The team's access rules

GET

/teams/{teamId}/security/access-rules

Any active member may read them: they are the rules applied to them.
A non-member (or an unknown team) is a 404. The controller also
checks the session holds access-rule:read, in every mode.

Capability: team:read (area team).

Request

Path Params

Responses

🟢200

application/json

The rules

Bodyapplication/json

🟠401KlockUnauthorized

🟠403TeamRoleRefusal

🟠404UnknownTeam

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://api.prod-orm.io/teams//security/access-rules'

Response Example

200 - Example 1

{
    "rules": [
        {
            "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
            "uuid": "095be615-a8ad-4c33-8e9c-c7612fbf6c9f",
            "scopeKind": "account",
            "scopeId": "string",
            "scope": {
                "kind": "account",
                "id": "string"
            },
            "effect": "allow",
            "dimension": "ip",
            "value": null,
            "appliesTo": [
                "string"
            ],
            "mandatory": true,
            "mode": "enforce",
            "enforceAt": "2019-08-24T14:15:22.123Z",
            "note": "string",
            "expiresAt": "2019-08-24T14:15:22.123Z",
            "enabled": true,
            "createdAt": "2019-08-24T14:15:22.123Z",
            "createdBy": 0,
            "lockdown": true,
            "legacy": "blockedIps"
        }
    ]
}

Modified at 2026-10-05 04:04:32

Remove a behaviour profile

Add a team access rule