Skip to main content
Version: Latest (4.0.6)
Version: 1.0.0

Policy Decision API

Policy Decision Service​

The policy-decision-srv implements the cidaas AuthZEN Policy Decision Point. It evaluates Rego policies managed by policy-management-srv, resolves PIP data from configured data sources, and supports ReBAC builtins backed by Relation Store.

Live evaluation uses /access/v1/*. Simulation evaluation uses /access/v1/simulation/* against the simulation policy channel. See AuthZEN Search and AuthZEN Simulation.

See Access Evaluation for workflow details.

Authentication​

Security Scheme Type:

oauth2

OAuth Flow (authorizationCode):

Scopes:

  • cidaas:authzen_evaluate: evaluate access, search, cache invalidate, and policy reload on the live channel

  • cidaas:authzen_simulate: evaluate, search, explain, and cache operations on the simulation channel

  • cidaas:authzen_explain: run OPA explain traces on the live channel

OAuth Flow (clientCredentials):

Scopes:

  • cidaas:authzen_evaluate: evaluate access, search, cache invalidate, and policy reload on the live channel

  • cidaas:authzen_simulate: evaluate, search, explain, and cache operations on the simulation channel

  • cidaas:authzen_explain: run OPA explain traces on the live channel