---
title: "PUT /public/v1/clusters/{clusterName}/service-accounts-aiven/{AivenSAUsernamePattern}/acl"
method: PUT
path: "/public/v1/clusters/{clusterName}/service-accounts-aiven/{AivenSAUsernamePattern}/acl"
tags: ["service-accounts"]
---

# PUT /public/v1/clusters/{clusterName}/service-accounts-aiven/{AivenSAUsernamePattern}/acl

`PUT /public/v1/clusters/{clusterName}/service-accounts-aiven/{AivenSAUsernamePattern}/acl`

## Request

- Base URL: `https://developers.conduktor.io` (the document declares no server; this is the origin it was published from)
- URL: `https://developers.conduktor.io/public/v1/clusters/{clusterName}/service-accounts-aiven/{AivenSAUsernamePattern}/acl`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/conduktor/apis/conduktor-console-api/docs/public/v1/clusters/:clusterName/service-accounts-aiven/:AivenSAUsernamePattern/acl/put.ts> (a function with typed inputs; its response is checked against the schema)

Create (or update) acls for a given Aiven service account

## Path parameters

- `clusterName` string, required
- `AivenSAUsernamePattern` string, required

## Request body

- AivenAclsCreateRequest
  - `acls` AivenAclCreatePayload[]
    - `permission` 'read' | 'write' | 'readwrite' | 'admin', required
    - `topic` string, required
  - `schemaRegistryAcls` AivenSRAclCreatePayload[]
    - `permission` 'schema_registry_read' | 'schema_registry_write', required
    - `resource` string, required

## Response `200`

## Other responses

- `400`: This cluster is not an Aiven cluster.
- `401`: The user is not authenticated
- `403`: The user doesn't have the required permission(s) "kafka.clusters.acl.create, kafka.clusters.acl.delete" to do this operation
- `404`: No cluster with this technical id exist
- `500`: An unexpected error occurred in the server

---

[API](https://skmtc.dev/conduktor/apis/conduktor-console-api.md) - [All operations](https://skmtc.dev/conduktor/apis/conduktor-console-api/llms.txt) - [OpenAPI document](https://skmtc.dev/conduktor/apis/conduktor-console-api/revisions/24750c294805?raw)
