Skip to main content
POST
/realms/{realmId}/organizations/{organizationId}/business-policies

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

realmId
string
required
organizationId
string
required

Response

201 - application/json

Successful response

What the business-policy CRUD routes (POST/GET/PUT .../business-policies) answer: the stored policy, with each approval participant's display name resolved at read time.

id
string
required
realmId
string
required
organizationId
string
required
context
enum<string>
required

The business surface a policy governs.

Available options:
PAYMENT,
SPEND_REVIEW,
TRAVEL
name
string
required
order
number
required

Evaluation sorts ascending; first match wins.

status
enum<string>
required

ARCHIVED is a soft delete: terminal, set only through the archive endpoint, and never evaluated against a transaction.

Available options:
ACTIVE,
DISABLED,
ARCHIVED
conditions
object
required
actions
object
required

BusinessPolicyActions as rendered — approvals carry their live name.

description
string
createdAt
updatedAt