Authorization
Policies
The Policies page (under Authorization → Manage) holds reusable bundles of permissions. Roles attach policies to compose effective access — and the same policy can attach to many roles, so editing it once updates every role that uses it.
# Create a policy
curl -X POST https://your-app.authaz.io/api/v1/applications/{appId}/policies \
-H "X-API-Key: $AUTHAZ_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"name": "Invoices Writer",
"description": "Create, read, update, and send invoices.",
"permissions": [
"invoices:create",
"invoices:read",
"invoices:update",
"invoices:send"
]
}'The dashboard lists every policy with its name, description, permission count, and the number of roles it's attached to.
What's in a policy#
- name and description — what shows up in the role editor when you're picking what to attach.