Policies
Policies
Policies
Update
List
Delete
Test
List Policy Response
The ListPolicyResponse message.
ShowShow
The list of results containing up to X results, where X is the page size defined in the request
Hide ParametersShow Parameters
The ID of the Policy.
The description of the Policy.
The display name of the Policy.
A map of string(policy type) to steps in a policy. This structure is leftover from a previous design, and should only ever have one key->value set.
Hide ParametersShow Parameters
An array of policy steps indicating the processing flow of a policy. These steps are oneOfs, and only one property may be set for each array index at a time.
Hide ParametersShow Parameters
This policy step indicates that a ticket should have an approved outcome. This is a terminal approval state and is used to explicitly define the end of approval steps.
The Approval message.
This message contains a oneof named typ. Only a single field of the following list may be set at a time:
- users
- manager
- appOwners
- group
- self
- entitlementOwners
- expression
- webhook
- resourceOwners
- agent
The provision step references a provision policy for this step.
This policy step indicates that a ticket should have a denied outcome. This is a terminal approval state and is used to explicitly define the end of approval steps.
Define a Wait step for a policy to wait on a condition to be met.
This message contains a oneof named until. Only a single field of the following list may be set at a time:
- condition
Indicates the type of this policy. Can also be used to get the value from policySteps.
Hide ParametersShow Parameters
An array of actions (ordered) to take place after a policy completes processing.
Hide ParametersShow Parameters
ONLY valid when used in a CERTIFY Ticket Type:
Causes any deprovision or change in a grant to be applied when Certify Ticket is closed.
This field is part of the action oneof.
See the documentation for c1.api.policy.v1.PolicyPostActions for more details.
A policy configuration option that allows for reassinging tasks to delgated users. This level of delegation refers to the individual delegates users set on their account.
Hide ParametersShow Parameters
The condition field.
This is a reference to a list of policy steps from policy_steps
Whether this policy is a builtin system policy. Builtin system policies cannot be edited.
The nextPageToken is shown for the next page if the number of results is larger than the max page size. The server returns one page of results and the nextPageToken until all results are retreived. To retrieve the next page, use the same request and append a pageToken field with the value of nextPageToken shown on the previous page.
Policy
A policy describes the behavior of the ConductorOne system when processing a task. You can describe the type, approvers, fallback behavior, and escalation processes.
ShowShow
The ID of the Policy.
The description of the Policy.
The display name of the Policy.
A map of string(policy type) to steps in a policy. This structure is leftover from a previous design, and should only ever have one key->value set.
Hide ParametersShow Parameters
An array of policy steps indicating the processing flow of a policy. These steps are oneOfs, and only one property may be set for each array index at a time.
Hide ParametersShow Parameters
This policy step indicates that a ticket should have an approved outcome. This is a terminal approval state and is used to explicitly define the end of approval steps.
The Approval message.
This message contains a oneof named typ. Only a single field of the following list may be set at a time:
- users
- manager
- appOwners
- group
- self
- entitlementOwners
- expression
- webhook
- resourceOwners
- agent
The provision step references a provision policy for this step.
This policy step indicates that a ticket should have a denied outcome. This is a terminal approval state and is used to explicitly define the end of approval steps.
Define a Wait step for a policy to wait on a condition to be met.
This message contains a oneof named until. Only a single field of the following list may be set at a time:
- condition
Indicates the type of this policy. Can also be used to get the value from policySteps.
Hide ParametersShow Parameters
An array of actions (ordered) to take place after a policy completes processing.
Hide ParametersShow Parameters
ONLY valid when used in a CERTIFY Ticket Type:
Causes any deprovision or change in a grant to be applied when Certify Ticket is closed.
This field is part of the action oneof.
See the documentation for c1.api.policy.v1.PolicyPostActions for more details.
A policy configuration option that allows for reassinging tasks to delgated users. This level of delegation refers to the individual delegates users set on their account.
Hide ParametersShow Parameters
The condition field.
This is a reference to a list of policy steps from policy_steps
Whether this policy is a builtin system policy. Builtin system policies cannot be edited.
Policy Post Actions
These are actions to happen after a policy is complete.
This message contains a oneof named action. Only a single field of the following list may be set at a time:
- certifyRemediateImmediately
ShowShow
ONLY valid when used in a CERTIFY Ticket Type:
Causes any deprovision or change in a grant to be applied when Certify Ticket is closed.
This field is part of the action oneof.
See the documentation for c1.api.policy.v1.PolicyPostActions for more details.
Rule
The Rule message.
ShowShow
The condition field.
This is a reference to a list of policy steps from policy_steps