Get the fleet's shell access policy (fleet alias)
GET
/api/fleets/{fleet_id}/access-policy
Return the shell access policy for the fleet (organisation).
fleet_id is the organisation UUID. Alias for
GET /organizations/{organization_id}/access-policy — same logic, same
auth gates.
Authorizations
Parameters
Path Parameters
fleet_id
required
string format: uuid
Responses
200
Successful Response
Full shell access policy document for an organisation.
is_default is True when no row exists yet in shell_access_policy and
the response represents the documented model defaults. Once a PUT has been
issued, is_default is always False.
id is None when the response is a virtual defaults object (is_default=True).
object
additions_require_approval
required
boolean
allowed_tiers
required
Array<string>
breakglass_enabled
required
boolean
breakglass_notification_channels
required
Array<string>
breakglass_session_timeout_minutes
required
integer
elevated_approval_mode
required
string
elevated_approval_timeout_minutes
required
integer
elevated_session_timeout_minutes
required
integer
is_default
boolean
organization_id
required
string format: uuid
recording_retention_days
required
integer
standard_recording_enabled
required
boolean
422
Validation Error
object
detail
Array<object>
object
loc
required
Array
msg
required
string
type
required
string