GET /v2/admin/groups/{group_id}

Returns one group together with its full policy document.

Used in flow: Read the policy currently in force before changing it

Authentication: JWT (Access Token) with update:default_policy

Request

Authorization: Bearer <access_token>

Response

200 OK

{
  "groupId": "00000000-0000-0000-0000-000000000000",
  "name": "default-policy",
  "policyJson": {
    "version": "1.0",
    "description": "Default policy",
    "rules": []
  },
  "updatedAt": "2026-01-15T10:30:00Z"
}

policyJson is null if the stored policy cannot be parsed. An unknown group_id returns 404 with {"code":200302,"error":"Group not found"}.