---
title: "Export Access Control Policies"
method: GET
path: "/access_control/policies/export"
tags: ["Access Control - Policies"]
---

# Export Access Control Policies

`GET /access_control/policies/export`

Returns a policy export document for the selected policy IDs. Requires administrator or delegated-admin access and the eng-lc-sub-users feature flag. The document is a strict subset of the sub-user policy request payload — a consumer adds only `connector_display_name` before submitting it to the OAuth authorize endpoint.

## Query parameters

- `policy_ids` string, required

## Response `200`

OK

- PolicyExportDocument — A machine-readable document describing a selection of policies for a given account and deployment. A consumer adds `connector_display_name` and submits this document verbatim as the `tai_policy_request` parameter on the OAuth authorize endpoint.
  - `version` 1, required — Document version. Opaque to callers; only the policy request parser reads it.
  - `site` string — Deployment site identifier (e.g. aws, eu01, ap02, ap03, aws-tokyo). Omitted when the deployment cannot determine the site.
  - `stage` 'development' | 'staging' | 'production' — Deployment stage. Omitted when the deployment cannot determine the stage. The vocabulary is `PolicyRequestPayload::ALLOWED_STAGES`; a deployment outside it cannot export.
  - `account_id` integer, required — The account ID that owns the selected policies.
  - `policy_ids` integer[], required — Deduplicated, ascending-sorted list of selected policy IDs. At most `PolicyRequestPayload::MAX_POLICIES` (20) entries.

## Changes

- **2026-09-03** `c3d1622db381` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/treasure/apis/treasure-data-api/changes/access_control/policies/export/get.md)

---

[API](https://skmtc.dev/treasure/apis/treasure-data-api.md) · [All operations](https://skmtc.dev/treasure/apis/treasure-data-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/treasure/treasure-data-api/revisions/c3d1622db381/schema)