---
title: "Policy Rules or Groups Directly Under Policy For Asset"
method: GET
path: "/api/3/assets/{assetId}/policies/{policyId}/children"
tags: ["Policy"]
---

# Policy Rules or Groups Directly Under Policy For Asset

`GET /api/3/assets/{assetId}/policies/{policyId}/children`

## Request

- Base URL: `https://<host>:<port>`
- URL: `https://<host>:<port>/api/3/assets/{assetId}/policies/{policyId}/children`
- Auth: none declared
- TypeScript: <https://skmtc.dev/rapid7/apis/rapid7-vm-api/docs/api/3/assets/:assetId/policies/:policyId/children/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieves a paged resource of either policy rules, or groups, that are defined directly underneath the specified policy with rule compliance results for the specified asset.

## Path parameters

- `assetId` integer, required: The identifier of the asset.
- `policyId` integer, required: The identifier of the policy

## Response `200`

OK

- PagedModelAssetPolicyItem
  - `links` Link[], required
    - `deprecation` string
    - `href` string: A hypertext reference, which is either a URI (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc3986">RFC 3986</a>) or URI template (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc6570">RFC 6570</a>).
    - `hreflang` string
    - `media` string
    - `rel` string: The link relation type. This value is one from the <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc5988#section-6.2">Link Relation Type Registry</a> or is the type of resource being linked to.
    - `title` string
    - `type` string
  - `page` PageMetadata: Contains metadata about the paginated response.
    - `number` integer: The index (zero-based) of the current page returned.
    - `size` integer: The maximum size of the page returned.
    - `totalPages` integer: The total number of pages available.
    - `totalResources` integer: The total number of resources available across all pages.
  - `resources` AssetPolicyItem[], required
    - `assets` PolicyItemAssetAssessmentResource: A summary of asset compliance.
      - `links` Link[], required: Hypermedia links to corresponding or related resources.
        - `deprecation` string
        - `href` string: A hypertext reference, which is either a URI (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc3986">RFC 3986</a>) or URI template (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc6570">RFC 6570</a>).
        - `hreflang` string
        - `media` string
        - `rel` string: The link relation type. This value is one from the <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc5988#section-6.2">Link Relation Type Registry</a> or is the type of resource being linked to.
        - `title` string
        - `type` string
      - `total` integer: The total number of assets.
      - `totalFailed` integer: The total number of assets that are not compliant.
      - `totalNotApplicable` integer: The total number of assets that are not applicable.
      - `totalPassed` integer
    - `description` string: A description of the policy rule or group.
    - `hasOverride` boolean: A flag indicating whether the policy rule has an active override applied to it. This field only applies to resources representing policy rules.
    - `id` integer: The identifier of the policy rule or group.
    - `isUnscored` boolean: A flag indicating whether the policy rule has a role of `"unscored"`. This field only applies to resources representing policy rules.
    - `links` Link[], required: Hypermedia links to corresponding or related resources.
      - `deprecation` string
      - `href` string: A hypertext reference, which is either a URI (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc3986">RFC 3986</a>) or URI template (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc6570">RFC 6570</a>).
      - `hreflang` string
      - `media` string
      - `rel` string: The link relation type. This value is one from the <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc5988#section-6.2">Link Relation Type Registry</a> or is the type of resource being linked to.
      - `title` string
      - `type` string
    - `name` string: The name of the policy rule or group.
    - `policy` PolicyMetadataResource: Information about the policy.
      - `links` Link[], required: Hypermedia links to corresponding or related resources.
        - `deprecation` string
        - `href` string: A hypertext reference, which is either a URI (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc3986">RFC 3986</a>) or URI template (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc6570">RFC 6570</a>).
        - `hreflang` string
        - `media` string
        - `rel` string: The link relation type. This value is one from the <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc5988#section-6.2">Link Relation Type Registry</a> or is the type of resource being linked to.
        - `title` string
        - `type` string
      - `name` string: The name of the policy.
      - `title` string: The title of the policy as visible to the user.
      - `version` string: The version of the policy.
    - `rules` PolicyRuleAssessmentResource: A summary of rule compliance for multiple policy rules. This field only applies to resources representing policy groups.
      - `links` Link[], required: Hypermedia links to corresponding or related resources.
        - `deprecation` string
        - `href` string: A hypertext reference, which is either a URI (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc3986">RFC 3986</a>) or URI template (see <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc6570">RFC 6570</a>).
        - `hreflang` string
        - `media` string
        - `rel` string: The link relation type. This value is one from the <a target="_blank" rel="noopener noreferrer" href="https://tools.ietf.org/html/rfc5988#section-6.2">Link Relation Type Registry</a> or is the type of resource being linked to.
        - `title` string
        - `type` string
      - `total` integer: The total number of policy rules.
      - `totalFailed` integer: The total number of policy rules that are not compliant against all assets.
      - `totalNotApplicable` integer: The total number of policy rules that are not applicable against all assets.
      - `totalPassed` integer: The total number of policy rules that are compliant against all assets.
      - `unscored` integer: The total number of policy rules that have a role of `"unscored"`.
    - `scope` string: The textual representation of the policy rule/group scope. Policy rules or groups that are automatically available have `"Built-in"` scope, whereas policy rules or groups created by users have scope as `"Custom"`.
    - `status` 'PASS' | 'FAIL' | 'NOT_APPLICABLE': The asset's rule compliance status.
    - `title` string: The title of the policy rule, or group, as visible to the user.
    - `type` 'rule' | 'group': Indicates whether the resource represents either a policy rule or group.

## Other responses

- `401`: Unauthorized
- `404`: Not Found
- `500`: Internal Server Error
- `503`: Service Unavailable

## Changes

- **2026-08-06** `3a8197c22d71`: 5 info
  - added the media type `application/json;charset=UTF-8` for the response with the status `200`
  - added the media type `application/json;charset=UTF-8` for the response with the status `401`
  - added the media type `application/json;charset=UTF-8` for the response with the status `404`
  - added the media type `application/json;charset=UTF-8` for the response with the status `500`
  - …1 more

[Operation history](https://skmtc.dev/rapid7/apis/rapid7-vm-api/changes/api/3/assets/:assetId/policies/:policyId/children/get.md)

---

[API](https://skmtc.dev/rapid7/apis/rapid7-vm-api.md) - [All operations](https://skmtc.dev/rapid7/apis/rapid7-vm-api/llms.txt) - [OpenAPI document](https://skmtc.dev/rapid7/apis/rapid7-vm-api/revisions/3a8197c22d71?raw)