Add a credential policy
/credentials/{credential_id}/policiesAdds a policy to a credential. The change publishes a new policy revision containing the existing policies plus the new one.
Permissions listed in capabilities that the calling credential cannot delegate, including the non-delegable credentials.* and administrators.* permissions, are rejected with delegation_limit_exceeded, and no new revision is published.
A credential cannot modify its own policies.
Autonomous mode: the API credential secret, sent as a bearer token. Credential secrets are identified by a fixed prefix.
In: header
Path Parameters
Header Parameters
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/credentials/string/policies" \ -H "Idempotency-Key: string" \ -H "Content-Type: application/json" \ -d '{ "capabilities": [ "string" ], "resources": [ {} ] }'{ "data": { "capabilities": [ "string" ], "id": "string", "object": "policy", "published_at": "2019-08-24T14:15:22Z", "published_by": { "id": "string", "kind": "admin" }, "resources": [ { "ids": [ "string" ], "include_future": true, "parent": "string", "selector": "instance", "type": "instance" } ], "version": 0 }}List credential policies GET
Returns the policies in the credential's active policy revision, one item per policy. A credential without policies returns an empty collection.
Retrieve a credential policy GET
Retrieves a policy from the credential's active policy revision. Policies that are no longer part of the active revision, or that belong to a different credential, return `404 Not Found`. The response includes an `ETag` representing the credential's current revision. Send this value in the `If-Match` header when updating the policy to avoid overwriting a newer version.