---
title: "Add or delete users (custodians) from a legal hold policy - v3"
method: POST
path: "/legalholds/v3/policies/{policyId}/users"
tags: ["Legal Hold"]
---

# Add or delete users (custodians) from a legal hold policy - v3

`POST /legalholds/v3/policies/{policyId}/users`

## Request

- Base URL: `https://apis.druva.com/insync`
- URL: `https://apis.druva.com/insync/legalholds/v3/policies/{policyId}/users`
- Auth: API key in header `Authorization`

Add or delete users from a legal hold policy in Druva inSync.

## Path parameters

- `policyId` integer, required

## Request body

- RequestOperateOnCustodians
  - `custodians` object[]
    - `emailId` string: The email address of the user, who should be added to OR deleted from the legal hold policy.
  - `action` 'add' | 'delete': The action to be performed on the user.

## Response `200`

OK

- ResponseOperateOncustodians
  - `alreadyOnLegalhold` object[]: While adding a user to a legal hold policy, if a user is already on legal hold then the email address is returned in this list. This field is returned only if the action is 'add'.
    - `emailId` string: Email address of users which are already on legal hold.
  - `notOnLegalhold` object[]: While deleting a user from a legal hold policy, if a user is already deleted from legal hold then the user email address will be returned in this list. This field is returned only if the action is 'delete'.
    - `emailId` string: Email address of users which are already deleted from legal hold or are not on legal hold.
  - `notInsyncUsers` object[]
    - `emailId` string: Email address of users which are not valid inSync users.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Access denied: Insufficient permissions. User requires specific access rights and minimum permissions. Details: https://help.druva.com/en/articles/15069296
- `404`: Not found
- `500`: Internal Server Error

---

[API](https://skmtc.dev/druva/apis/insync-cloud.md) - [All operations](https://skmtc.dev/druva/apis/insync-cloud/llms.txt) - [OpenAPI document](https://skmtc.dev/druva/apis/insync-cloud/revisions/a0ce6d05033c?raw)