---
title: "Create Access Policy"
method: POST
path: "/setup/access/policy"
tags: ["Organizations"]
---

# Create Access Policy

`POST /setup/access/policy`

Create an access policy to define the user's permissions more granularly than the role-based permissions.

## Request body

- object
  - `policy` object — Set access policy settings. Example - Acme, Inc.
    - `name` string — Name of the Policy. Note: names cannot include these characters: + = @
    - `description` string — Short description of policy
    - `policyContent` object — Set permissions objects list
      - `statements` union[] — List of permissions statements
        - union
          - object
            - `effect` string — Valid values "ALLOW", "DENY"
            - `actions` string[] — Set a list of required actions for this permissions statement. full list of actions can be found - https://docs.flexera.com/spot/account-user-management/user-management/access-policies-actions/
            - `resources` string[] — Set a list of resources IDs. In order to include all resources in this statement - use "*"
          - object
            - `effect` string — Valid values "ALLOW", "DENY"
            - `actions` string[] — Set a list of required actions for this permissions statement. full list of actions can be found - https://docs.flexera.com/spot/account-user-management/user-management/access-policies-actions/
            - `resources` string[] — Set a list of resources IDs. In order to include all resources in this statement - use "*"

## Response `200`

Create Access Policy Response

- object
  - `request` object — Original request properties
    - `id` string — Unique ID associated with this request
    - `url` string — The URL that was used for the request
    - `method` string — The HTTP **METHOD** used for the request
    - `timestamp` string — When the request was received by Spot
  - `response` object — Response package that includes, status, type and any relevant data.
    - `status` object
      - `code` integer — HTTP status code assigned to this response
      - `message` string — HTTP status message for the respective status code
    - `kind` string — The data type of each item in the response
    - `items` object[] — Array of data objects
      - `name` string — Set access policy name
      - `description` string — Set access policy description
      - `policyContent` object[] — Set permissions objects list
      - `id` string — ID
    - `count` integer — Size of the data object array

## Other responses

- `400` — Bad Request

---

[API](https://skmtc.net/spot/apis/spot-by-flexera-api.md) · [All operations](https://skmtc.net/spot/apis/spot-by-flexera-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/spot/spot-by-flexera-api/versions/2e5445f30576/schema)