MagicDoorAPI
SupportOpen MagicDoor
Property managers

Get a property manager's menu access

Returns the top-level menus MagicDoor's web app draws for this property manager. This shapes the interface only; it does not stop an API call.

GET
https://api.portal.magicdoor.com/company-app/property-managers/{propertyManagerId}/menu-access

Authorization

Authorizationstringrequired
Bearer token — Send your API token in the Authorization header as Bearer <token>. Requests without a valid token are rejected with 401 Unauthorized.

Path parameters

propertyManagerIdstringrequired

The property manager. A Snowflake id, sent as a decimal string.

example: 1830472847398404098

Response

200 · The enabled menu keys.

menuAccessstring[]

The enabled top-level menu keys. A single entry of * means every menu. An empty array means no menus at all. Menus not listed are hidden.

*onboardinghomepropertieslistingleasingusersaccountingreportsmaintenanceassociationscommunicationsaisettings

401 · The access token is missing, expired, or does not belong to a property manager.

404 · No property manager with that id exists for the calling company. A record that belongs to another company is reported the same way as one that does not exist. The id you asked for is in `entityId`; `detail` names only the kind of record.

Two different gates

A property manager is limited in three independent ways, and it is easy to confuse them.

  • Permissions are resource:action strings such as property:read. They decide what the API lets this person do. See list permissions.
  • Property access decides which properties those permissions reach — all of them, or a named set of portfolios and properties. See get property access.
  • Menu access decides which top-level menus MagicDoor's own web app draws for them. It hides screens; it does not stop an API call. See get menu access.
Menu access is not security

Hiding a menu hides a screen. It does not stop the same property manager calling the API behind that screen directly. What they may actually do is decided by their permissions and their property access.

The keys

onboarding, home, properties, listing, leasing, users, accounting, reports, maintenance, associations, communications, ai, settings, plus the wildcard *.

A property manager with nothing stored gets everything

When no menu access has ever been set for a property manager, this endpoint returns ["*"]. That is also what a newly created property manager starts with.