A member's override and what applies to them

GET

/api/v1/orgs/{id}/members/{principal}/policy

Team authority: Owner/admin, manager, billing or developer (policies.read). The combined public view checks organisation policy authority even when the target is the caller.

App integration: Shows the member override, organisation rules and effective member policy. A missing stored override is not the absence of policy. Keep org-only controls out of member edits. Ordinary members can read their own combined effective policy through /api/v1/me/policy instead.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

OAuth 2.0

Authorization Code

Add the parameter

Authorization

to Headers，whose value is to concatenate the Token after the Bearer.

Example:

Authorization: Bearer ********************

Authorize URL: https://handwrites.io/oauth/authorize

Token URL: https://handwrites.io/api/oauth/token

Refresh URL: https://handwrites.io/api/oauth/token

Scopes:

orgs:read-List your teams and classrooms and see who is in them

Path Params

Responses

🟢200

application/json

{rules, updatedAt, updatedBy, orgWide, effective}.

Headers

Bodyapplication/json

🟠401Unauthorized

🟠403Forbidden

🟠404NotFound

🟠429TooManyRequests

🔴500ServerError

Request Example

Shell

JavaScript

Java

Swift

curl --location '/api/v1/orgs//members//policy' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Example 1

{
    "property1": "string",
    "property2": "string"
}

Modified at 2026-10-26 13:13:04

Replace the org-wide rules (admins)

Replace a member's override (admins; managers for members)