Skip to main content
This page lists the permission identifiers you can assign to API keys. The full structure (including any account-specific variations) is available from GET /v4/account/api-keys/permission-context.

Product permissions (2-part: resource:action)

Permissions follow the form resource:action. Typical actions:
  • read — Read proxy lists, account/product info, and list resources.
  • write — Create or update resources (e.g. whitelist, settings).
  • delete — Revoke access, remove resources, or delete data.
PermissionDescription
datacenter_shared:readRead shared datacenter proxy list and account info.
datacenter_shared:writeManage shared datacenter settings (e.g. whitelist).
datacenter_shared:deleteRevoke or remove shared datacenter access.
datacenter_dedicated:readRead dedicated datacenter proxy list and account info.
datacenter_dedicated:writeManage dedicated datacenter settings (e.g. whitelist).
datacenter_dedicated:deleteRevoke or remove dedicated datacenter access.
residential:readRead residential proxy list and account info.
residential:writeCreate, update, and reset password for residential subusers.
residential:deleteRevoke or remove residential access.
residential_unlimited:readRead residential_unlimited proxy list and account info.
residential_unlimited:writeManage residential_unlimited settings (e.g. whitelist).
residential_unlimited:deleteRevoke or remove residential_unlimited access. Not used by any Account API endpoint currently.
serp_api:readRead SERP API usage and account info.
serp_api:writeManage SERP API settings.
serp_api:deleteRevoke or remove SERP API access.
The permission-context endpoint returns the full set of permissions available for your account.

Subaccount permissions

PermissionDescription
subaccount:readList subaccounts, get preferences, countries available.
subaccount:writeUpdate subaccount preferences.

Account API key permissions (3-part: account:apikeys:action)

These permissions control API key management for the account. They are account permissions: they apply in the context of the account whose keys you are managing.
PermissionDescription
account:apikeys:createCreate new API keys for the account.
account:apikeys:readList and view API keys for the account.
account:apikeys:updateEdit key name and permissions for the account.
account:apikeys:deleteRevoke (delete) API keys for the account.
account:apikeys:regenerateRegenerate the key secret for the account.
For the complete, up-to-date list and structure (including any account-specific permissions), call GET /v4/account/api-keys/permission-context.