---
title: How to List Users with a Policy Attached
url: https://docs.vultr.com/platform/iam/policies/how-to-list-users-with-a-policy-attached
description: List all users that have a specific IAM policy attached on Vultr. Identify which users have direct permissions from a given policy through the Vultr IAM API.
publish_date: 2026-03-24T19:52:11.872868Z
last_updated: 2026-06-01T21:19:39.358619Z
---

Listing users with a policy attached allows you to see which users have the permissions defined by that policy. This is useful for auditing access, reviewing policy scope, and identifying users affected by policy changes.

This guide explains how to list users with a policy attached using the Vultr Console and the Vultr API.

=== "Vultr Console"

    1. Log in to the [Vultr Console](https://console.vultr.com).
    1. Click the organization name in the top navigation bar.
    1. Click **Manage Organization**.
    1. Click the **Permission Policies** tab.
    1. Click the name of the policy you want to inspect.
    1. Expand the **Attached Entities** section.

        The table displays all users and groups attached to this policy, including their name, type, and status.

=== "Vultr API"

    1. Send a `GET` request to the [**List Policies** endpoint](https://www.vultr.com/api/#tag/iam/operation/list-iam-policies) to retrieve all policies in your organization.

        ```console
        $ curl "https://api.vultr.com/v2/policies" \
            -X GET \
            -H "Authorization: Bearer ${VULTR_API_KEY}"
        ```

        Note the `id` of the policy for which you want to list users.

    1. Send a `GET` request to the [**List Users with Policy** endpoint](https://www.vultr.com/api/#tag/iam/operation/list-iam-policy-users) to retrieve all users assigned to the policy. Replace `{policy-id}` with the id of the policy.

        ```console
        $ curl "https://api.vultr.com/v2/policies/{policy-id}/users" \
            -X GET \
            -H "Authorization: Bearer ${VULTR_API_KEY}"
        ```

        The response contains the requested resources.