---
title: "List ABAC policies"
url: https://hexelstudio.com/docs/api/ciam-iam/abac/list-abac-policies
---

# List ABAC policies

**GET** `/abac/policies`

## Query parameters

- `organization_id: optional string`

  Organization ID

## Headers

- `Authorization: string`

  `Bearer <token>`.

## Returns

`200` OK (`array of ABACPolicy`)

- `actions: optional array of string`

- `conditions: optional array of integer`

- `created_at: optional string`

- `created_by_user_id: optional string`

- `description: optional string`

- `display_name: optional string`

- `effect: optional string`

  ALLOW, DENY

- `id: optional string`

- `is_enabled: optional boolean`

- `name: optional string`

- `organization_id: optional string`

- `priority: optional integer`

- `resources: optional array of string`

- `updated_at: optional string`

## Example

```bash
curl --request GET \
  --url 'https://api.hexelstudio.com/v1/abac/policies' \
  --header "Authorization: Bearer $ACCESS_TOKEN"
```

### Response (200)

```json
[
  {
    "actions": [
      "string"
    ],
    "conditions": [
      0
    ],
    "created_at": "2026-01-01T00:00:00Z",
    "created_by_user_id": "string",
    "description": "string",
    "display_name": "string",
    "effect": "string",
    "id": "string",
    "is_enabled": true,
    "name": "string",
    "organization_id": "string",
    "priority": 0,
    "resources": [
      "string"
    ],
    "updated_at": "2026-01-01T00:00:00Z"
  }
]
```