For platforms · Signature + Authority

Resolve authority across a client portfolio

The job

You are an accounting firm (regnskapsbyrå) with many client companies and need to know, per organisation, whether you hold an active delegation before acting — and who can approve a missing one.

Endpoints

GET /api/v1/auth/permissions/{org}
GET /api/v1/company/{org}/authority

Request

curl -H 'Authorization: Bearer <API_KEY>' \
  https://www.apier.no/api/v1/auth/permissions/999999999

Response

{
  "success": true,
  "data": {
    "org_number": "999999999",
    "status": "full",
    "active_scopes": [
      "skatteetaten:mva"
    ],
    "missing_scopes": [],
    "delegated_rights": [
      {
        "right_id": "skatteetaten:mva",
        "granted_at": "2026-06-16T06:00:00.000Z",
        "system_user_id": "mock_su_synthetic_999999999"
      }
    ],
    "required_but_ungranted_rights": [],
    "system_user": {
      "id": "mock_su_synthetic_999999999",
      "valid_until": null
    },
    "last_checked": "2026-06-16T06:00:00.000Z"
  },
  "_meta": {
    "rulebook_version": "1.0.0",
    "data_freshness": "2026-06-16T06:00:00.000Z",
    "last_verified": "2026-06-16T06:00:00.000Z",
    "source": "apier.no",
    "schema_version": "1.0.0"
  }
}

Run this call per client org number and branch on data.status (full / partial / none). For a full status, pull acting capacity from /authority; for partial or none, required_but_ungranted_rights carries the fix_steps for who must approve.

Next steps

Build a dashboard grid: one row per client, colour-coded on delegation status.
For clients without a delegation, generate a delegation URL the signing authority can approve (see the Altinn system users guide).