Create Policy

Create a new custom policy for project.

A policy is a reusable set of permissions (allow/deny rules over modules and actions). Policies are attached to roles; a user's effective permissions are the union of the policies on all their roles.

This endpoint creates the policy; the response returns its id.

Create a new custom policy for project.

post

Authorizations

Bearer

HTTPRequired

JWT Bearer Authorization

Path parameters

versionstring · nullableRequired

The CodeMash API version used to fetch data from the API. If not specified, the last version will be used. E.g.: v3

Body

multipart/form-dataapplication/json

Create a new custom policy for project.

policyNamestringRequired

Display name of the new policy, unique within the project.

descriptionstring · nullableOptional

Optional human-readable description of what the policy grants.

policyDocumentJsonstring · nullableOptional

AWS-IAM-style policy document as a raw JSON string (an object with a permission statement list) matching PolicyDocument.schema.json. Malformed or invalid documents are rejected before any change is made.

projectIdstringRequired

ID of your project. Can be passed in a header as norbix-project-id.

envstring · nullableOptional

Target environment for this request (e.g. TEST, STAGING). Optional — when omitted the request runs against PROD. Can be passed in a header as norbix-env.

cultureCodestring · nullableOptional

Specify culture code when your response from the API should be localised. E.g.: en

timeZoneIdstring · nullableOptional

TimeZone

correlationIdstring · nullableOptional

CorrelationId for each request

Responses

200

OK

application/json

idstring · nullableOptional

statusstring · nullableOptional

post/{version}/membership/policies

HTTPcURLJavaScriptPython

POST /{version}/membership/policies HTTP/1.1
Host: hub.norbix.ai
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: multipart/form-data
Accept: */*
Content-Length: 211

{
  "policyName": "text",
  "description": "text",
  "policyDocumentJson": "text",
  "projectId": "text",
  "env": "text",
  "resolvedEnv": {
    "value": "text",
    "isProd": true
  },
  "cultureCode": "text",
  "timeZoneId": "text",
  "correlationId": "text"
}

multipart/form-dataapplication/json

200

OK

{
  "responseStatus": {
    "isSuccess": true
  },
  "id": "text",
  "status": "text"
}

In the dashboard

Manage this visually in Norbix Cloud — see Membership → Policies.

Use it from code

Every Norbix SDK exposes this endpoint as a method — see Create Policy in the SDK reference, with examples in every language.