> For the complete documentation index, see [llms.txt](https://docs.zata.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.zata.ai/subusers/subuser-portal/policies.md).

# Policies

A read-facing view of the access rules configured for the subuser across all their buckets, organized into three tabs:

* **Allocated** — the rules currently granted, with bucket, scope, permission preset, and status (Active/Suspended/Expired). Click one to see its full list of allowed S3 actions.
* **Requested** — permission requests the subuser has submitted that are still pending, with an option to cancel.
* **Rejected** — requests the account owner declined, along with any remarks, which can be dismissed.

<figure><img src="https://2683631041-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPPVG4W649TwXN8OejRhb%2Fuploads%2Fgit-blob-c417fbff0313973343f4316444a24b068d940354%2Fpolicies.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2683631041-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPPVG4W649TwXN8OejRhb%2Fuploads%2Fgit-blob-60945ad35619834cef0bb1e8541fe00bfef7031f%2Fpolicies_2.png?alt=media" alt=""><figcaption></figcaption></figure>

From a rule's detail view, a subuser can click **Request Policy** to ask for additional actions beyond what's currently granted on that bucket; the account owner approves or rejects these from their own Policies section.

<figure><img src="https://2683631041-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPPVG4W649TwXN8OejRhb%2Fuploads%2Fgit-blob-0665d88cc8fc4f48bc836a00337381660fb16e29%2Frequest_policy.png?alt=media" alt=""><figcaption></figcaption></figure>
