Skip to main content
PATCH
Update

Authorizations

Authorization
string
header
required

Bearer API Key. For example, "Bearer {Tenant API Key}"

Headers

Authorization
string
required

Bearer API Key. For example, "Bearer {Tenant API Key}"

Content-Type
string
required

application/json

Path Parameters

id
string
required

The ID of the access grant.

Body

application/json

Include at least one review field, or the request returns a 400. Send null to clear a field.

reviewDecision
string | null

The decision on this grant. keep accepts it, remove marks it for revocation, review_later defers it, and trust_until_review trusts it until nextReviewAt. Send null to clear it.

trust_until_review is the only decision that changes classification. It requires nextReviewAt, which must be in the future and no more than 366 days ahead, and it sets trustStatus to trusted and trustedUntil to that date. Sending it without a usable date returns a 400. Plerion records a digest of the grant's actions, conditions and resource scope at that moment; if the grant is later widened, trust ends early, reviewDecision and nextReviewAt are cleared, and trustLapseReason becomes content_changed. Extending the review date on a grant whose permissions changed since it was trusted returns a 400.

Available options: keep, remove, review_later, trust_until_review

Example:

"keep"

reviewComment
string | null

Free-text note explaining the decision. Maximum 2000 characters.

Maximum string length: 2000
Example:

"Vendor export feed, contract renewed 2026-07"

grantee
string | null

Free-text grantee for this grant, in whatever form your organization uses: a team, a person, or a service. Maximum 256 characters.

Maximum string length: 256
Example:

"platform-team"

nextReviewAt
string<date-time> | null

When this grant should next be reviewed, as an ISO 8601 date-time string. Required when reviewDecision is trust_until_review, where it also sets the end of the trust window.

Example:

"2027-01-31T00:00:00.000Z"

Response

The updated access grant

data
object