policy api -- query multiple ids