---
title: "Get active Cedar policies"
method: POST
path: "/management/v1/permissions/cedar/policy-list"
tags: ["permissions-cedar"]
---

# Get active Cedar policies

`POST /management/v1/permissions/cedar/policy-list`

## Request

- Base URL: `https://localhost`
- URL: `https://localhost/management/v1/permissions/cedar/policy-list`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/docs/management/v1/permissions/cedar/policy-list/post.ts> (a function with typed inputs; its response is checked against the schema)

## Request body

- ListCedarPoliciesQuery: Query parameters for listing Cedar policies. # Pagination Consistency When using pagination with `page_token`, list continuation is only consistent if policy sources have not changed between calls. If policy sources are added, removed, or modified between paginated requests, results may be incomplete or contain duplicates.
  - `effect-filter` 'Permit' | 'Forbid'
  - `page-size` integer: Maximum number of policies to return per page. Defaults to 1000 if not specified.
  - `page-token` string, nullable: Opaque page token from a previous response. Use this to retrieve the next page of results. The token represents a policy ID to start from.
  - `principal-type-filter` CedarPrincipalTypeFilter: Filter for Cedar policy principal constraints. This filter allows fine-grained control over which policies to retrieve based on their principal scope. Each principal type has its own set of constraint patterns.
    - `any` boolean: Include policies where `principal` is unconstrained (applies to all principals)
    - `role` CedarPrincipalConstraintPattern: Constraint patterns for filtering policies by principal constraint type. Each field corresponds to a Cedar principal constraint pattern.
      - `eq` boolean: Include policies with `principal == <PrincipalType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `principal in <PrincipalType>::"<id>"` (within hierarchy) Also covers `principal is <Path> in <PrincipalType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `principal is <PrincipalType>` (any entity of this type)
    - `user` CedarPrincipalConstraintPattern: Constraint patterns for filtering policies by principal constraint type. Each field corresponds to a Cedar principal constraint pattern.
      - `eq` boolean: Include policies with `principal == <PrincipalType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `principal in <PrincipalType>::"<id>"` (within hierarchy) Also covers `principal is <Path> in <PrincipalType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `principal is <PrincipalType>` (any entity of this type)
  - `resource-type-filter` CedarResourceTypeFilter: Filter for Cedar policy resource constraints. This filter allows fine-grained control over which policies to retrieve based on their resource scope. Each resource type has its own set of constraint patterns.
    - `any` boolean: Include policies where `resource` is unconstrained (applies to all resources)
    - `generic-table` CedarResourceConstraintPattern: Constraint patterns for filtering policies by resource constraint type. Each field corresponds to a Cedar resource constraint pattern.
      - `eq` boolean: Include policies with `resource == <ResourceType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `resource in <ResourceType>::"<id>"` (within hierarchy) Also covers `resource is <Path> in <ResourceType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `resource is <ResourceType>` (any entity of this type)
    - `namespace` CedarResourceConstraintPattern: Constraint patterns for filtering policies by resource constraint type. Each field corresponds to a Cedar resource constraint pattern.
      - `eq` boolean: Include policies with `resource == <ResourceType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `resource in <ResourceType>::"<id>"` (within hierarchy) Also covers `resource is <Path> in <ResourceType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `resource is <ResourceType>` (any entity of this type)
    - `project` CedarResourceConstraintPattern: Constraint patterns for filtering policies by resource constraint type. Each field corresponds to a Cedar resource constraint pattern.
      - `eq` boolean: Include policies with `resource == <ResourceType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `resource in <ResourceType>::"<id>"` (within hierarchy) Also covers `resource is <Path> in <ResourceType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `resource is <ResourceType>` (any entity of this type)
    - `role` CedarResourceConstraintPattern: Constraint patterns for filtering policies by resource constraint type. Each field corresponds to a Cedar resource constraint pattern.
      - `eq` boolean: Include policies with `resource == <ResourceType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `resource in <ResourceType>::"<id>"` (within hierarchy) Also covers `resource is <Path> in <ResourceType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `resource is <ResourceType>` (any entity of this type)
    - `server` CedarResourceConstraintPattern: Constraint patterns for filtering policies by resource constraint type. Each field corresponds to a Cedar resource constraint pattern.
      - `eq` boolean: Include policies with `resource == <ResourceType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `resource in <ResourceType>::"<id>"` (within hierarchy) Also covers `resource is <Path> in <ResourceType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `resource is <ResourceType>` (any entity of this type)
    - `table` CedarResourceConstraintPattern: Constraint patterns for filtering policies by resource constraint type. Each field corresponds to a Cedar resource constraint pattern.
      - `eq` boolean: Include policies with `resource == <ResourceType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `resource in <ResourceType>::"<id>"` (within hierarchy) Also covers `resource is <Path> in <ResourceType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `resource is <ResourceType>` (any entity of this type)
    - `user` CedarResourceConstraintPattern: Constraint patterns for filtering policies by resource constraint type. Each field corresponds to a Cedar resource constraint pattern.
      - `eq` boolean: Include policies with `resource == <ResourceType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `resource in <ResourceType>::"<id>"` (within hierarchy) Also covers `resource is <Path> in <ResourceType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `resource is <ResourceType>` (any entity of this type)
    - `view` CedarResourceConstraintPattern: Constraint patterns for filtering policies by resource constraint type. Each field corresponds to a Cedar resource constraint pattern.
      - `eq` boolean: Include policies with `resource == <ResourceType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `resource in <ResourceType>::"<id>"` (within hierarchy) Also covers `resource is <Path> in <ResourceType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `resource is <ResourceType>` (any entity of this type)
    - `warehouse` CedarResourceConstraintPattern: Constraint patterns for filtering policies by resource constraint type. Each field corresponds to a Cedar resource constraint pattern.
      - `eq` boolean: Include policies with `resource == <ResourceType>::"<id>"` (specific entity)
      - `in` boolean: Include policies with `resource in <ResourceType>::"<id>"` (within hierarchy) Also covers `resource is <Path> in <ResourceType>::"<id>"` (typed entity within hierarchy)
      - `is` boolean: Include policies with `resource is <ResourceType>` (any entity of this type)
  - `source-filter` string[], nullable: Only return policies from the specified source IDs. If not provided, policies from all sources are returned.

## Response `200`

Active policies that match the query

- GetCedarPoliciesResponse
  - `next-page-token` string, nullable: Opaque token for retrieving the next page of results. If `None`, there are no more pages to retrieve.
  - `policies` unknown[], required: List of JSON formatted Cedar policies. For schema details, see `<https://docs.cedarpolicy.com/policies/json-format.html>`
    - unknown

---

[API](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api.md) - [All operations](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/revisions/c5cb9a12a98c?raw)