---
title: "Create a policy, or create it MANAGED from a system scaffold"
method: POST
path: "/v1/policies"
---

# Create a policy, or create it MANAGED from a system scaffold

`POST /v1/policies`

## Request

- Base URL: `https://api.decionis.com`
- URL: `https://api.decionis.com/v1/policies`
- Auth: API key in cookie `decionis_account_session`

Account session of a writing workspace member; same-site JSON and an Idempotency-Key are required. With content, the caller authors revision 1 and holds POLICY_OWNER and AUTHOR. With governance MANAGED and no content, the system writes revision 1 as a scaffold with no author, the caller holds POLICY_OWNER and RELEASE_APPROVER (never AUTHOR), the named desk analysts receive their bounded roles, and MANAGED governance takes the scaffold as its baseline, all in one journaled command. Alias kept on the same handler /v1/public/account/workspace/policy-platform.

## Headers

- `Idempotency-Key` string

## Request body

- union
  - object
    - `environment` 'sandbox' | 'production', required
    - `content` object, required
  - object
    - `environment` 'sandbox' | 'production', required
    - `governance` 'MANAGED', required
    - `desk` object[], required: Desk analysts' grants; at least one AUTHOR, each expiring within 30 days.
      - `userId` string, uuid, required
      - `role` 'AUTHOR' | 'TECHNICAL_REVIEWER' | 'TEST_APPROVER', required
      - `expiresAt` string, date-time, required
    - `reason` string, required

## Response `201`

The policy, in DRAFT, with its first revision.

- object

## Other responses

- `400`: Structured API error
- `401`: Structured API error
- `403`: Structured API error
- `409`: Structured API error
- `422`: Structured API error

---

[API](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api.md) · [All operations](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/llms.txt) · [OpenAPI document](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/revisions/357f5e459d0c?raw)