Sign in
rbac-policies

Create a new RBAC policy for an organization

post/admin/v1/organizations/{org_slug}/rbac-policies

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /admin/v1/organizations/{org_slug}/rbac-policies
  • Auth: HTTP bearer

Path parameters

org_slugstring required

Organization slug

Request body

actionstring

Action pattern to match (e.g., "read", "write", "delete", "*")

conditionstring required

CEL expression that must evaluate to true for the policy to apply

descriptionstring nullable

Optional description of what this policy does

effect'allow' | 'deny'

RBAC policy effect.

Determines whether a matching policy allows or denies access.

enabledboolean

Whether this policy is active (defaults to true)

namestring required

Human-readable name for this policy (unique per org)

priorityinteger

Priority for evaluation order (higher = evaluated first, defaults to 0) Valid range: -1000 to 1000

reasonstring nullable

Reason for creating this policy (stored in version history)

resourcestring

Resource pattern to match (e.g., "projects/", "teams/engineering/", "*")

Response

RBAC policy created

actionstring required

Action pattern to match (e.g., "read", "write", "delete", "*")

conditionstring required

CEL expression that must evaluate to true for the policy to apply

created_atstring date-time required

When this policy was created

deleted_atstring date-time nullable

When this policy was soft-deleted (None if active)

descriptionstring nullable

Optional description of what this policy does

effect'allow' | 'deny' required

RBAC policy effect.

Determines whether a matching policy allows or denies access.

enabledboolean required

Whether this policy is active

idstring uuid required

Unique identifier for this policy

namestring required

Human-readable name for this policy (unique per org among non-deleted policies)

org_idstring uuid required

Organization this policy belongs to

priorityinteger required

Priority for evaluation order (higher = evaluated first)

resourcestring required

Resource pattern to match (e.g., "projects/", "teams/engineering/", "*")

updated_atstring date-time required

When this policy was last updated

versioninteger required

Version number (incremented on each update)

Changes

No recorded changes to this operation across all 1 revision of this API.