Replace a policy's application list

curl --request PUT \ --url https://api.accessowl.com/api/v1/policies/{policy_id}/applications \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data ' { "application_ids": [ "7488a646-e31f-11e4-aace-600308960670" ], "elevated": false } '

{ "application_ids": [ "8599b757-f42a-22f5-bbdf-711419071781" ], "default_policy": false, "elevated": false, "id": "7488a646-e31f-11e4-aace-600308960670", "inserted_at": "2023-01-01T00:00:00Z", "lock_version": 1, "title": "Engineering manager approval", "updated_at": "2023-01-01T00:00:00Z" }

Authorizations

Authorization

string

header

required

Bearer token authentication. Pass your AccessOwl API token in the Authorization header as Bearer <token>.

Headers

Idempotency-Key

string

Optional key (1–255 chars) for safely retrying a request. Reusing the same key for the same request returns 409 Conflict and is not processed again — this confirms the request was already received. Keys are retained for 14 days.

Required string length: 1 - 255

Path Parameters

policy_id

string

required

Body

application/json

Set applications parameters

Replaces a policy's complete application list. application_ids fully replace the policy's applications (empty list clears them).

application_ids

string<uuid>[]

required

The complete set of application IDs for this policy.

elevated

boolean

default:false

When true, the policy applies only to elevated access requests.

Response

Policy

A policy that gates access requests for a list of applications. When elevated, the policy applies only to elevated access requests; otherwise it applies to all access requests. Assign applications via PUT /policies/{id}/applications.

default_policy

boolean

required

Whether this is the default policy

elevated

boolean

required

When true, the policy applies only to elevated access requests

string<uuid>

required

Policy ID

title

string

required

Policy title

application_ids

string<uuid>[]

IDs of the applications this policy applies to

inserted_at

string<date-time>

lock_version

integer

Optimistic lock version

updated_at

string<date-time>