Policies

{
  "name": "Contractors — Office Read Only",
  "effect": "deny",
  "principals": [{ "type": "group", "id": "grp_01HXYZ_CONTRACTORS" }],
  "resources": [{ "type": "office.document", "tag": "engineering" }],
  "actions": ["office:write", "office:delete"]
}

{
  "id": "pol_01HXYZPOL1",
  "name": "Contractors — Office Read Only",
  "status": "inactive",
  "created_at": "2026-07-08T11:00:00Z"
}

{ "status": "active" }

{
  "principal": { "type": "group", "id": "grp_01HXYZ_CONTRACTORS" },
  "resource": { "type": "office.document", "id": "doc_01HXYZABC" },
  "action": "office:write"
}

{ "result": "deny", "matched_policy": "pol_01HXYZPOL1" }