---
title: "Delegate my approvals to a colleague"
method: POST
path: "/api/v1/rest/workflow/delegations"
tags: ["Workflows"]
---

# Delegate my approvals to a colleague

`POST /api/v1/rest/workflow/delegations`

## Request

- Base URL: `https://api.custodo.ai`
- URL: `https://api.custodo.ai/api/v1/rest/workflow/delegations`
- Auth: HTTP bearer

Grants an active colleague the right to see and act on the caller’s work — an out-of-office backup. `modules` says WHICH work, and the four scopes do not overlap: `workflow` is every approval run EXCEPT expense claims, `spese` is the nota spese approvals, `attivita` is the caller’s own tasks, `timbratura` is the leave and correction requests of the caller’s team. Omitting it delegates the two approval scopes, which is what a delegation meant before the scopes existed. Requires the workflow.delegations feature. Leave the dates open for an immediate, indefinite delegation, or bound it to the trip you are actually taking.

## Headers

- `X-Tenant-Id` string, uuid

## Request body

- object
  - `delegate_user` string, uuid, required: An active member of this tenant, not the caller.
  - `modules` string[]: Which work the backup inherits. Defaults to the two approval scopes (workflow, spese). Add `attivita` to hand over the caller’s tasks too.
  - `starts_at` string, date-time, nullable: Today or later — a delegation cannot be backdated.
  - `ends_at` string, date-time, nullable

## Response `200`

Done. `data` is the tool’s own answer.

- RestResult
  - `ok` true, required
  - `data` unknown, required

## Other responses

- `400`: The arguments did not validate: `error.message` names the field, what it expects and what arrived.
- `401`: No API key, or one that is malformed, unknown, revoked or expired.
- `403`: The call never ran: the module is off for this organisation, the credential lacks the permission or the module, the tier does not cover it, or the tool is destructive and the key was not minted for that.
- `409`: The record is in a state that does not allow it — under legal hold, already sent, already closed. `error.code` says which.
- `422`: The tool ran and refused, in a sentence of its own (`TOOL_REFUSED`): the message says what to change. Retrying the same call will not help.
- `429`: The API key has spent its minute, or its day. Every request a key makes counts. See `Retry-After`.

---

[API](https://skmtc.dev/custodo/apis/custodo-integrazioni.md) · [All operations](https://skmtc.dev/custodo/apis/custodo-integrazioni/llms.txt) · [OpenAPI document](https://skmtc.dev/custodo/apis/custodo-integrazioni/revisions/16d336d3ec2a?raw)