# What permissions SonarQube user should have to access /api/projects/search?

**URL:** <https://community.sonarsource.com/t/what-permissions-sonarqube-user-should-have-to-access-api-projects-search/127284>\
**Category:** SonarQube Server / Community Build\
**Tags:** api\
**Created:** [October 3, 2024, 12:10pm UTC](https://community.sonarsource.com/t/what-permissions-sonarqube-user-should-have-to-access-api-projects-search/127284 "2024-10-03T12:10:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Roman\_Vaskevich](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/roman_vaskevich/32/62683_2.png) [@Roman\_Vaskevich](https://community.sonarsource.com/u/Roman_Vaskevich)\
**Post date:** [October 3, 2024, 12:10pm UTC](https://community.sonarsource.com/t/what-permissions-sonarqube-user-should-have-to-access-api-projects-search/127284/1 "2024-10-03T12:10:13Z")

</div>

- Community Edition
- v9.9.5 (build 90363)
- What permissions SonarQube user should have to access [https://sonarqube.example.net/api/projects/search](https://sonarqube.example.net/api/projects/search) ?
- getting {“errors”:[{“msg”:“Insufficient privileges”}]}
- Tried adding user to Permission Template with Project Key Pattern: `\[*\]` and all options selected (like Browse, See Source Code, etc.) - still getting {“errors”:[{“msg”:“Insufficient privileges”}]}
- Only works with “Administer System” Global Permission.
- But this user should not have “Administer System” Global Permission.

---

<div class="post-metadata">

**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\
**Post date:** [October 4, 2024, 5:37am UTC](https://community.sonarsource.com/t/what-permissions-sonarqube-user-should-have-to-access-api-projects-search/127284/2 "2024-10-04T05:37:46Z")

</div>

Well yes, that’s what the [documentation says](https://next.sonarqube.com/sonarqube/web_api/api/projects/search)

> Requires ‘Administer System’ permission

Your user might want to use [**GET api/components/search**](https://next.sonarqube.com/sonarqube/web_api/api/components?query=components&internal=true) with `qualifiers` set to `TRK`.

---

<div class="post-metadata">

**Author:** ![Roman\_Vaskevich](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/roman_vaskevich/32/62683_2.png) [@Roman\_Vaskevich](https://community.sonarsource.com/u/Roman_Vaskevich)\
**Post date:** [October 11, 2024, 2:31pm UTC](https://community.sonarsource.com/t/what-permissions-sonarqube-user-should-have-to-access-api-projects-search/127284/3 "2024-10-11T14:31:22Z")

</div>

Thank you!  
GET api/components/search with `qualifiers` set to `TRK`  
is suitable alternative