---
title: "Create ACL"
method: POST
path: "/v1/acls"
tags: ["Redpanda ACLs"]
---

# Create ACL

`POST /v1/acls`

Create a new ACL.

## Request body

- CreateACLRequest
  - `host` string, required — The host address to use for this ACL. To allow a principal access from multiple hosts, you must create an ACL for each host.
  - `operation` 'OPERATION_ANY' | 'OPERATION_ALL' | 'OPERATION_READ' | 'OPERATION_WRITE' | 'OPERATION_CREATE' | 'OPERATION_DELETE' | 'OPERATION_ALTER' | 'OPERATION_DESCRIBE' | 'OPERATION_CLUSTER_ACTION' | 'OPERATION_DESCRIBE_CONFIGS' | 'OPERATION_ALTER_CONFIGS' | 'OPERATION_IDEMPOTENT_WRITE' | 'OPERATION_CREATE_TOKENS' | 'OPERATION_DESCRIBE_TOKENS', required — The operation that is allowed or denied (e.g. READ).
  - `permission_type` 'PERMISSION_TYPE_ANY' | 'PERMISSION_TYPE_DENY' | 'PERMISSION_TYPE_ALLOW', required — Whether the operation should be allowed or denied.
  - `principal` string, required — The user for whom this ACL applies. With the Kafka simple authorizer, you must include the prefix "User:" with the user name.
  - `resource_name` string — The name of the resource this ACL targets. For requests with resource_type CLUSTER, this will default to "kafka-cluster".
  - `resource_pattern_type` 'RESOURCE_PATTERN_TYPE_ANY' | 'RESOURCE_PATTERN_TYPE_MATCH' | 'RESOURCE_PATTERN_TYPE_LITERAL' | 'RESOURCE_PATTERN_TYPE_PREFIXED', required — The pattern to use for matching the specified resource_name (any, exact match, literal, or prefixed).
  - `resource_type` 'RESOURCE_TYPE_ANY' | 'RESOURCE_TYPE_TOPIC' | 'RESOURCE_TYPE_GROUP' | 'RESOURCE_TYPE_CLUSTER' | 'RESOURCE_TYPE_TRANSACTIONAL_ID' | 'RESOURCE_TYPE_DELEGATION_TOKEN' | 'RESOURCE_TYPE_USER' | 'RESOURCE_TYPE_REGISTRY' | 'RESOURCE_TYPE_SUBJECT', required — The type of resource (topic, consumer group, etc.) this ACL targets.

## Response `201`

Created

- CreateACLResponse

## Other responses

- `401` — Unauthenticated.
- `500` — Internal Server Error. Reach out to support.
- `default` — An unexpected error response.

---

[API](https://skmtc.dev/redpanda-data/apis/redpanda-cloud-data-plane-api.md) · [All operations](https://skmtc.dev/redpanda-data/apis/redpanda-cloud-data-plane-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/redpanda-data/redpanda-cloud-data-plane-api/revisions/7eef0bcc42e7/schema)