View Policies in Medusa Admin

In this guide, you'll learn how to view policies in the Medusa Admin.

Overview#

A policy is a single permission that allows an operation on a resource. For example, the order:read policy allows viewing orders.

Medusa generates a policy for every operation on each of its built-in resources and keeps them up to date when your store starts. Your developers can also define custom policies for custom resources. You group policies into roles that you assign to users.

View Policies#

To view the available policies, go to Settings → Policies. In the list, you can see each policy's key, resource, operation, description, and creation date. You can search, sort, and filter the policies by resource, operation, or creation date to find a specific one.

To see which roles include a policy, click on the policy in the list. The policy's details page shows the roles that grant it. To see those roles, you also need the rbac_role:read policy.