# List IAM policies

```
GET https://mgmt.storage.dev/v1/providers/:provider_id/orgs/:org_id/policies
```

Lists all IAM policies in the organization.

## Request  
### Path Parameters

**provider_id** string required  
Provider ID

**org_id** string required  
Organization ID

### Query Parameters

**limit** integer  
Maximum number of policies to return. Defaults to 100, max 1000.

**continuation_token** string  
Token from previous response to fetch next page

## Responses

- 200
- default  
  
OK

- application/json

- Schema
- Example (auto)

**Schema**

**policies** object[] required

Array [
 
**name** string required  
Name of the policy  
 
**description** string  
Description of the policy  
 
**attachment_count** integer  
Number of access keys this policy is attached to  
 
**created_at** date-time  
 
**updated_at** date-time

]

**next_continuation_token** string  
Pass as continuation_token for next page. Empty if no more results.

```json
{
  "policies": [
    {
      "name": "string",
      "description": "string",
      "attachment_count": 0,
      "created_at": "2024-07-29T15:51:28.071Z",
      "updated_at": "2024-07-29T15:51:28.071Z"
    }
  ],
  "next_continuation_token": "string"
}
```

Unexpected error

- application/json

- Schema
- Example (auto)

**Schema**

**message** string

```json
{
  "message": "string"
}
```

#### Authorization: X-Tigris-Signature

````
name: X-Tigris-Signature  
type: apiKey  
in: header  
description: HMAC-SHA256 of the canonical request signed using the signing key.  
To create the signature, concatenate the HTTP method, URL, timestamp, and nonce with a newline character in between.  
Then, calculate the HMAC-SHA256 of the concatenated string using the signing key. Example:

Create the `canonical_request` as:
```
POST
https://mgmt.storage.dev/provider/your-provider-id/orgs/user-org-id/provision
1731703213870
f8d133cb-5a42-47b1-9ef2-874bb55bab72
```
Then, calculate HMAC-SHA256 of the canonical request using the signing key as:
```
Signature = hex(sha256sign(canonical_request, "signing_key"))
```
````

```
name: X-Tigris-Nonce  
type: apiKey  
in: header  
description: Random unique string to identify the request and prevent replay attacks. Example: "f8d133cb-5a42-47b1-9ef2-874bb55bab72"
```

```
name: X-Tigris-Time  
type: apiKey  
in: header  
description: Unix timestamp in milliseconds of the request. Example: 1731703213870
```

- csharp
- curl
- dart
- go
- http
- java
- javascript
- kotlin
- c
- nodejs
- objective-c
- ocaml
- php
- postman-cli
- powershell
- python
- r
- ruby
- rust
- shell
- swift

- HTTPCLIENT
- RESTSHARP

```csharp
var client = new HttpClient();
var request = new HttpRequestMessage(HttpMethod.Get, "https://mgmt.storage.dev/v1/providers/:provider_id/orgs/:org_id/policies");
request.Headers.Add("Accept", "application/json");
request.Headers.Add("X-Tigris-Signature", "<X-Tigris-Signature>");
request.Headers.Add("X-Tigris-Nonce", "<X-Tigris-Nonce>");
request.Headers.Add("X-Tigris-Time", "<X-Tigris-Time>");
var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());
```

Request Collapse all

Base URL

Edit

https://mgmt.storage.dev

Auth

Signature

Nonce

Timestamp

Parameters

provider_id — path required

org_id — path required

Show optional parameters

limit — query

continuation_token — query

Send API Request

Response Clear

Click the `Send API Request` button above and see the response here!