---
title: "Modify the triage assignee of a security signal"
method: PATCH
path: "/api/v1/security_analytics/signals/{signal_id}/assignee"
tags: ["Security Monitoring"]
deprecated: true
---

# Modify the triage assignee of a security signal

`PATCH /api/v1/security_analytics/signals/{signal_id}/assignee`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v1/security_analytics/signals/{signal_id}/assignee`
- Auth: API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`

> **Deprecated.**

This endpoint is deprecated - Modify the triage assignee of a security signal.

## Path parameters

- `signal_id` string, required

## Request body

- SignalAssigneeUpdateRequest: Attributes describing an assignee update operation over a security signal.
  - `assignee` string, required: The UUID of the user being assigned. Use empty string to return signal to unassigned.
  - `version` integer: Version of the updated signal. If server side version is higher, update will be rejected.

## Response `200`

OK

- SuccessfulSignalUpdateResponse: Updated signal data following a successfully performed update.
  - `status` string: Status of the response.

## Other responses

- `400`: Bad Request
- `403`: Forbidden
- `404`: Not Found
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v1-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v1-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v1-collection/revisions/ca5871004d26?raw)