Class OrgGroupPolicyUpdateAttributes

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

The policy content as key-value pairs. For org_config policies, an arbitrary key-value map (for example, {"value": "UTC"}). For role policies, a permissions key containing an array of permission UUIDs (for example, {"permissions": ["<uuid>", ...]}).

The enforcement tier of the policy. OVERRIDE_ALLOWED means the policy is set but member orgs may mutate it. GROUP_MANAGED means the policy is strictly controlled and mutations are blocked for affected orgs. DELEGATE means each member org controls its own value. role policies only support GROUP_MANAGED and DELEGATE — OVERRIDE_ALLOWED is rejected for this policy type. Transitioning a role policy to DELEGATE (disabling it) is one-way — the policy cannot be transitioned back to GROUP_MANAGED afterward.

The name of the policy. This becomes the name of the resource created across orgs in the group (for example, for role policies, the name of the created role). Omit to leave unchanged.