# Configure application permissions

Query current-principal roles and the permission schema, validate an application permission policy, then apply it. This page does not configure data-resource or object grants.

## Prerequisites

Prepare credentials that can access the target workspace and the permission policy to apply. For service endpoints, authentication, and general request formats, see [Make your first AI Studio API call](https://omnifabric.cloudsigma.com/docs/developer/quickstart/index.html.md).

Before applying the policy, confirm the current-principal roles and available permission schema, then validate the policy content.

## Call sequence

1. [Get current-principal roles](https://omnifabric.cloudsigma.com/docs/reference/api/ai-studio/users-and-permissions/application-permissions/get-current-principal-roles.html.md) to confirm the calling identity.
2. [Get the permission schema](https://omnifabric.cloudsigma.com/docs/reference/api/ai-studio/users-and-permissions/application-permissions/get-permission-schema.html.md) and prepare a policy that matches it.
3. Use [Validate application permission policy](https://omnifabric.cloudsigma.com/docs/reference/api/ai-studio/users-and-permissions/application-permissions/validate-application-policy.html.md) to check the policy.
4. After validation, apply the policy and query current-principal roles again to confirm observable role results.

## API operations

### Query, validate, and apply policies

| Task | Use it when |
| --- | --- |
| [Query current-principal roles](https://omnifabric.cloudsigma.com/docs/reference/api/ai-studio/users-and-permissions/application-permissions/get-current-principal-roles.html.md) | Confirm roles for the current calling identity before or after applying a policy. |
| [Query the permission schema](https://omnifabric.cloudsigma.com/docs/reference/api/ai-studio/users-and-permissions/application-permissions/get-permission-schema.html.md) | Learn the available schema before preparing a policy. |
| [Validate an application permission policy](https://omnifabric.cloudsigma.com/docs/reference/api/ai-studio/users-and-permissions/application-permissions/validate-application-policy.html.md) | Check a policy to submit before applying it. |
| [Apply a permission policy](https://omnifabric.cloudsigma.com/docs/reference/api/ai-studio/users-and-permissions/application-permissions/apply-application-policy.html.md) | Submit an application permission policy after validation. |

## Confirm the result

After applying the policy, use [Get current-principal roles](https://omnifabric.cloudsigma.com/docs/reference/api/ai-studio/users-and-permissions/application-permissions/get-current-principal-roles.html.md) to confirm observable role information for the current calling identity.

## Next steps

- [Configure data privileges](https://omnifabric.cloudsigma.com/docs/developer/api/ai-studio/users-permissions/data-privileges.html.md)
- [Configure object permissions](https://omnifabric.cloudsigma.com/docs/developer/api/ai-studio/users-permissions/object-permissions.html.md)