Litmus Edge Manager 3.0.x - Admin Console: Asset Hierarchy Access

List Branch Grants

GET {{LEM_adminURL}}/admin/v1/user/asset-mgmt/branches?username=

New in 3.0.

List Branch Grants

Returns a user's asset-hierarchy branch grants: the hierarchy nodes the user may edit below. Grants are given per node in Digital Twins > Asset Hierarchy - Permissions; this is the admin view across companies.

Endpoint

GET {{LEM_adminURL}}/admin/v1/user/asset-mgmt/branches

Authentication

API key in a request header (case sensitive). The value is the LEM admin API token.

URL prefix	Auth header
`{{LEM_URL}}/api/v1/...` (main fleet API)	`X-AuthToken: <token>`
`{{LEM_adminURL}}/admin/v1/...` (admin console, port 8446)	`X-AuthToken: <token>`
`{{LEM_URL}}/mpcs/...` (Marketplace Catalog)	`Authorization: <token>` (3.0.x also accepts `X-AuthToken`)
## Parameters

Parameter	In	Notes
`username`	query	Required. The user.

Response

An array of grants; [] when the user has none.

Errors

HTTP status	When it happens
`400 Bad Request`	Missing or malformed query/body parameter.
`401 Unauthorized`	Missing or invalid credentials.
`403 Forbidden`	Token lacks permission for this operation.
`404 Not Found`	Target entity does not exist.
`5xx`	Service is unreachable, restarting, or internally errored. Inspect device logs under `System > Support`.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[]

Revoke Branch Grant

DELETE {{LEM_adminURL}}/admin/v1/user/asset-mgmt/branches/{{grant_id}}