Sign in
Access Control - Policies

Export Access Control Policies

Returns a policy export document for the selected policy IDs. Requires administrator or delegated-admin access and the eng-lc-sub-users feature flag. The document is a strict subset of the sub-user policy request payload — a consumer adds only connector_display_name before submitting it to the OAuth authorize endpoint.

get/access_control/policies/export

Query parameters

policy_idsstring required
Example:101,205

Comma-separated list of policy IDs to export. Each ID is a positive integer without leading zeros, and at most PolicyRequestPayload::MAX_POLICIES (20) may be listed.

Response

OK

version1 required

Document version. Opaque to callers; only the policy request parser reads it.

sitestring

Deployment site identifier (e.g. aws, eu01, ap02, ap03, aws-tokyo). Omitted when the deployment cannot determine the site.

stage'development' | 'staging' | 'production'

Deployment stage. Omitted when the deployment cannot determine the stage. The vocabulary is PolicyRequestPayload::ALLOWED_STAGES; a deployment outside it cannot export.

account_idinteger required

The account ID that owns the selected policies.

policy_idsinteger[] required

Deduplicated, ascending-sorted list of selected policy IDs. At most PolicyRequestPayload::MAX_POLICIES (20) entries.

Example response

{
  "version": 1,
  "site": "aws",
  "stage": "production",
  "account_id": 12345,
  "policy_ids": [
    101,
    205
  ]
}

Changes