Policies

Reusable permission sets attached to roles.

A policy is a reusable set of permissions — allow/deny statements over modules and actions. Policies are attached to roles; a user's effective permissions are the union of the policies on all their roles.

Membership → Policies.

What you can do here

The screen has two tabs: Custom Policies (yours — create, edit, delete) and System Policies (built-in, read-only). Add New opens the create screen, where a policy is written as a JSON policy document — name, description, and permission statements in one place. The same policy can be attached to many roles, so a change in one place updates every role that uses it.

Use it from code

Membership → Policies.

API reference

Endpoints: Membership → Policies.