Skip to main content
PUT
Replace a policy's application list

Authorizations

Authorization
string
header
required

Bearer token authentication. Pass your AccessOwl API token in the Authorization header as Bearer <token>.

Headers

Idempotency-Key
string

Optional key (1–255 chars) for safely retrying a request. Reusing the same key for the same request returns 409 Conflict and is not processed again — this confirms the request was already received. Keys are retained for 14 days.

Required string length: 1 - 255

Path Parameters

policy_id
string
required

Body

application/json

Set applications parameters

Replaces a policy's complete application list. application_ids fully replace the policy's applications (empty list clears them).

application_ids
string<uuid>[]
required

The complete set of application IDs for this policy.

elevated
boolean
default:false

When true, the policy applies only to elevated access requests.

Response

Policy

A policy that gates access requests for a list of applications. When elevated, the policy applies only to elevated access requests; otherwise it applies to all access requests. Assign applications via PUT /policies/{id}/applications.

default_policy
boolean
required

Whether this is the default policy

elevated
boolean
required

When true, the policy applies only to elevated access requests

id
string<uuid>
required

Policy ID

title
string
required

Policy title

application_ids
string<uuid>[]

IDs of the applications this policy applies to

inserted_at
string<date-time>
lock_version
integer

Optimistic lock version

updated_at
string<date-time>