---
title: "The live access policy of an organization"
method: GET
path: "/api/orgs/{orgId}/policy"
tags: ["policy"]
---

# The live access policy of an organization

`GET /api/orgs/{orgId}/policy`

## Request

- Base URL: `https://api.wizbi.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.wizbi.ai/api/orgs/{orgId}/policy`
- Auth: none declared

Admins see the policy and whether they may edit it; editing is super_admin only unless `orgAdminCanEdit`.

## Path parameters

- `orgId` string, required

## Response `200`

The policy.

- GetPolicyResponse
  - `policy` Policy, required
    - `orgId` string, required
    - `version` integer, required
    - `groups` string[]
    - `rules` object[]
      - `id` string, required
      - `kind` 'topic' | 'source' | 'table' | 'column' | 'row', required
      - `effect` 'allow' | 'deny', required
      - `scope` union, required
        - object
          - `all` true, required
          - `except` string[]
        - object
          - `groups` string[], required
        - object
          - `principals` string[], required
      - `target` object, required
        - `sourceId` string
        - `sources` string[]
        - `table` string
        - `tables` string[]
        - `column` string
        - `columns` string[]
        - `rowFilter` string
        - `rowFilters` object
        - `topic` string
      - `compiled` object
        - `tables` string[]
        - `columns` string[]
        - `keywords` string[]
        - `rationale` string
        - `compiledAt` string, date-time, required
        - `model` string
      - `enabled` boolean
      - `say` string
      - `refusal` string
      - `exemptSuperAdmin` boolean
      - `exemptPrincipals` string[]
      - `note` string
      - `createdAt` string, date-time
      - `createdBy` string
      - `updatedAt` string, date-time
      - `updatedBy` string
    - `rooms` object[]
      - `room` string, required
      - `groupId` string
      - `reads` 'group' | 'speaker'
      - `boundAt` string, date-time, required
      - `boundBy` string, required
      - `note` string
    - `orgAdminCanEdit` boolean
    - `note` string
    - `updatedAt` string, date-time, required
    - `updatedBy` string
  - `canEdit` boolean, required
  - `role` string, required

## Other responses

- `400`: Invalid request.
- `401`: No context.
- `403`: Forbidden.
- `404`: Not found.
- `409`: Stale version.

---

[API](https://skmtc.dev/wizbi/apis/wizbi-core-api.md) · [All operations](https://skmtc.dev/wizbi/apis/wizbi-core-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wizbi/apis/wizbi-core-api/revisions/5a47416c82ec?raw)