Update Access Policy
Update an existing access policy. Fields left out of the request keep their current values. Set approval_procedure_id to the ID of a named approval procedure to require its approval for requests for roles governed by the policy, or to an empty string to remove the policy’s approval; omit it to leave approval unchanged. The approval change and the other changes are saved together or not at all.
Authentication and permissions
Token requirements: User-based token (OAuth) or Organization-scoped API key or Team-scoped API key. Send a bearer access token for one of these identities. The permissions and resource restrictions below also apply.
- Attach an approval procedure: With a non-empty approval_procedure_id, the procedure must be a named approval procedure in the policy’s team.
- Remove the approval procedure: An empty approval_procedure_id removes the policy’s approval procedure.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
The ID of the access policy.
Body
The name of the access policy.
A description of the access policy.
The maximum number of minutes that access can be granted for.
Whether a business justification is required when requesting access. Omit to leave unchanged.
The recommended duration in minutes for access requests (optional).
Whether requests made on behalf of others require the target user's confirmation. Omit to leave unchanged.
Rekeys the policy's stable identity (apo_ + 22 base62 chars). Omit to leave unchanged. Must be unique within the team. The team-default policy cannot be rekeyed, and reserved sentinel values are rejected.
The ID of a named approval procedure that must approve requests for roles governed by the policy. Omit to leave the policy's approval unchanged; send an empty string to remove it. Attaching requires permission to view approval procedures and removing requires permission to delete them.
Response
Success
The updated access policy.

