Permissions

Policies determine which parts of the system your account can access. Every account has a role and one or more policies; request an additional policy when your integration needs a protected dataset.

Use the base policies

All users with API access receive the following base policies:

• Read and update self — Allows reading and updating your own profile.
• Content read — Grants read access to published items in the content, media, and global category collections.
• Read published media — Allows retrieval of media assets with a publication_date in the past.
• Asset read — Grants read access to directus_files and their metadata.

Request additional dataset policies

Additional policies may be assigned to extend access to specific data sets:

• Navigator — Read access to programs, educational_institutions, regional_education_desks, locations, and areas where vendor = 'onderwijsloket'.
• HOVI — Read access to programs, educational_institutions, and locations where vendor = 'hovi'.
• KiesMBO — Read access to programs, educational_institutions, and locations where vendor = 'kiesmbo'.
• Scholen op de kaart — Read access to schools and locations where vendor = 'sodk'.
• Read stats — Read access to anonymous usage statistics for Onderwijsloket services.
• Algolia token — Grants access to the algolia_token field on the user account.

Check eligibility and request access

Additional access can be requested by contacting us. Eligibility depends on the policy:

• Navigator — Available to anyone at no cost; a description of intended use is required.
• HOVI — Requires a signed contract with the vendor.
• KiesMBO — Requires a signed contract with the vendor.
• Scholen op de kaart — Requires a signed contract with the vendor.
• Read stats — Available to anyone at no cost; a description of intended use is required.
• Algolia token — Available to anyone for a prepaid fee based on expected usage. If actual usage exceeds the estimate, additional charges apply. Pricing follows Algolia’s model at €0.50 per 1,000 requests.