Skip to main content
Version: Latest (4.0.3)
Version: 1.0.0

Policy Decision API

Policy Decision Service

The policy-decision-srv implements the cidaas AuthZEN Policy Decision Point. It evaluates Rego policies managed by policy-management-srv, resolves PIP data from configured data sources, and supports ReBAC builtins backed by Relation Store.

Live evaluation uses /access/v1/*. Simulation evaluation uses /access/v1/simulation/* against the simulation policy channel. See AuthZEN Search and AuthZEN Simulation.

See Access Evaluation for workflow details.

Authentication

Security Scheme Type:

oauth2

OAuth Flow (authorizationCode):

Scopes:

  • cidaas:authzen_evaluate: evaluate access and search entities on the live channel

  • cidaas:authzen_simulate: evaluate access and search entities on the simulation channel

  • cidaas:authzen_explain: run OPA explain traces

  • cidaas:authzen_management: deprecated — still accepted for backward compatibility; will be removed. Use cidaas:authzen_evaluate, cidaas:authzen_simulate, or cidaas:authzen_explain instead.

OAuth Flow (clientCredentials):

Scopes:

  • cidaas:authzen_evaluate: evaluate access and search entities on the live channel

  • cidaas:authzen_simulate: evaluate access and search entities on the simulation channel

  • cidaas:authzen_explain: run OPA explain traces

  • cidaas:authzen_management: deprecated — still accepted for backward compatibility; will be removed. Use cidaas:authzen_evaluate, cidaas:authzen_simulate, or cidaas:authzen_explain instead.