---
title: "Explain authorization decision"
url: https://hexelstudio.com/docs/api/ciam-iam/authz/explain
---

# Explain authorization decision

**POST** `/authz/explain`

## Headers

- `Authorization: string`

  `Bearer <token>`.

## Returns

`200` OK (`ExplainResult`)

- `allowed: optional boolean`

- `reason: optional string`

- `steps: optional array of ExplainStep`

  - `details: optional string`

  - `result: optional string`

  - `step: optional string`

## Errors

- `400` Bad Request

## Example

```bash
curl --request POST \
  --url 'https://api.hexelstudio.com/v1/authz/explain' \
  --header "Authorization: Bearer $ACCESS_TOKEN"
```

### Response (200)

```json
{
  "allowed": true,
  "reason": "string",
  "steps": [
    {
      "details": "string",
      "result": "string",
      "step": "string"
    }
  ]
}
```

### Response (400)

```json
{
  "key": "string"
}
```