---
title: "Get an Access Policy"
method: GET
path: "/access-policies/{access_policy}"
tags: ["access-policies"]
---

# Get an Access Policy

`GET /access-policies/{access_policy}`

## Request

- Base URL: `https://example.scalr.io/api/iacp/v3`
- URL: `https://example.scalr.io/api/iacp/v3/access-policies/{access_policy}`
- Auth: HTTP bearer

The endpoint returns [IAM](https://docs.scalr.io/docs/identity-and-access-management) access policy by ID.

## Path parameters

- `access_policy` string, required

## Query parameters

- `include` string[]

## Response `200`

Success.

- AccessPolicyDocument: JSON:API Document. see: https://jsonapi.org/format/#document-structure
  - `data` AccessPolicy: Grants the permissions declared in a role to a user, team, or service account. An access policy is applied to an environment or a specific workspace.
    - `attributes` object
      - `is-system` boolean: The access policy is a built-in read-only policy that cannot be updated or deleted.
    - `id` string
    - `links` object
    - `relationships` object, required
      - `account` object: Grant access to the account and to all environments and workspaces in the account.
        - `data` object, nullable, required
          - `id` string, required
          - `type` 'accounts' | '', required
      - `environment` object: Grant access to the environment and all workspaces within it.
        - `data` object, nullable, required
          - `id` string, required
          - `type` 'environments' | '', required
      - `roles` object, required: The roles with permissions.
        - `data` object[], required
          - `id` string, required
          - `type` 'roles' | '', required
      - `service-account` object: Role binding to a service account.
        - `data` object, nullable, required
          - `id` string, required
          - `type` 'service-accounts' | '', required
      - `team` object: Role binding to a team.
        - `data` object, nullable, required
          - `id` string, required
          - `type` 'teams' | '', required
      - `user` object: Role binding to a user.
        - `data` object, nullable, required
          - `id` string, required
          - `type` 'users' | '', required
      - `workspace` object: Grant access to the workspace.
        - `data` object, nullable, required
          - `id` string, required
          - `type` 'workspaces' | '', required
    - `type` 'access-policies', required
  - `included` object[]
  - `meta` object

## Other responses

- `403`: User unauthorized to perform this action.
- `404`: Access policy not found.
- `4XX`: Client error.
- `5XX`: Server error.

---

[API](https://skmtc.dev/scalr/apis/scalr-iacp-api.md) - [All operations](https://skmtc.dev/scalr/apis/scalr-iacp-api/llms.txt) - [OpenAPI document](https://skmtc.dev/scalr/apis/scalr-iacp-api/revisions/d3e1dc85657a?raw)