---
title: "Activate an authz policy version (rollback)"
method: POST
path: "/authz/policies/{name}/versions/{version}/activate"
tags: ["authz-policies"]
---

# Activate an authz policy version (rollback)

`POST /authz/policies/{name}/versions/{version}/activate`

(reserved for future use) Makes the given version of the named policy active and syncs it to OPA.

Required roles: All

## Response `200`

Version activated

- AuthzPolicy — A registered authz (Rego) policy.
  - `name` string, required — Policy name (also the Rego package suffix).
  - `version` integer, required — Monotonic version within (tenant, name).
  - `rego_sha256` string, required — SHA-256 of the Rego source.
  - `description` string, nullable
  - `status` string, required — active or archived.
  - `created_by` string, required — User id that created this version.
  - `created_at` string, nullable
  - `activated_at` string, nullable
  - `rego` string, nullable — Rego source (included only on single-policy or version reads).

## Other responses

- `401` — Unauthorized - Authentication failed
- `403` — Forbidden - requires an API key with All permission
- `404` — Not Found - the named policy or version does not exist
- `503` — Service Unavailable - authz/OPA is not configured in this environment

---

[API](https://skmtc.net/qlonolink/apis/qaip-apis.md) · [All operations](https://skmtc.net/qlonolink/apis/qaip-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/qlonolink/qaip-apis/versions/f5f5994dfe05/schema)