SecurityPolicy

object

two_factorrequired: object
two_factor.rolesrequired: array of object
two_factor.roles[].idrequired: Id
Opaque record id.
two_factor.roles[].keyrequired: string
two_factor.roles[].namerequired: string
two_factor.roles[].audiencerequired: "staff" | "partner"
two_factor.roles[].requires_two_factorrequired: boolean
two_factor.roles[].lockedrequired: boolean
Owner and Admin always require 2FA.
two_factor.roles[].membersrequired: integer
two_factor.roles[].members_without_two_factorrequired: integer
sessionsrequired: object
sessions.web_idle_daysrequired: integer
sessions.web_absolute_daysrequired: integer
sessions.mobile_idle_daysrequired: integer
ip_allowlistrequired: object
ip_allowlist.availablerequired: boolean
ip_allowlist.taskrequired: string
Roadmap task that enforces it at sign-in.

Example

{
  "two_factor": {
    "roles": [
      {
        "id": "cmusrceel0000q7kaafxqi1om",
        "key": "string",
        "name": "string",
        "audience": "staff",
        "requires_two_factor": true,
        "locked": true,
        "members": 0,
        "members_without_two_factor": 0
      }
    ]
  },
  "sessions": {
    "web_idle_days": 0,
    "web_absolute_days": 0,
    "mobile_idle_days": 0
  },
  "ip_allowlist": {
    "available": true,
    "task": "string"
  }
}