# C1 documentation: API Endpoints App Entitlement

## App Entitlement

- [List](https://www.c1.ai/docs/api-reference/app-entitlement/list.md): List app entitlements associated with an app. Query parameters are  accepted in snake_case (page_size, page_token, app_user_id) and, as a  compatibility shim, their camelCase equivalents (pageSize, pageToken,  appUserId).
- [Create](https://www.c1.ai/docs/api-reference/app-entitlement/create.md): Create a new app entitlement for an app. This is used to define a custom permission, group, or role within the app.
- [Add Manually Managed Members](https://www.c1.ai/docs/api-reference/app-entitlement/add-manually-managed-members.md): Add users as manually managed members of an app entitlement. These memberships are tracked directly by ConductorOne rather than synced from the app.  Adding members to an access profile's enrollment entitlement requires the JML feature; without it the request fails with a failed-precondition error.
- [Search App Entitlements With Expired](https://www.c1.ai/docs/api-reference/app-entitlement/search-app-entitlements-with-expired.md): Search app entitlements, include app users, users, expires, discovered.  Response rows are large — request a small page_size (≤10) to keep responses small.
- [Remove Entitlement Membership](https://www.c1.ai/docs/api-reference/app-entitlement/remove-entitlement-membership.md): Remove a user from a manually managed entitlement. For ConductorOne  catalogs, groups, and profile types, the existing resource-specific  removal behavior applies. When the SSO provider feature is enabled, an SSO  application's sign-in entitlement removes only direct manual access and  preserves ind…
- [List Users](https://www.c1.ai/docs/api-reference/app-entitlement/list-users.md): List the users, as AppEntitlementUsers objects, of an app entitlement.
- [Get](https://www.c1.ai/docs/api-reference/app-entitlement/get.md): Get an app entitlement by ID.
- [Update](https://www.c1.ai/docs/api-reference/app-entitlement/update.md): Update an app entitlement by ID.
- [Delete](https://www.c1.ai/docs/api-reference/app-entitlement/delete.md): Delete an app entitlement by ID.
- [List For App Resource](https://www.c1.ai/docs/api-reference/app-entitlement/list-for-app-resource.md): List app entitlements associated with an app resource.
- [List For App User](https://www.c1.ai/docs/api-reference/app-entitlement/list-for-app-user.md): List app entitlements associated with an app user.
- [Search App Entitlements For App User](https://www.c1.ai/docs/api-reference/app-entitlement/search-app-entitlements-for-app-user.md): Search for app entitlements associated with a specific app user, with optional resource type trait filtering.  Each AppEntitlementView row is large — request a small page_size (≤10) and set expand_mask to only the paths you need; broad expansion inlines whole related objects and bloats the response.
- [Search](https://www.c1.ai/docs/api-reference/app-entitlement/search.md): Search app entitlements based on filters specified in the request body.  Each AppEntitlementView row is large — request a small page_size (≤10) and set expand_mask to only the paths you need; broad expansion inlines whole related objects and bloats the response.
- [Search Grants](https://www.c1.ai/docs/api-reference/app-entitlement/search-grants.md): Search grants (user-to-entitlement bindings) across apps, with filters for app, user, resource type, and entitlement.  Rows are heavy (each binding carries a full entitlement + user view) — request a small page_size (≤10) and set expand_mask to only the paths you need; broad expansion inlines whole…
- [Search Graph](https://www.c1.ai/docs/api-reference/app-entitlement/search-graph.md): SearchGraph performs a server-side BFS traversal and returns a bounded, filtered subgraph.  Exactly one of user_id, app_id, or resource_id must be set.
- [Count Grants For User By App](https://www.c1.ai/docs/api-reference/app-entitlement/count-grants-for-user-by-app.md): CountGrantsForUserByApp returns, for a user, the number of grants held per  application. Use it to size or filter an access graph before calling  SearchGraph: counts are computed directly from grant bindings and are an  upper bound on what SearchGraph will render for the same user and app  filter (S…
- [Search Reachable Resources For User](https://www.c1.ai/docs/api-reference/app-entitlement/search-reachable-resources-for-user.md): SearchReachableResourcesForUser returns the distinct app resources a user  can reach through any of their grants, deduplicated across entitlements  (a resource reachable via more than one grant appears once). Powers the  Resources lane of the access graph's list view: supports free-text search  over…

## OpenAPI Specs

- [my-source-with-code-samples](https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples)