Skip to main content
Version: Latest (4.0.3)
Version: 1.0.0

Policy Management API

Policy Management Service

The policy-management-srv is the administrative API for cidaas AuthZEN authorization. It manages Rego policies, PIP and Discovery data-source registrations (your GraphQL catalog URL, query config, credentials), search configuration, live and simulation version pins, an optional sample entity catalog for experiments, policy versions, resource export/import bundles, evaluation audit history, and ReBAC (Relationship-Based Access Control) administration via Relation Store.

Production AuthZEN search calls the GraphQL endpoint you register as a Discovery source, not the sample entities API. Learn more in AuthZEN Fine-Grained Authorization, AuthZEN Search, and AuthZEN Simulation.

Authentication

Security Scheme Type:

oauth2

OAuth Flow (authorizationCode):

Scopes:

  • cidaas:authzen_management: deprecated — still accepted for backward compatibility; will be removed. Use cidaas:authzen_read, cidaas:authzen_write, cidaas:authzen_delete, or ReBAC/export-import scopes instead.

  • cidaas:authzen_read: read AuthZEN policies and configuration

  • cidaas:authzen_write: create and update AuthZEN resources

  • cidaas:authzen_delete: delete AuthZEN resources

  • cidaas:authzen_rebac_read: read ReBAC schema and relationships

  • cidaas:authzen_rebac_write: write ReBAC schema and relationships

  • cidaas:resource_export: export AuthZEN resource bundles

  • cidaas:resource_import: import AuthZEN resource bundles

OAuth Flow (clientCredentials):

Scopes:

  • cidaas:authzen_management: deprecated — still accepted for backward compatibility; will be removed. Use cidaas:authzen_read, cidaas:authzen_write, cidaas:authzen_delete, or ReBAC/export-import scopes instead.

  • cidaas:authzen_read: read AuthZEN policies and configuration

  • cidaas:authzen_write: create and update AuthZEN resources

  • cidaas:authzen_delete: delete AuthZEN resources

  • cidaas:authzen_rebac_read: read ReBAC schema and relationships

  • cidaas:authzen_rebac_write: write ReBAC schema and relationships

  • cidaas:resource_export: export AuthZEN resource bundles

  • cidaas:resource_import: import AuthZEN resource bundles