To configure a Tenant ACL rule, you need a Management API access token with the following scopes:
- create:network_acls
- update:network_acls
- read:network_acls
- delete:network_acls
Available actions
You can view, create, update, and delete Tenant ACL rules with the Management API.| Action | Endpoint | Required scope | 
|---|---|---|
| View a rule | Get a specific access control list entry for a tenant | read:network_acls | 
| View all rules | Get all access control list entries for a tenant | read:network_acls | 
| Create a rule | Create access control list | create:network_acls | 
| Update a rule | Partial update for an access control list | update:network_acls | 
| Overwrite a rule | Update access control list | update:network_acls | 
| Delete a rule | Delete access control list | delete:network_acls | 
Parameters
For detailed information about Tenant ACL parameters and how to use them, read Reference.Describes the purpose or functionality of the rule.Example: 
Only allow requests originating from the United StatesEnables or disables the rule.Example: 
trueNumerical value that determines the order in which the rule is evaluated.Example: 
1Contains the conditions and actions of the rule.
Examples
Toggle monitoring mode for a rule
You can enable monitoring mode for a Tenant ACL rule with the Management API Update access control list endpoint. Add thelog property to the rule.action object and set its value to true.