Genesys Cloud - Developer Community!

Hello,

I am using the Java Platform SDK to retrieve evaluations (/api/v2/quality/conversations/{convId}/evaluations/{evalId}).

The token I am using has all the permissions that seem necessary to retrieve the data (Quality > … > View).

I am able to retrieve all the data except for "privateComments".

When I grant all permissions (Quality > All Permissions), I do receive them, but I do not want to grant all permissions.

Which specific permission is missing to be able to retrieve "privateComments"?

Thank you in advance.

It seems that the following permission is required: Quality > Evaluation > Assign.
This does not seem consistent to me, as this permission should not be required for read-only access to the data.

To get privateComments back from GET /api/v2/quality/conversations/{conversationId}/evaluations/{evaluationId}, the missing permission is:

Quality > Evaluation > Assign.

Genesys Cloud appears to treat private comments as part of the "assign/review" workflow (not just basic "view"), so a role that only has Quality > Evaluation > View will receive the evaluation object but with privateComments omitted. The default Quality Evaluator role, for example, includes Quality > Evaluation > Assign along with View.

If you want least privilege, the usual approach is to create a custom role that adds Quality > Evaluation > Assign (and keep everything else as-is), then rely on divisions / permission conditions to scope access where needed.