This API method allows the main account owner to retrieve detailed information about the access rights and permissions of authorized users within the banking application. It provides a clear view of what each authorized user is permitted to do, ensuring effective control and management of access across the system.

Purpose:

The purpose of this API is to give the main account owner an efficient way to view the access levels of all authorized users linked to their profile. This ensures transparency, allowing the owner to verify that authorized users only have permissions appropriate for their role. This is crucial for managing security, maintaining compliance, and auditing access to sensitive data or functionalities.

Key Features:

Granular Permission Management: The main owner can review each authorized user’s access to specific features, ensuring the correct assignment of permissions based on roles and responsibilities.
Real-Time Data Retrieval: This API supports real-time access to authorized user permissions, allowing for immediate updates or audits.
Flexible Querying: The API allows for filtering by authorized user or account profile, giving the main owner flexibility when reviewing access rights.

Security Considerations:

Only authorized main account owners can retrieve this information.
Ensure that access rights are audited regularly to maintain compliance with internal security policies and external regulations (such as PCI-DSS or GDPR).