Skip to main content
Replace a workspace Actions policy

Authorizations

Authorization
string
header
required

BoxRouter API key; never an upstream provider key.

Headers

X-CSRF-Token
string

Session-bound CSRF token. Required for browser-session calls, together with a matching configured Origin header; omit it when calling with an API key.

If-Match
string
required

Strong ETag returned by the latest read; a stale value conflicts without changing the resource.

Required string length: 1 - 256
Pattern: ^[^\u0000]*$
Idempotency-Key
string

Optional for this operation. Preserve the same stable identifier when retrying an uncertain response; never reuse it for new work. If omitted where allowed, Cloud generates a request-scoped key that cannot reconcile a later retry. Do not include credentials or payloads. Stable identifier for one logical mutation.

Required string length: 1 - 128

Path Parameters

policy_id
string
required

Workspace-owned Actions policy ID.

Required string length: 1 - 128
Pattern: ^[^\u0000]*$

Body

application/json
name
string
required
Required string length: 1 - 64
Pattern: ^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$
settings
object
required

Response

Updated policy revision.

id
string
required
Required string length: 1 - 128
Pattern: ^[^\u0000]*$
name
string
required
Required string length: 1 - 64
Pattern: ^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$
settings
object
required
revision
integer
required
Required range: x >= 1
updated_at
string<date-time>
required