---
title: "Approve an external recipient."
method: POST
path: "/v1/dashboards/{id}/export-schedules/{sid}/recipients/{rid}/approve"
tags: ["exports"]
---

# Approve an external recipient.

`POST /v1/dashboards/{id}/export-schedules/{sid}/recipients/{rid}/approve`

## Request

- Base URL: `http://localhost:8080`
- URL: `http://localhost:8080/v1/dashboards/{id}/export-schedules/{sid}/recipients/{rid}/approve`
- Auth: one of:
  - API key in cookie `dvt_session`
  - HTTP bearer

Sets a `pending_approval` recipient's status to `active`, recording `approved_by` +
`approved_at` (ADR-0051 §3). Requires `dashboard:write` AND the approver must be the
dashboard owner or an org admin/owner. A mere editor may add a pending recipient but
cannot approve — that split is intentional to keep a human gate on external addresses.
If the dashboard owner has left the org, an org admin/owner can always approve
(owner-left fallback).

## Response `200`

Recipient approved.

- ExportRecipientEnvelope
  - `data` ExportRecipient, required: One email target on an export schedule, with its approval state machine (ADR-0051 §3). `email` and `isExternal` are immutable after insert — change an address by removing and re-adding the recipient (which re-enters the approval state machine).
    - `id` string, uuid, required
    - `scheduleId` string, uuid, required
    - `email` string, email, required
    - `isExternal` boolean, required: True when the email did not match a current org member at add time (fail-closed). Immutable after insert.
    - `status` 'active' | 'pending_approval' | 'rejected', required: `active` — will receive deliveries. `pending_approval` — awaiting owner/admin approval (external only). `rejected` — approval denied; never delivered to.
    - `approvedBy` string, uuid, nullable: The user who approved this recipient (external only).
    - `approvedAt` string, date-time, nullable
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
  - `meta` Meta, required: Response metadata.
    - `requestId` string, required: Correlates with the X-Request-Id header.
    - `total` integer: Item count, present on collection responses.
    - `nextCursor` string, nullable: Opaque keyset-pagination cursor, present on paginated responses (e.g. GET /v1/dashboards) when more rows exist beyond this page. Pass it back as the `cursor` query param to fetch the next page; absent or null on the last page.
    - `roleResolveDegraded` boolean: Snowflake mode only (DVT-2260), on GET /v1/dashboards: present and true when the caller's live Snowflake role resolution failed or was unavailable — role-shared dashboards may be missing from this page. Omitted (not merely false) whenever resolution succeeded or the role-share arm does not apply (off snowflake mode, an org admin/owner, or off the ingress listener).

## Other responses

- `401`: Missing, invalid, or expired session.
- `403`: The caller's role does not permit this action.
- `404`: Resource does not exist.

---

[API](https://skmtc.dev/dvt/apis/dvt-rest-api.md) · [All operations](https://skmtc.dev/dvt/apis/dvt-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dvt/apis/dvt-rest-api/revisions/00016f504165?raw)