---
title: "Add a Kafka-native ACL entry"
method: POST
path: "/project/{project}/service/{service_name}/kafka/acl"
tags: ["Service:_Kafka"]
---

# Add a Kafka-native ACL entry

`POST /project/{project}/service/{service_name}/kafka/acl`

## Path parameters

- `project` string, required
- `service_name` string, required

## Request body

- ServiceKafkaNativeAclAddRequestBody — ServiceKafkaNativeAclAddRequestBody
  - `host` string — the host or * for all hosts
  - `operation` 'All' | 'Alter' | 'AlterConfigs' | 'ClusterAction' | 'Create' | 'CreateTokens' | 'Delete' | 'Describe' | 'DescribeConfigs' | 'DescribeTokens' | 'IdempotentWrite' | 'Read' | 'Write', required — Kafka ACL operation represents an operation which an ACL grants or denies permission to perform
  - `pattern_type` 'LITERAL' | 'PREFIXED', required — Kafka ACL pattern type of resource name
  - `permission_type` 'ALLOW' | 'DENY', required — Kafka ACL permission type
  - `principal` string, required — principal is in 'PrincipalType:name' format
  - `resource_name` string, required — Resource pattern used to match specified resources
  - `resource_type` 'Cluster' | 'DelegationToken' | 'Group' | 'Topic' | 'TransactionalId' | 'User', required — Kafka ACL resource type represents a type of resource which an ACL can be applied to

## Response `200`

Response

- ServiceKafkaNativeAclAddResponse — ServiceKafkaNativeAclAddResponse
  - `acl` object, required — Kafka-native ACL entry for Kafka service
    - `host` string, required — the host or * for all hosts
    - `id` string, required — ID
    - `operation` 'All' | 'Alter' | 'AlterConfigs' | 'ClusterAction' | 'Create' | 'CreateTokens' | 'Delete' | 'Describe' | 'DescribeConfigs' | 'DescribeTokens' | 'IdempotentWrite' | 'Read' | 'Write', required — Kafka ACL operation represents an operation which an ACL grants or denies permission to perform
    - `pattern_type` 'LITERAL' | 'PREFIXED', required — Kafka ACL pattern type of resource name
    - `permission_type` 'ALLOW' | 'DENY', required — Kafka ACL permission type
    - `principal` string, required — principal is in 'principalType:name' format
    - `resource_name` string, required — Resource pattern used to match specified resources
    - `resource_type` 'Cluster' | 'DelegationToken' | 'Group' | 'Topic' | 'TransactionalId' | 'User', required — Kafka ACL resource type represents a type of resource which an ACL can be applied to
  - `errors` object[] — List of errors occurred during request processing
    - `message` string, required — Printable error message
    - `more_info` string — URL to the documentation of the error
    - `status` integer, required — HTTP error status code
  - `message` string — Printable result of the request

## Other responses

- `400` — Invalid request parameters
- `409` — Request conflict

---

[API](https://skmtc.net/aiven/apis/aiven-api-documentation.md) · [All operations](https://skmtc.net/aiven/apis/aiven-api-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aiven/aiven-api-documentation/versions/ecaeabf1da31/schema)