--- title: "POST /update-account-settings" method: POST path: "/update-account-settings" tags: ["Account"] --- # POST /update-account-settings `POST /update-account-settings` ## Request - Base URL: `https://api.akeyless.io` - URL: `https://api.akeyless.io/update-account-settings` - Auth: none declared ## Request body - UpdateAccountSettings - `address` string: Address - `allowed-client-type` string[]: A default list of client types that are allowed to authenticate [cli,ui,gateway-admin,sdk,mobile,extension]. - `allowed-email-domains` string[]: Limits email sharing to the specified domains. Relevant only when item sharing is enabled. By default, all domains are allowed. - `bound-ips` string[]: A default list of comma-separated CIDR block that are allowed to authenticate. - `city` string: City - `company-name` string: Company name - `country` string: Country - `default-certificate-expiration-notification-days` string[]: How many days before the expiration of the certificate would you like to be notified. To specify multiple events, use argument multiple times: --default-certificate-expiration-notification-days 1 --default-certificate-expiration-notification-days 5 - `default-key-name` string: Set the account default key based on the DFC key name. Use "set-original-akeyless-default-key" to revert to using the original default key of the account. - `default-share-link-ttl-minutes` string: Set the default ttl in minutes for sharing item number between 60 and 43200 - `default-versioning` string: If set to true, new versions is enabled by default - `dp-enable-classic-key-protection` string: Set to update protection with classic keys state [true/false] - `dynamic-secret-max-ttl` integer: Set the maximum ttl for dynamic secrets - `dynamic-secret-max-ttl-enable` string: Set a maximum ttl for dynamic secrets [true/false] - `enable-ai-insights` string: Enable AI insights [true/false] - `enable-ai-quorum` string: Enable AI Quorum checks account-wide [true/false] - `enable-default-certificate-expiration-event` string: How many days before the expiration of the certificate would you like to be notified. [true/false] - `enable-item-sharing` string: Enable sharing items [true/false] - `enable-password-expiration` string: Enable password expiration policy [true/false] - `force-new-versions` string: If set to true, new version will be created on update - `gw-bound-ips` string[]: A default list of comma-separated CIDR block that acts as a trusted Gateway entity. - `hide-personal-folder` string: Hide personal folder, if set - users will not be able to use personal folder [true/false] - `hide-static-password` string: Hide static secret's password type [true/false] - `invalid-characters` string: Characters that cannot be used for items/targets/roles/auths/event_forwarder names. Empty string will enforce nothing. - `item-locking-enabled` string: Enable item locking feature [true/false] - `item-type` string: VersionSettingsObjectType defines object types for account version settings - `items-deletion-protection` string: Set or unset the default behaviour of items deletion protection [true/false] - `json` boolean: Set output format to JSON - `jwt-ttl-default` integer: Default ttl - `jwt-ttl-max` integer: Maximum ttl - `jwt-ttl-min` integer: Minimum ttl - `lock-allowed-client-type` string: Lock allowed-client-type setting in the account [true/false]. - `lock-bound-ips` string: Lock bound-ips setting globally in the account. - `lock-default-key` string: Lock the account's default protection key, if set - users will not be able to use a different protection key, relevant only if default-key-name is configured [true/false] - `lock-gw-bound-ips` string: Lock gw-bound-ips setting in the account. - `lock-max-ttl` integer: Set the maximum TTL for item/target locks in minutes - `max-rotation-interval` integer: Set the maximum rotation interval for rotated secrets auto rotation settings - `max-rotation-interval-enable` string: Set a maximum rotation interval for rotated secrets auto rotation settings [true/false] - `max-versions` string: Max versions - `password-expiration-days` string: Specifies the number of days that a password is valid before it must be changed. A default value of 90 days is used. - `password-expiration-notification-days` string: Specifies the number of days before a user receives notification that their password will expire. A default value of 14 days is used. - `password-length` integer: Password length between 5 - to 50 characters - `phone` string: Phone number - `postal-code` string: Postal code - `token` string: Authentication token (see `/auth` and `/configure`) - `uid-token` string: The universal identity token, Required only for universal_identity authentication - `usage-event-enable` string: Enable event for objects that have not been used or changed [true/false] - `usage-event-interval` integer: Interval by days for unused objects. Default and minimum interval is 90 days - `usage-event-object-type` string: Usage event is supported for auth method or secrets-and-keys [auth/item] - `use-capital-letters` string: Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false] - `use-lower-letters` string: Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false] - `use-numbers` string: Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false] - `use-special-characters` string ## Response `200` updateAccountSettingsResponse wraps response body. - UpdateAccountSettingsOutput - `updated` boolean ## Other responses - `default`: errorResponse wraps any error to return it as a JSON object with one "error" field. --- [API](https://skmtc.dev/akeyless/apis/account-settings.md) - [All operations](https://skmtc.dev/akeyless/apis/account-settings/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/account-settings/revisions/6beb28d274ac?raw)