C1 Policy API
The Policy API from C1 — 5 operation(s) for policy.
C1 Policy API is one of 47 APIs that C1 publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Policy. The published artifact set on APIs.io includes an OpenAPI specification.
This API exposes 8 operations across 5 paths, and defines 101 schemas. It is described by OpenAPI 3.1.0, at version 0.1.0-alpha.
Requests are made against a single base URL, https://{tenantDomain}.conductor.one.
8 operations
5 paths
101 schemas
1 DELETE2 GET5 POST
Metadata
The identity and technical contract details declared by the specification.
Authentication & Security 2
C1 Policy API declares
2 security schemes
for authenticating requests.
It accepts HTTP bearer tokens (bearerAuth).
It supports OAuth 2.0 (oauth) using the clientCredentials flow.
By default, every request must be authenticated.
oauth— This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, re…
Paths & Operations 8
Across 5 paths, the API surfaces 8 operations — 1 DELETE, 2 GET, 5 POST. Each is listed below with its method, path, parameters, and response codes.
Policy 8
GET
/api/v1/policies
List
POST
/api/v1/policies
Create
DELETE
/api/v1/policies/{id}
Delete
GET
/api/v1/policies/{id}
Get
POST
/api/v1/policies/{id}
Update
POST
/api/v1/policies/test-account-provision-policy
Test
POST
/api/v1/policies/validate/cel
Validate Cel
POST
/api/v1/search/policies
Search
Schemas 101
The contract defines 101 schemas that model the data the API accepts and returns. The most detailed are validate.StringRules (26 properties), validate.FieldRules (22 properties), c1.api.policy.v1.Approval (20 properties), validate.BytesRules (14 properties). Each schema is shown below with its type and property counts.
c1.api.policy.v1.Reject
object
This policy step indicates that a ticket should have a denied outcome. This is a terminal approval state and is used to explicitly define the end of approval s…
1 property
c1.api.form.v1.SelectField
object
The SelectField message.
1 property
c1.api.policy.v1.ConnectorProvision.DoNotSave
object
The DoNotSave message.
c1.api.form.v1.RequiredTogether
object
The RequiredTogether message.
c1.api.policy.v1.Form
object
The Form message.
1 property
c1.api.policy.v1.AppEntitlementReference
object
This object references an app entitlement's ID and AppID.
2 properties
validate.FieldRules
object
FieldRules encapsulates the rules for each type of field. Depending on the field, the correct set should be used to ensure proper validations. This message con…
22 properties
c1.api.policy.v1.DeletePolicyResponse
object
Empty response with a status code indicating success.
c1.api.policy.v1.AppGroupApproval
object
The AppGroupApproval object provides the configuration for setting a group as the approvers of an approval policy step.
7 properties
c1.api.policy.v1.SearchPoliciesRequest
object
Search Policies by a few properties.
8 properties
c1.api.policy.v1.ConnectorProvision
object
Indicates that a connector should perform the provisioning. This object has no fields. This message contains a oneof named provisiontype. Only a single field o…
3 properties
c1.api.policy.v1.PolicyPostActions
object
These are actions to happen after a policy is complete. This message contains a oneof named action. Only a single field of the following list may be set at a t…
1 property
c1.api.form.v1.FileField
object
The FileField message. This message contains a oneof named view. Only a single field of the following list may be set at a time: - fileInputField This message…
3 properties
c1.api.policy.v1.ManualProvision
object
Manual provisioning indicates that a human must intervene for the provisioning of this step.
2 properties
c1.api.policy.v1.PolicySteps
object
The PolicySteps message.
1 property
c1.api.policy.v1.WaitCondition
object
The WaitCondition message.
1 property
c1.api.policy.v1.SelfApproval
object
The self approval object describes the configuration of a policy step that needs to be approved by the target of the request.
3 properties
c1.api.form.v1.AtLeastOne
object
The AtLeastOne message.
c1.api.form.v1.MutuallyExclusive
object
The MutuallyExclusive message.
validate.EnumRules
object
EnumRules describe the constraints applied to enum values
4 properties
validate.TimestampRules
object
TimestampRules describe the constraints applied exclusively to the google.protobuf.Timestamp well-known type
9 properties
c1.api.policy.v1.Provision
object
The provision step references a provision policy for this step.
3 properties
c1.api.form.v1.PasswordField
object
The PasswordField message.
validate.RepeatedRules
object
RepeatedRules describe the constraints applied to repeated values
5 properties
c1.api.policy.v1.AgentApproval
object
The agent to assign the task to.
6 properties
validate.DurationRules
object
DurationRules describe the constraints applied exclusively to the google.protobuf.Duration well-known type
8 properties
c1.api.form.v1.FieldRelationship
object
FieldRelationships can be used during form validation, or they can represent information that is necessary to when it comes to visually rendering the form This…
4 properties
c1.api.policy.v1.ResourceOwnerApproval
object
The resource owner approval allows configuration of the approval step when the target approvers are the resource owners.
3 properties
c1.api.editor.v1.EditorMarker
object
The EditorMarker message.
6 properties
c1.api.policy.v1.ProvisionTarget
object
ProvisionTarget indicates the specific app, app entitlement, and if known, the app user and grant duration of this provision step
4 properties
c1.api.policy.v1.Escalation.ReplacePolicy
object
The ReplacePolicy message.
1 property
c1.api.policy.v1.TestAccountProvisionPolicyResponse
object
The TestAccountProvisionPolicyResponse message.
2 properties
c1.api.policy.v1.PolicyStep
object
The PolicyStep message. This message contains a oneof named step. Only a single field of the following list may be set at a time: - approval - provision - acce…
6 properties
c1.api.policy.v1.WebhookProvision
object
This provision step indicates that a webhook should be called to provision this entitlement.
1 property
c1.api.form.v1.StringSliceField
object
The StringSliceField message. This message contains a oneof named view. Only a single field of the following list may be set at a time: - chipsField This messa…
4 properties
c1.api.policy.v1.ExternalTicketProvision
object
This provision step indicates that we should check an external ticket to provision this entitlement
4 properties
c1.api.policy.v1.Rule
object
The Rule message.
2 properties
validate.BoolRules
object
BoolRules describes the constraints applied to bool values
1 property
validate.Int32Rules
object
Int32Rules describes the constraints applied to int32 values
8 properties
c1.api.policy.v1.Accept
object
This policy step indicates that a ticket should have an approved outcome. This is a terminal approval state and is used to explicitly define the end of approva…
1 property
c1.api.policy.v1.ConnectorProvision.DeleteAccount
object
The DeleteAccount message.
1 property
c1.api.form.v1.Form
object
A form is a collection of fields to be filled out by a user
5 properties
c1.api.policy.v1.ProvisionPolicy
object
ProvisionPolicy is a oneOf that indicates how a provision step should be processed. This message contains a oneof named typ. Only a single field of the followi…
8 properties
validate.SInt64Rules
object
SInt64Rules describes the constraints applied to sint64 values
8 properties
c1.api.policy.v1.ConnectorProvision.DefaultBehavior
object
The DefaultBehavior message.
1 property
validate.BytesRules
object
BytesRules describe the constraints applied to bytes values This message contains a oneof named wellknown. Only a single field of the following list may be set…
14 properties
c1.api.form.v1.SelectOption
object
The SelectOption message.
2 properties
c1.api.policy.v1.ManagerApproval
object
The manager approval object provides configuration options for approval when the target of the approval is the manager of the user in the task.
4 properties
validate.DoubleRules
object
DoubleRules describes the constraints applied to double values
8 properties
validate.UInt64Rules
object
UInt64Rules describes the constraints applied to uint64 values
8 properties
c1.api.policy.v1.WebhookApproval
object
The WebhookApproval message.
1 property
c1.api.form.v1.ChipsField
object
The ChipsField message.
c1.api.policy.v1.ConnectorProvision.SaveToVault
object
The SaveToVault message.
1 property
c1.api.form.v1.NumberField
object
The NumberField message.
3 properties
c1.api.policy.v1.UpdatePolicyRequestInput
object
The UpdatePolicyRequest message contains the policy object to update and a field mask to indicate which fields to update. It uses URL value for input.
2 properties
c1.api.policy.v1.DelegatedProvision
object
This provision step indicates that we should delegate provisioning to the configuration of another app entitlement. This app entitlement does not have to be on…
3 properties
validate.StringRules
object
StringRules describe the constraints applied to string values This message contains a oneof named wellknown. Only a single field of the following list may be s…
26 properties
c1.api.policy.v1.Approval
object
The Approval message. This message contains a oneof named typ. Only a single field of the following list may be set at a time: - users - manager - appOwners -…
20 properties
validate.SFixed64Rules
object
SFixed64Rules describes the constraints applied to sfixed64 values
8 properties
validate.Fixed64Rules
object
Fixed64Rules describes the constraints applied to fixed64 values
8 properties
c1.api.form.v1.BoolField
object
The BoolField message. This message contains a oneof named view. Only a single field of the following list may be set at a time: - checkboxField This message c…
3 properties
c1.api.policy.v1.Escalation.ReassignToApprovers
object
The ReassignToApprovers message.
1 property
validate.MessageRules
object
MessageRules describe the constraints applied to embedded message values. For message-type fields, validation is performed recursively.
2 properties
c1.api.policy.v1.CreatePolicyRequest
object
The CreatePolicyRequest message is used to create a new policy.
7 properties
1 required
c1.api.policy.v1.UpdatePolicyResponse
object
The UpdatePolicyResponse message contains the updated policy object.
1 property
c1.api.policy.v1.UnconfiguredProvision
object
The UnconfiguredProvision message.
c1.api.policy.v1.ConnectorProvision.AccountProvision
object
The AccountProvision message. This message contains a oneof named storagetype. Only a single field of the following list may be set at a time: - saveToVault -…
5 properties
c1.api.policy.v1.SearchPoliciesResponse
object
The SearchPoliciesResponse message.
2 properties
validate.SInt32Rules
object
SInt32Rules describes the constraints applied to sint32 values
8 properties
c1.api.form.v1.Field
object
A field is a single input meant to collect a piece of data from a user This message contains a oneof named type. Only a single field of the following list may…
8 properties
validate.SFixed32Rules
object
SFixed32Rules describes the constraints applied to sfixed32 values
8 properties
c1.api.policy.v1.EditorValidateResponse
object
The EditorValidateResponse message.
1 property
c1.api.policy.v1.WaitUntilTime
object
Waits until a specific time of the day (UTC)
3 properties
c1.api.policy.v1.CreatePolicyResponse
object
The CreatePolicyResponse message contains the created policy object.
1 property
c1.api.policy.v1.TestAccountProvisionPolicyRequest
object
The TestAccountProvisionPolicyRequest message.
1 property
c1.api.policy.v1.PolicyRef
object
The PolicyRef message.
1 property
c1.api.form.v1.TextField
object
The TextField message.
1 property
c1.api.form.v1.FileInputField
object
The FileInputField message.
c1.api.policy.v1.DeletePolicyRequestInput
object
The DeletePolicyRequest message contains the ID of the policy to delete. It uses URL value for input.
validate.AnyRules
object
AnyRules describe constraints applied exclusively to the google.protobuf.Any well-known type
3 properties
c1.api.policy.v1.ListPolicyResponse
object
The ListPolicyResponse message.
2 properties
validate.MapRules
object
MapRules describe the constraints applied to map values
6 properties
validate.Fixed32Rules
object
Fixed32Rules describes the constraints applied to fixed32 values
8 properties
c1.api.policy.v1.EditorValidateRequest
object
The EditorValidateRequest message.
1 property
c1.api.form.v1.CheckboxField
object
The CheckboxField message.
c1.api.policy.v1.Wait
object
Define a Wait step for a policy to wait on a condition to be met. This message contains a oneof named until. Only a single field of the following list may be s…
7 properties
c1.api.policy.v1.AppOwnerApproval
object
App owner approval provides the configuration for an approval step when the app owner is the target.
1 property
c1.api.policy.v1.Escalation
object
The Escalation message. This message contains a oneof named escalationpolicy. Only a single field of the following list may be set at a time: - replacePolicy -…
4 properties
c1.api.policy.v1.ActionProvision
object
This provision step indicates that account lifecycle action should be called to provision this entitlement.
4 properties
c1.api.policy.v1.MultiStep
object
MultiStep indicates that this provision step has multiple steps to process.
1 property
c1.api.form.v1.Int64Field
object
The Int64Field message. This message contains a oneof named view. Only a single field of the following list may be set at a time: - numberField This message co…
4 properties
validate.Int64Rules
object
Int64Rules describes the constraints applied to int64 values
8 properties
c1.api.policy.v1.ExpressionApproval
object
The ExpressionApproval message.
5 properties
c1.api.form.v1.StringField
object
The StringField message. This message contains a oneof named view. Only a single field of the following list may be set at a time: - textField - passwordField…
6 properties
c1.api.policy.v1.WaitDuration
object
The WaitDuration message.
1 property
c1.api.policy.v1.GetPolicyResponse
object
The GetPolicyResponse message contains the policy object.
1 property
validate.UInt32Rules
object
UInt32Rules describes the constraints applied to uint32 values
8 properties
c1.api.policy.v1.EntitlementOwnerApproval
object
The entitlement owner approval allows configuration of the approval step when the target approvers are the entitlement owners.
3 properties
c1.api.policy.v1.Policy
object
A policy describes the behavior of the ConductorOne system when processing a task. You can describe the type, approvers, fallback behavior, and escalation proc…
12 properties
validate.FloatRules
object
FloatRules describes the constraints applied to float values
8 properties
c1.api.policy.v1.UserApproval
object
The user approval object describes the approval configuration of a policy step that needs to be approved by a specific list of users.
2 properties
Specification
The full machine-readable OpenAPI contract behind this narrative.
Source
More from C1 12
Other APIs C1 publishes across the network.
Baton Connector Framework
C1 Access Conflict API
C1 App API
C1 App Entitlement API
C1 App Entitlement Automation API
C1 App Entitlement Automation Exclusion API
C1 App Entitlement Monitor Binding API
C1 App Entitlement Owner API
C1 App Entitlement Proxy Binding API
C1 App Entitlement User Binding API
C1 App Entitlement User Binding Feed API
C1 App Entitlement User Binding History API
#Policy