Get started

Welcome to the Access control policies API for working with policies in CyberArk's Administration space.

Before you start working with the API, you need to authenticate the API.

For authentication details, see Create an API token.

At the beginning of that section, there is a list of services with their service API URLs.

The service API URL for the Access control policies API is: https://<subdomain>.uap.cyberark.cloud/api

Note: Although you can log in to this API with your CyberArk Identity user, we recommend using a dedicated service user with the CS Admin or SCA Admin role for cloud console policies, or the DPAAdmin role for infrastructure policies.

When you log in via CyberArk Identity, keep in mind that an authentication token is sent, which must be included as the bearer token in the header of each API request sent from the Administration space.