# Private, group-internal events

**URL:** https://meta.discourse.org/t/private-group-internal-events/412794
**Category:** Bug
**Tags:** events
**Created:** [September 18, 2026, 6:06pm UTC](https://meta.discourse.org/t/private-group-internal-events/412794 "2026-09-18T18:06:07Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![Thomas\_Rother](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/thomas_rother/32/423597_2.png) [@Thomas\_Rother](https://meta.discourse.org/u/Thomas_Rother)
#### Post date: [September 19, 2026, 6:20am UTC](https://meta.discourse.org/t/private-group-internal-events/412794/6 "2026-09-19T06:20:21Z")

</div>

Some test results:

- created API key with user level “single user”
- I first looked at scope settings “granular”, but could not find a restriction for “events” endpoints. Although “events” is listed as a query group at [Discourse API Docs](https://docs.discourse.org/#tag/Events)
- I used “read only” instead. Result “You are not authorised to view the requested resource.”

`curl -kv `[https://xxx/discourse-post-event/events.ics?user\_api\_key=xxx](https://xxx/discourse-post-event/events.ics?user_api_key=xxx) returns no ics when you use a “single user” API key. And a full list of events with user level “all users”. I see no way how to “filter” for events of a special user group.

I also checked https:[xxxx]/admin/plugins/discourse-events/settings for any potentially wrong API-related settings, no results

Any comments?

---

_[View the full topic](https://meta.discourse.org/t/private-group-internal-events/412794)._