAccess
  - name: RateAsset
  - name: RateAssetPage
  - name: Report
  - name: ReportDefinition
  - name: ReportHistoryLauncherQuery
  - name: ReportLauncher
  - name: ReportQuery
  - name: ReportQueryViewUser
  - name: ReportRestriction
  - name: ReportView
  - name: RiskReport
  - name: Tradable
  - name: TradeBooking
  - name: User
  - name: VarReport
  - name: VarReportQuery
  - name: YieldCurvePage
paths:
  /api/BookAccess/ListBookAccessors:
    post:
      tags:
        - BookAccess
      summary: List users with access to a book.
      description: >-
        Use this read-only operation to inspect the users who can access a
        Derivitec book and their access levels.

        The caller must own the named book; other access levels receive an
        unsuccessful response. The response is

        returned after the lookup completes.
      operationId: ListBookAccessors
      requestBody:
        description: Required `BookName` for a book available to the caller.
        content:
          application/json-patch+json:
            schema:
              $ref: '#/components/schemas/ApiListBookAccessorsRequest'
          application/json:
            schema:
              $ref: '#/components/schemas/ApiListBookAccessorsRequest'
          text/json:
            schema:
              $ref: '#/components/schemas/ApiListBookAccessorsRequest'
          application/*+json:
            schema:
              $ref: '#/components/schemas/ApiListBookAccessorsRequest'
      responses:
        '200':
          description: >-
            Returns accessor names and access levels, or an unsuccessful
            envelope when the book is unavailable or the caller is not its
            owner.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiListBookAccessorsResponse'
        '400':
          description: BadRequest
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
      security:
        - oauth2: []
        - apikey: []
components:
  schemas:
    ApiListBookAccessorsRequest:
      required:
        - $type
      type: object
      additionalProperties: false
      description: Book selection for listing the users who can access it.
      properties:
        book_name:
          type: string
          description: >-
            Organisation-scoped name of the book to select. The value must not
            be null or empty.
          nullable: true
          example: Example book
        $type:
          type: string
          enum:
            - >-
              Derivitec.Web.Core.BookAccess.ApiListBookAccessorsRequest,
              Derivitec.Web.Core
    ApiListBookAccessorsResponse:
      required:
        - $type
      type: object
      properties:
        is_success:
          type: boolean
          description: >-
            Whether the operation completed successfully. The default is `true`;
            error outcomes set it to `false`.
          example: true
        error_messages:
          type: array
          items:
            type: string
          description: >-
            Messages explaining operation-level failures. The collection is
            empty by default.
          nullable: true
        book_accessors:
          type: array
          items:
            $ref: '#/components/schemas/BookAccessor'
          description: >-
            Users recorded as having access to the selected book and each user's
            assigned level.
          nullable: true
        $type:
          type: string
          enum:
            - >-
              Derivitec.Web.Core.BookAccess.ApiListBookAccessorsResponse,
              Derivitec.Web.Core
      additionalProperties: false
      description: Users and access levels recorded for the selected book.
    BookAccessor:
      required:
        - $type
      type: object
      properties:
        name:
          type: string
          description: Display name of a user who can access the selected book.
          nullable: true
        access_type:
          enum:
            - view
            - edit
            - full
            - owner
          type: string
          description: Access level recorded for this user on the selected book.
        $type:
          type: string
          enum:
            - Derivitec.Web.Core.BookAccess.BookAccessor, Derivitec.Web.Core
      additionalProperties: false
      description: User display name and access level recorded for a book.
  securitySchemes:
    oauth2:
      type: oauth2
      description: >-
        OAuth2 access-token requested from AWS Cognito and provided as a Auth
        Bearer header
      flows:
        implicit:
          authorizationUrl: https://auth.riskportal.derivitec.com/oauth2/authorize
          scopes: {}
    apikey:
      type: apiKey
      description: API-Key requested via the site and provided as a header
      name: x-api-key
      in: header

````