---
title: "Create an Access Policy"
method: POST
path: "/access-policies"
tags: ["access-policies"]
---

# Create an Access Policy

`POST /access-policies`

Grant access for a member identity to a scope identity.

Access is a set of `roles`. Member identity might be one of `user`, `team`, or `service-account`.
Scope identity is one of `account`, `environment`, or `workspace`.

Check out [identity and access management](https://docs.scalr.io/docs/identity-and-access-management) for a detailed
description of the Scalr IAM model.

## Query parameters

- `include` string[]

## Response `201`

Successfully created.

## Other responses

- `403` — User unauthorized to perform this action.
- `404` — Relationship not found or user unauthorized to read it.
- `409` — Quota exceeded error.
- `422` — Malformed request body (missing attributes, wrong types, etc.)
- `4XX` — Client error.
- `5XX` — Server error.

---

[API](https://skmtc.net/scalr/apis/scalr-iacp-api.md) · [All operations](https://skmtc.net/scalr/apis/scalr-iacp-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/scalr/scalr-iacp-api/revisions/fc927526ad12/schema)