Creates a new access policy that defines which users, devices, and groups can access specific network resources. Policies are the core of the Zero Trust access control system and determine network access permissions. required: true content:
application/json:
schema:
$ref: “#/components/schemas/CreatePolicyDto”

Retrieves a paginated list of all access policies for the tenant with advanced filtering capabilities. Policies are ordered by priority and determine network access permissions for users and devices. - name: sort
required: false
in: query
description: >-
Sort order in JSON format {“field”: “direction”}. Sortable fields:
id, order. Direction: asc, desc
schema:
example: “-order,id”
type: string

• required: false
  name: limit
  in: query
  schema:
  type: number
• required: false
  name: offset
  in: query
  schema:
  type: number
• name: filter[resources.id]
  required: false
  in: query
  description: Filter policies by resource ID (UUID format)
  schema:
  example: 123e4567-e89b-12d3-a456-426614174000
  type: string
• name: filter[allResources]
  required: false
  in: query
  description: Filter policies by all resources flag
  schema:
  example: true
  type: boolean
• name: filter[devices.id]
  required: false
  in: query
  description: Filter policies by device ID (UUID format)
  schema:
  example: 123e4567-e89b-12d3-a456-426614174000
  type: string
• name: filter[groups.id]
  required: false
  in: query
  description: Filter policies by group ID (UUID format)
  schema:
  example: 123e4567-e89b-12d3-a456-426614174000
  type: string
• name: filter[users.id]
  required: false
  in: query
  description: Filter policies by user ID (UUID format)
  schema:
  example: 123e4567-e89b-12d3-a456-426614174000
  type: string
• name: filter[allUsers]
  required: false
  in: query
  description: Filter policies by all users flag
  schema:
  example: true
  type: boolean
• name: filter[allGroups]
  required: false
  in: query
  description: Filter policies by all groups flag
  schema:
  example: false
  type: boolean
• name: filter[allDevices]
  required: false
  in: query
  description: Filter policies by all devices flag
  schema:
  example: true
  type: boolean
• name: filter[rule.id]
  required: false
  in: query
  description: Filter policies by rule ID (UUID format)
  schema:
  example: 123e4567-e89b-12d3-a456-426614174000
  type: string
• name: filter[id]
  required: false
  in: query
  description: Filter policies by ID (UUID format)
  schema:
  example: 123e4567-e89b-12d3-a456-426614174000
  type: string
• name: filter[name]
  required: false
  in: query
  description: Filter policies by name
  schema:
  example: My Policy
  type: string
• name: filter[type]
  required: false
  in: query
  description: Filter policies by type
  schema:
  enum:
  - PRIVATE
  - SAAS
  - INTERNET
  - SITETOSITE
  type: string
• name: page[offset]
  required: false
  in: query
  description: “Number of policies to skip (minimum: 0)”
  schema:
  example: 0
  type: number
• name: page[limit]
  required: false
  in: query
  description: “Number of policies to return per page (minimum: 1)”
  schema:
  example: 10
  type: number

Changes the priority order of access policies. Policy order is crucial as policies are evaluated in sequence, and the first matching policy determines access permissions. required: true content:
application/json:
schema:
type: array
items:
type: string

Permanently removes an access policy from the tenant. This operation will affect network access permissions for all users and devices covered by this policy.

Modifies the configuration of an existing access policy including its rules, target users/devices/resources, and access permissions. Changes take effect immediately and affect network access.