---
title: "Create"
method: POST
path: "/api/v1/apps/{app_id}/xaa/access_profiles"
tags: ["Cross-App Access"]
---

# Create

`POST /api/v1/apps/{app_id}/xaa/access_profiles`

Create an access profile under a resource server. The backend also
 provisions a backing AppEntitlement that users request to be granted the
 profile's scopes.

## Path parameters

- `app_id` string, required — The application that owns the resource server.

## Request body

- C1ApiCrossAppAccessV1XAAAccessProfileServiceCreateRequestInput — XAAAccessProfileServiceCreateRequest creates a new access profile.
  - `description` string — Description of what access this profile grants.
  - `displayName` string — Display name for the profile.
  - `xaaResourceServerId` string — The resource server this profile grants access to.

## Response `200`

XAAAccessProfileServiceCreateResponse returns the created access profile.

- C1ApiCrossAppAccessV1XAAAccessProfileServiceCreateResponse — XAAAccessProfileServiceCreateResponse returns the created access profile.
  - `accessProfile` C1ApiCrossAppAccessV1XAAAccessProfile — XAAAccessProfile is a requestable bundle of scopes for one resource server.
    - `appEntitlementId` string — The AppEntitlement created for this profile.
    - `appId` string — The application that owns the resource server.
    - `createdAt` string, date-time, nullable
    - `deletedAt` string, date-time, nullable
    - `description` string — Description of what access this profile grants.
    - `displayName` string — Display name for the profile.
    - `id` string — Unique identifier for this access profile.
    - `scopeCount` integer — The number of scopes currently bound to this profile.
    - `updatedAt` string, date-time, nullable
    - `xaaResourceServerId` string — The resource server this profile grants access to.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)