Skip to main content
POST
/realms/{realmId}/organizations/{organizationId}/policy-evaluations

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

realmId
string
required
organizationId
string
required

Body

application/json
context
enum<string>
required
Available options:
PAYMENT,
SPEND_REVIEW,
TRAVEL
accountId
string
required
Minimum string length: 1
walletId
string
required
Minimum string length: 1
subjectType
string
required
Minimum string length: 1
subjectId
string
required
Minimum string length: 1
requester
object
required
body
object
required
walletName
string
Minimum string length: 1

Response

200 - application/json

Successful response

actions
object
required

Evaluation response — a pure read.

A match returns the whole matched policy; NO match returns exactly { actions: { autoAction: "APPROVE" } }. Callers key off actions.autoAction and must tolerate every other field being absent.

approvals[] carries each participant's display name, resolved at read time exactly as the business-policy CRUD reads do. The name is best-effort: a participant that cannot be resolved keeps its {type, id} and omits name.

id
string
realmId
string
organizationId
string
context
enum<string>

The business surface a policy governs.

Available options:
PAYMENT,
SPEND_REVIEW,
TRAVEL
name
string
description
string
order
number

Evaluation sorts ascending; first match wins.

status
enum<string>

ARCHIVED is a soft delete: terminal, set only through the archive endpoint, and never evaluated against a transaction.

Available options:
ACTIVE,
DISABLED,
ARCHIVED
conditions
object
createdAt
updatedAt