The behaviour profiles that bear on you

GET

/security/behaviour

A behaviour profile says what normal looks like at a scope and what to
do when a request is not normal (log, alert, step-up,
rate-limit, freeze, revoke). With no scope, every profile on
the account, its devices, its sessions and service sessions, and its
teams. Needs behaviour:read, checked in the controller in every
mode.

Capability: behaviour:read, checked in the route or controller in every mode. Behaviour:read, checked in the controller.

Request

Query Params

Responses

🟢200

application/json

The profiles

Bodyapplication/json

🟠400

🟠404

🟠401KlockUnauthorized

🟠403CapabilityMissing

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://api.prod-orm.io/security/behaviour?scope='

Response Example

200 - Example 1

{
    "profiles": [
        {
            "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
            "uuid": "095be615-a8ad-4c33-8e9c-c7612fbf6c9f",
            "scopeKind": "account",
            "scopeId": "string",
            "scope": {
                "kind": "account",
                "id": "string"
            },
            "name": "string",
            "preset": "string",
            "spec": {
                "property1": "string",
                "property2": "string"
            },
            "mode": "enforce",
            "version": 0,
            "createdAt": "2019-08-24T14:15:22.123Z",
            "updatedAt": "2019-08-24T14:15:22.123Z"
        }
    ]
}

Modified at 2026-10-05 04:04:32

Remove an access rule

Add or change a behaviour profile