Modifies an existing Conjur policy.

v1.0.0

Modifies an existing Conjur policy. Data may be explicitly deleted using the !delete, !revoke, and !deny statements. Unlike replace mode, no data is ever implicitly deleted.

Permissions required

Input

{
  "type": "object",
  "properties": {
    "account": {
      "type": "string",
      "description": "Conjur account name"
    },
    "identifier": {
      "type": "string",
      "description": "Resource identifier. Requires to be encoded when in path.\n\n##### Examples:\n\n- `myapp-01` -> `myapp-01` (unchanged)\n- `alice@devops` -> `alice%40devops`\n- `prod/aws/db-password` -> `prod%2Faws%2Fdb-password`\n- `research+development` -> `research%2Bdevelopment`\n- `sales&marketing` -> `sales%26marketing`\n"
    }
  },
  "required": [
    "account",
    "identifier"
  ],
  "additionalProperties": false
}

Output

{
  "type": "object",
  "properties": {
    "created_roles": {
      "type": "object"
    },
    "version": {
      "type": "number"
    }
  }
}