Skip to main content
PATCH
Update approval config

Authorizations

Authorization
string
header
required

OAuth 2.1 authorization code + PKCE (S256). Tokens are tenant-bound (company_id) and scoped. Discover endpoints via /.well-known/oauth-authorization-server.

Body

application/json

Owner-only update of the approval config. Only fields explicitly provided are merged; enabled is applied only when a strict boolean, and approverRoles/requesterRoles only when a non-empty array.

enabled
boolean

Whether approvals are required.

approverRoles
string[]

Roles allowed to approve (applied only when non-empty).

requesterRoles
string[]

Roles allowed to request (applied only when non-empty).

Response

The merged approval config (Owner only).

data
object
required