Access Policies

Access policies are a way to control which users or systems can perform specific actions on specific parts of the Dreams platform. Each access policy is composed of one or more policy definitions, and each definition grants permission for exactly one action on one resource.

---

Access policies can be managed here.

You can create and use two types of access policies:

1. Custom Policies

These are organization-specific policies that you define yourself. Custom policies allow you to tailor permissions to your exact needs by selecting specific resources and actions relevant to your organization.

2. Managed Policies

These are predefined policies built into the system. Managed policies cover common permission sets and can be reused across multiple organizations. They provide a quick way to assign standard access without needing to define each permission manually.

🔹 You can use both custom and managed policies when assigning permissions to roles.

How to Create an Access Policy

To create a new access policy:

1. Go to your Organization Security.

2. From your Access Policies Tab, click “Create Custom Policy”

3. Fill in a clear Name and Description

4. Under Definitions, select one or more permission entries from the dropdown Each definition grants one action (e.g. GET) on one resource (e.g. Organization Webhooks)

Definition Example:

Organization: View – Allow

1. Click Save to create the policy