# Access Profiles

**Veza Access Profiles** are collections of entitlements that can be granted to users as part of their identity lifecycle management. These APIs enable you to create, manage, and organize access profiles and their types, which define what access should be granted in different roles or scenarios across your organization.

**Access Profiles** help you automate consistent access provisioning with:

* Reusable collections of entitlements across multiple systems
* Organized access by business roles, departments, or functions
* Managed access profile types with distinct configurations
* Versioned profiles for profile lifecycle management

### Access Profile Types

Access Profile Types define categories of access profiles and their capabilities within Veza. They determine how access profiles can be configured and used.

### Access Profiles

Access Profiles define specific sets of entitlements that can be granted to users. Each profile contains versions that allow for drafting and managing changes over time.

#### Version Handling

When retrieving Access Profiles via the API without specifying a version, Veza returns the **published version** by default.

To retrieve a specific version (including draft versions), include the `version` parameter in your API request.

### Integrations

Integrations represent the available systems and platforms that can be used with Access Profiles for access management operations.

### Endpoints

Use the following endpoints to interact with Access Profiles, Access Profile Types, and available integrations:

#### Access Profile Type Operations

| Method | Endpoint                                                                                                                          | Description                        |
| ------ | --------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------- |
| POST   | [Create Access Profile Type](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/createaccessprofiletype.md) | Creates a new access profile type  |
| GET    | [List Access Profile Types](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/listaccessprofiletypes.md)   | Retrieves all access profile types |

#### Access Profile Operations

| Method | Endpoint                                                                                                                                | Description                                          |
| ------ | --------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------- |
| POST   | [Create Access Profile](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/createaccessprofile.md)                | Creates a new access profile                         |
| GET    | [List Access Profiles](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/listaccessprofiles.md)                  | Retrieves all access profiles with filtering options |
| PATCH  | [Update Access Profile Labels](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/updateaccessprofilelabels.md)   | Updates labels assigned to an access profile         |
| PATCH  | [Update Access Profile Version](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/updateaccessprofileversion.md) | Updates a specific version of an access profile      |

#### Member Management Operations

| Method | Endpoint                                                                                                                                | Description                                            |
| ------ | --------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------ |
| GET    | [List Access Profile Members](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/listaccessprofilemembers.md)     | Lists all members of a specific access profile version |
| PUT    | [Update Access Profile Members](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/updateaccessprofilemembers.md) | Adds or removes members from an access profile version |

#### Integration Operations

| Method | Endpoint                                                                                                                             | Description                                                   |
| ------ | ------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------- |
| GET    | [List Available Integrations](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/listavailableintegrations.md) | Lists all integrations available for use with access profiles |

### Authentication

All Access Profile API requests require authentication. See [API Authentication](/4yItIzMvkpAvMVFAamTf/developers/api/authentication.md) for details on how to authenticate with Veza APIs.

### Getting Started

To get started with **Access Profile APIs**:

1. [List available integrations](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/listavailableintegrations.md) to see what systems you can manage
2. [List lifecycle management datasources](/4yItIzMvkpAvMVFAamTf/developers/api/management/datasources/listlifecyclemanagerdatasources.md) to view enabled systems
3. [Create an access profile type](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/createaccessprofiletype.md) to define how access profiles will be configured
4. [Create access profiles](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/createaccessprofile.md) with the entitlements your users need
5. [Add members to access profiles](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles/updateaccessprofilemembers.md) to grant access to users
6. Use [policy APIs](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/policies.md) to automate when access profiles are assigned

{% hint style="info" %}
**Prerequisites**: Before creating **Access Profiles**, ensure you have **Access Profile Types** configured and lifecycle management datasources enabled for your target systems.
{% endhint %}

### Related Documentation

For more information about Access Profile concepts and features, see:

* [Access Profiles](/4yItIzMvkpAvMVFAamTf/features/lifecycle-management/profiles.md)
* [Lifecycle Management Implementation](/4yItIzMvkpAvMVFAamTf/features/lifecycle-management/getting-started/implementation.md)
* [Policy APIs](/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/policies.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.veza.com/4yItIzMvkpAvMVFAamTf/developers/api/lifecycle-management/accessprofiles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
