---
title: "Creates authorization by using a previously created payment account"
method: POST
path: "/booking/v0-nsfw/authorizations/by-payment-account"
tags: ["Authorization"]
---

# Creates authorization by using a previously created payment account

`POST /booking/v0-nsfw/authorizations/by-payment-account`

## Request

- Base URL: `https://api.apaleo.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.apaleo.com/booking/v0-nsfw/authorizations/by-payment-account`
- Auth: OAuth 2
  - Implicit: `https://identity.apaleo.com/connect/authorize`
  - Scopes: `authorizations.manage`, `admin`

<br>You must have this scope: 'authorizations.manage'.<br>For fine-grained clients, you must have this permission: 'core.authorizations.create'.

## Headers

- `Idempotency-Key` string

## Request body

- CreatePaymentAccountAuthorizationRequest
  - `target` AuthorizationTargetModel, required
    - `type` 'Booking' | 'Reservation', required: Authorization target type
    - `id` string, required: Booking or reservation id
    - `propertyId` string, required: The id of the property the authorization is to be created for. When target is Reservation, the property must be the same the reservation.
  - `amount` MonetaryValueModel, required
    - `amount` number, double, required
    - `currency` string, required
  - `accountOwner` 'Guest' | 'Booker': Account owner of the payment account, default is `Guest`. Will be ignored if PaymentAccountId is provided. - <b>DEPRECATED: AccountOwner is deprecated, use PaymentAccountId instead. This field will be removed on May 15, 2026. From this date onwards, PaymentAccountId will be a required parameter.</b>
  - `paymentAccountId` string, nullable: Optional payment account id. If passed, it is verified that the provided payment account is available for the target. From Feb 15, 2026 onwards, PaymentAccountId will be a required parameter.

## Response `201`

Authorization was created and will be processed

- AuthorizationCreatedModel
  - `id` string, required: Created authorization id

## Other responses

- `400`: Bad request.
- `401`: You are unauthorized.
- `403`: Forbidden.
- `404`: The Request-URI could not be found.
- `415`: Unsupported media type.
- `422`: Validation errors in the request body or query params.
- `499`: Client closed request.
- `500`: An unexpected error occurred.
- `503`: The server is currently unavailable. Please try later.

---

[API](https://skmtc.dev/apaleo/apis/apaleo-booking-api-not-safe-for-work.md) - [All operations](https://skmtc.dev/apaleo/apis/apaleo-booking-api-not-safe-for-work/llms.txt) - [OpenAPI document](https://skmtc.dev/apaleo/apis/apaleo-booking-api-not-safe-for-work/revisions/a1b6a2f6b879?raw)