BUILD

Permissions and policies

Evaluate permissions and manage organization policy records.

POST/api/auth/authorization/evaluate

Evaluate organization permission

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/auth/authorization/evaluate'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

session

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/policies

List organization policies

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/policies'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/policies

Create or update a policy, including optional session binding

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/policies'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PATCH/api/organizations/{id}/policies

Update a policy, including optional session binding

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PATCH 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/policies'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/policies/{policy_key}

Remove a policy and restore the default boundary

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/policies/{policy_key}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

Authorization is evaluated in the context of user, organization, application, scope, resource, and action. A policy denial is authoritative even when a client asks for a broader scope.