---
title: "Create an ACL"
method: POST
path: "/clusters/{cluster_id}/acls"
tags: ["ACL (v3)"]
---

# Create an ACL

`POST /clusters/{cluster_id}/acls`

[![Generally Available](https://img.shields.io/badge/Lifecycle%20Stage-Generally%20Available-%2345c6e8)](#section/Versioning/API-Lifecycle-Policy)

Creates an ACL.

## Request body

- CreateAclRequestData
  - `resource_type` 'UNKNOWN' | 'ANY' | 'TOPIC' | 'GROUP' | 'CLUSTER' | 'TRANSACTIONAL_ID' | 'DELEGATION_TOKEN', required
  - `resource_name` string, required
  - `pattern_type` string, required
  - `principal` string, required
  - `host` string, required
  - `operation` string, required
  - `permission` string, required

## Response `201`

No Content

## Other responses

- `400` — Indicates a bad request error. It could be caused by an unexpected request body format or other forms of request validation failure. Usually serves application/json content, although in some cases simple text/plain content can be returned.
- `401` — Indicates a client authentication error. Kafka authentication failures will contain error code 40101 in the response body.
- `429` — Indicates that a rate limit threshold has been reached, and the client should retry again later.
- `5XX` — A server-side problem that might not be addressable from the client side. Retriable Kafka errors will contain error code 50003 in the response body.

## Changes

- **2022-03-22** (v3) `7500cc59fcff` — 22 breaking, 6 info
  - removed the enum value `ALL` of the request property `operation`
  - removed the enum value `ALLOW` of the request property `permission`
  - removed the enum value `ALTER` of the request property `operation`
  - removed the enum value `ALTER_CONFIGS` of the request property `operation`
  - …24 more
- **2022-03-22** (v3) `0b87d328c664` — 3 breaking, 28 info
  - request property `operation` was restricted to a list of enum values
  - request property `pattern_type` was restricted to a list of enum values
  - request property `permission` was restricted to a list of enum values
  - api operation id `createKafkaV3Acls` removed and replaced with ``
  - …27 more
- **2022-01-18** (v3) `242a6e383b71` — 22 breaking, 6 info
  - removed the enum value `ALL` of the request property `operation`
  - removed the enum value `ALLOW` of the request property `permission`
  - removed the enum value `ALTER` of the request property `operation`
  - removed the enum value `ALTER_CONFIGS` of the request property `operation`
  - …24 more
- **2022-01-18** (v3) `fbdd72178c66` — 3 breaking, 28 info
  - request property `operation` was restricted to a list of enum values
  - request property `pattern_type` was restricted to a list of enum values
  - request property `permission` was restricted to a list of enum values
  - api operation id `createKafkaV3Acls` removed and replaced with ``
  - …27 more
- …earlier changes not shown

[Full history](https://skmtc.dev/confluentinc/apis/rest-admin-api/changes/clusters/:cluster_id/acls/post.md)

---

[API](https://skmtc.dev/confluentinc/apis/rest-admin-api.md) · [All operations](https://skmtc.dev/confluentinc/apis/rest-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/confluentinc/rest-admin-api/revisions/02cfd6a4cefd/schema)