skills.rest
zscaler
zscalerOFFICIAL
Explore all skills by this author →
WebsiteGitHub

zpa-create-access-policy-rule

Create ZPA access policy rules with v2 condition formats via API.

44|24|Updated May 29, 2025
Search Tags:#identity#saml#scim#access-policy#posture#zpa#v2-conditions
One-click install
npx skills add https://github.com/zscaler/zscaler-mcp-server --skill zpa-create-access-policy-rule
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: zpa-create-access-policy-rule
Source: https://github.com/zscaler/zscaler-mcp-server/tree/main/skills/zpa/create-access-policy-rule
Command: npx skills add https://github.com/zscaler/zscaler-mcp-server --skill zpa-create-access-policy-rule

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Administrators struggle to define and enforce ZPA access policy rules with complex v2 conditions, leading to errors and slow deployment.

Core Features & Use Cases

  • Supports all ZPA v2 condition object types (APP, APP_GROUP, SAML, SCIM, SCIM_GROUP, PLATFORM, COUNTRY_CODE, POSTURE, TRUSTED_NETWORK, RISK_FACTOR_TYPE, CLIENT_TYPE, MACHINE_GRP, LOCATION, CHROME_ENTERPRISE).
  • Provides a clear, step-by-step workflow: gather requirements, look up identity attributes, build the conditions payload, and create the rule.
  • Includes ready-to-use examples for common scenarios such as SCIM group access, SAML attribute matching, platform restrictions, country-based access, posture checks, and combined conditions.

Quick Start

Supply the rule details and run zpa_create_access_policy_rule with your conditions to create the policy.

Frequently Asked Questions about zpa-create-access-policy-rule

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create ZPA access policy rules with v2 conditions?▼

You can create ZPA access policy rules with v2 conditions by defining identity, device, and network constraints, then deploying them via a single API call to enforce access controls for private apps.

How do I automate ZPA access policy creation for SCIM and SAML identities?▼

Automate ZPA access policy creation by gathering requirements, looking up SCIM and SAML identity attributes, building the conditions payload, and executing an API call to deploy the rule.

Does ZPA v2 support combined posture and platform restrictions in a single access rule?▼

Yes, ZPA v2 supports combined posture checks and platform restrictions within a single access policy rule, allowing you to enforce complex security constraints across diverse network scenarios.

What ZPA v2 condition object types are available for building access policies?▼

Available ZPA v2 condition object types include SAML, SCIM, SCIM_GROUP, PLATFORM, COUNTRY_CODE, POSTURE, TRUSTED_NETWORK, RISK_FACTOR_TYPE, CLIENT_TYPE, LOCATION, and CHROME_ENTERPRISE.

What is the best way to define location and risk factor constraints for ZPA private apps?▼

The best way to define location and risk factor constraints for ZPA private apps is using v2 condition formats like COUNTRY_CODE and RISK_FACTOR_TYPE to restrict access based on geography and security posture.

Related Skills

Explore More Software Engineering Skills→
zscalerzscaler
44

zpa-create-timeout-policy-rule

Create ZPA timeout policy rules with re-authentication and idle timeout conditions.

Official
Advanced
zscalerzscaler
44

zpa-create-forwarding-policy-rule

Configure ZPA forwarding policy rules with actions and condition blocks.

Official
Advanced
zscalerzscaler
44

zpa-troubleshoot-app-connector

Diagnose and remediate ZPA App Connector issues using MCP tooling.

Official
Advanced
marquesfelipmarquesfelip

private-object-access-control

Enforce private object access control on S3-compatible storage with bucket policies and IAM scopes.

Community
Advanced