# getTeamMemberCapabilities

A teammate's permissions, as Manage permissions on their row shows them: every capability they HOLD (one missing is one they do not have). userId comes from listTeamMembers. An Admin holds all of them. Read it before grantTeamMemberCapability or revokeTeamMemberCapability to say what changes. Organization admins only; your own permissions are getMyCapabilities.

- Call: `POST https://server.goliathdata.com/api/v1/call` with `{ "operationId": "getTeamMemberCapabilities", "variables": {...} }`
- Scope: `ADMIN`
- Type: query
- Idempotency: a read; rejects `Idempotency-Key`
- Rate-limited: no

## Variables

- `userId`: `ID!` (required)

## Response (data, an example)

```json
{
  "teamQuery": {
    "getTeamMemberCapabilities": [
      "VIEW_ALL_CONTACTS"
    ]
  }
}
```

## Example

```bash
curl https://server.goliathdata.com/api/v1/call \
  -H "Authorization: Bearer $GOLIATH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operationId": "getTeamMemberCapabilities",
    "variables": {
      "userId": "<userId>"
    }
  }'
```