---
title: "Create an access policy"
method: POST
path: "/v1/platform/orgs/current/access-policies"
tags: ["access_policies"]
---

# Create an access policy

`POST /v1/platform/orgs/current/access-policies`

Creates a new access policy.

## Request body

- AuthzInternalCreateAccessPolicyPayload
  - `condition_groups` AuthzInternalConditionGroup[]
    - `conditions` AuthzInternalCondition[]
      - `attribute_key` string
      - `attribute_name` 'resource_tag_key'
      - `attribute_value` string
      - `operator` 'equals' | 'not_equals' | 'equals_ignore_case' | 'not_equals_ignore_case' | 'matches' | 'not_matches' | 'equals_if_exists' | 'not_equals_if_exists' | 'equals_ignore_case_if_exists' | 'not_equals_ignore_case_if_exists' | 'matches_if_exists' | 'not_matches_if_exists'
    - `permission` 'annotation-queues:create' | 'annotation-queues:delete' | 'annotation-queues:read' | 'annotation-queues:update' | 'charts:create' | 'charts:delete' | 'charts:read' | 'charts:update' | 'datasets:create' | 'datasets:delete' | 'datasets:read' | 'datasets:share' | 'datasets:update' | 'deployments:create' | 'deployments:delete' | 'deployments:read' | 'deployments:update' | 'feedback:create' | 'feedback:delete' | 'feedback:read' | 'feedback:update' | 'experiments:run' | 'issues:create' | 'issues:delete' | 'issues:read' | 'issues:update' | 'projects:create' | 'projects:delete' | 'projects:read' | 'projects:update' | 'projects:increase-trace-tier' | 'projects:decrease-trace-tier' | 'prompts:create' | 'prompts:delete' | 'prompts:read' | 'prompts:update' | 'prompts:share' | 'rules:create' | 'rules:delete' | 'rules:read' | 'rules:update' | 'runs:create' | 'runs:read' | 'runs:share' | 'runs:delete' | 'sandboxes:create' | 'sandboxes:delete' | 'sandboxes:read' | 'sandboxes:update' | 'sandboxes:exec' | 'workspaces:manage-members' | 'workspaces:manage-secrets' | 'workspaces:manage' | 'workspaces:manage-model-configs' | 'workspaces:read' | 'alerts:create' | 'alerts:update' | 'alerts:delete' | 'alerts:read' | 'bulk-exports:read' | 'bulk-exports:manage' | 'mcp-servers:create' | 'mcp-servers:delete' | 'mcp-servers:invoke' | 'mcp-servers:read' | 'mcp-servers:update' | 'gateway:invoke' | 'fleet:read-admin-config' | 'fleet:write-admin-config' | 'organization:pats:create' | 'organization:read' | 'organization:manage'
    - `resource_type` string
  - `description` string
  - `effect` string
  - `name` string
  - `role_ids` string[] — if present, attach to the specified roles

## Response `201`

Access policy created

- AuthzInternalAccessPolicyCreateResponse
  - `id` string

## Other responses

- `400` — Bad request
- `403` — Forbidden
- `404` — Role not found
- `500` — Internal server error
- `503` — Service unavailable

---

[API](https://skmtc.net/langchain-ai/apis/langsmith.md) · [All operations](https://skmtc.net/langchain-ai/apis/langsmith/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/langchain-ai/langsmith/revisions/a0acb3a6a101/schema)