# C1 documentation: API Endpoints Session Policy

## Session Policy

- [Search App User Session Policies](https://www.c1.ai/docs/api-reference/session-policy/search-app-user-session-policies.md): Search the effective session policies for users holding this application's  SSO sign-in entitlement. Policies are selected per user, not attached to the  application; actual sign-in decisions are recorded in the system log.
- [Search](https://www.c1.ai/docs/api-reference/session-policy/search.md): Search session policies by name, or fetch a specific set by ID. Returns  one page of matching policies at a time.
- [List](https://www.c1.ai/docs/api-reference/session-policy/list.md): List all session policies in your tenant, one page at a time.
- [Create](https://www.c1.ai/docs/api-reference/session-policy/create.md): Create a session policy.
- [Get](https://www.c1.ai/docs/api-reference/session-policy/get.md): Get a session policy by ID.
- [Update](https://www.c1.ai/docs/api-reference/session-policy/update.md): Update a session policy. Supply the policy object and an update mask  listing the fields to change; omitted fields are left as-is.
- [Delete](https://www.c1.ai/docs/api-reference/session-policy/delete.md): Delete a session policy by ID.
- [List Assignments](https://www.c1.ai/docs/api-reference/session-policy/list-assignments.md): List the principals assigned to a session policy, including both direct  assignments and those conferred through a group.
- [Assign Group](https://www.c1.ai/docs/api-reference/session-policy/assign-group.md): Assign a group to a session policy. Every member of the group becomes  assigned to the policy; because group membership is expanded  asynchronously, the per-user effect is eventually consistent (typically  within a few minutes).
- [Unassign Group](https://www.c1.ai/docs/api-reference/session-policy/unassign-group.md): Unassign a group from a session policy. The per-user effect is eventually  consistent, mirroring AssignGroup.
- [Assign User](https://www.c1.ai/docs/api-reference/session-policy/assign-user.md): Assign a user to a session policy. The assignment takes effect immediately.
- [Unassign User](https://www.c1.ai/docs/api-reference/session-policy/unassign-user.md): Unassign a user from a session policy.
- [Search Policy Users](https://www.c1.ai/docs/api-reference/session-policy/search-policy-users.md): Searches the users a policy applies to, expanded: direct assignments plus  per-user expansion of conferred groups, one page at a time. Served from  the asynchronously-replicated Postgres mirror of the binding store, so a  just-made assignment may not appear immediately; the user-scoped reads  (GetEf…
- [Get Effective Session Policy](https://www.c1.ai/docs/api-reference/session-policy/get-effective-session-policy.md): Returns the single effective session policy for a user and why it applies:  the assigned policy with the highest priority, else the tenant default,  else none. Read-only and diagnostic: it reflects current assignment state  rather than the resolver's cached resolution.
- [List User Policies](https://www.c1.ai/docs/api-reference/session-policy/list-user-policies.md): Lists every session policy that applies to a user — direct,  group-conferred, and the tenant default when set — each with its source.  Candidates are returned in assignment order; the resolver's priority  tie-break happens at evaluation, not here.

## OpenAPI Specs

- [my-source-with-code-samples](https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples)