Skip to main content

access control

Endpoints for attribute-based access control: creating, assigning and searching access control policies, the CEL tools used to write and test policy rules (CEL is the expression language the rules are written in), simulating how permission policies apply to users, and checking whether users can perform actions. Most endpoints that use the policy engine return 501 without an Entry or Enterprise Advanced license, and 406 while the EnableAttributeBasedAccessControl setting is off. The action decisions endpoint (POST /api/v4/access_control/decisions/actions/search) instead allows every action while the setting is off. See our attribute-based access control documentation for more information.