permission-match and either permits or denies the call (permission-mode). Requires Super User scope, because a shared policy changes dialing for every domain.permission-match, permission-mode and permission-reason. In permission-match, ? matches one character and * matches any run of characters, as in sip:+1900???????@*. A 202 means the rule was published, not yet applied. Add synchronous=yes to wait up to 2 seconds for this server to show the rule: the answer is then 200 with the rule, or still 202.404. To add a rule to a domain's policy, use POST /domains/{domain}/dialpolicy/{policy}/permission.Authorization: Bearer ********************202 when synchronous=yes and the rule appeared within 2 seconds: the new rule.curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/dialpolicy//permission' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data-raw '{
"permission-match": "sip:+1900???????@*",
"permission-mode": "deny",
"permission-reason": "Premium rate",
"synchronous": "yes"
}'synchronous=yes.{
"dialpolicy": "US and Canada",
"domain": "*",
"permission-match": "sip:+1900???????@*",
"permission-mode": "deny",
"permission-reason": "Premium rate",
"created-datetime": "2026-09-01T14:30:00Z",
"permission-id": "c2lwOisxOTAwPz8_Pz8_P0Aq"
}