@DerickK.08586 (Customer)​ , My understanding is that you are looking for password applied to which group, if yes it is available in your api query (/api/v1/policies?type=PASSWORD) itself. it will shows as group id not name of the group.

Jijo

Thanks Jijo, but that is not what I am looking for. Let me try to clarify my question.

Suppose that I have user Sam who is a member of three groups with the following group IDs:

• 111
• 222
• 333

Also suppose that I have 4 password policies:

• AAA
• BBB
• CCC
• DDD
• EEE

If I am building a custom "change password" solution, and in my UI I want to enforce the password rules that will apply to Sam, I think that I need to do the following:

1. Consume the /api/v1/users/${userId}/groups API to retrieve the groups that Sam is a member of. In this case, group IDs 111, 222, and 333 will be returned.
2. Consume the /api/v1/policies?type=PASSWORD API to get the password policies for my Org. In this case AAA, BBB, CCC, DDD, and EEE will be returned.
3. Now I will need to iterate from AAA to EEE until I find a password policy that contains either group ID 111, 222, or 333. For example, if policy AAA and BBB do not contain any of Sam's group IDs and policy CCC contains group ID 333, then I will need to use the rules that are defined in policy CCC.

I am hoping that there is an easier way do resolve which password rules I need to use if Sam wants to change their password.