# Setting Table and Field level permissions through API

**URL:** <https://community.nocodb.com/t/setting-table-and-field-level-permissions-through-api/2055>\
**Category:** APIs\
**Created:** [August 13, 2025, 11:38am UTC](https://community.nocodb.com/t/setting-table-and-field-level-permissions-through-api/2055 "2025-08-13T11:38:06Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bucky](https://avatars.discourse-cdn.com/v4/letter/b/5f8ce5/32.png) [@Bucky](https://community.nocodb.com/u/Bucky)\
**Post date:** [August 13, 2025, 11:38am UTC](https://community.nocodb.com/t/setting-table-and-field-level-permissions-through-api/2055/1 "2025-08-13T11:38:06Z")

</div>

Hi,

I want to use the table and field permissions, but need to apply it to quite a few tables.  
specific we want to make them read-only. ie no create or delete rights to anyone and no edit rights for any field.

But as far as I can see there is no API available for this. is this correct?

---

<div class="post-metadata">

**Author:** ![dstala](https://avatars.discourse-cdn.com/v4/letter/d/f04885/32.png) [@dstala](https://community.nocodb.com/u/dstala)\
**Post date:** [August 13, 2025, 11:51am UTC](https://community.nocodb.com/t/setting-table-and-field-level-permissions-through-api/2055/2 "2025-08-13T11:51:53Z")

</div>

@Bucky Welcome to NocoDB Community!

Table & Field permissions currently can’t be configured using APIs. I have created a feature request [here](https://github.com/nocodb/nocodb/issues/12085) to follow up on this.

---

<div class="post-metadata">

**Author:** ![Navi](https://avatars.discourse-cdn.com/v4/letter/n/3be4f8/32.png) [@Navi](https://community.nocodb.com/u/Navi)\
**Post date:** [August 13, 2025, 11:54am UTC](https://community.nocodb.com/t/setting-table-and-field-level-permissions-through-api/2055/3 "2025-08-13T11:54:00Z")

</div>

@Bucky : curious what is the usecase for managing permission via APIs. Is this like a one time thing ? or you plan to build an application layer on top of NocoDB ?

---

<div class="post-metadata">

**Author:** ![Bucky](https://avatars.discourse-cdn.com/v4/letter/b/5f8ce5/32.png) [@Bucky](https://community.nocodb.com/u/Bucky)\
**Post date:** [August 13, 2025, 12:33pm UTC](https://community.nocodb.com/t/setting-table-and-field-level-permissions-through-api/2055/4 "2025-08-13T12:33:04Z")

</div>

To be honest, the main reason is that the use interface has no efficient method to lock down a table, ie you need to set each field to non-editable plus the create and delete.  
I got a number of tables which are either archived or should at least not be changed without proper process, ie reference tables, I am talking around 20 tables.  
Hence why I wanted to use the API to do this for me.  
because I will also want to “unlock” the tables if required.