---
title: "UpdateDashboardConfig"
method: PATCH
path: "/v1/namespaces/{object.tenant_meta.namespace}/dashboard-config"
tags: ["DashboardConfigService"]
---

# UpdateDashboardConfig

`PATCH /v1/namespaces/{object.tenant_meta.namespace}/dashboard-config`

## Request

- Base URL: `https://api.endorlabs.com`
- URL: `https://api.endorlabs.com/v1/namespaces/{object.tenant_meta.namespace}/dashboard-config`
- Auth: none declared

Updates a specified dashboard configuration.

## Path parameters

- `object.tenant_meta.namespace` string, required

## Request body

- DashboardConfigServiceUpdateDashboardConfigBody: Request to update a dashboard configuration object.
  - `object` object: DashboardConfig represents the dashboard configuration for a namespace.
    - `meta` V1Meta: Common fields for all Endor Labs resources.
      - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
      - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
      - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
      - `description` string: Resource description. Must be less than 1024 bytes.
      - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
        - `data` string[]
        - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
        - `tenant` string
        - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
      - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
      - `name` string, required: Resource name. Must be 63 characters or less.
      - `parent_kind` string: Parent object resource kind, for example, Project.
      - `parent_uuid` string: Parent object UUID.
      - `references` object: Map of objects referenced in a query API.
      - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
      - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
      - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
      - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
      - `version` string: Message version.
    - `propagate` boolean: Propagate indicates that the object should be visible in child namespaces.
    - `spec` V1DashboardConfigSpec
      - `dev_estimate` DashboardConfigDevEstimateConfig
        - `baseline_findings_filter` string: Baseline for the findings count in the dev estimate.
        - `currency_code` string: The currency code to use in estimate displays.
        - `dev_hours` number, double: The projected value for dev hours per vulnerability.
        - `hourly_cost` number, double: The projected value for hourly cost per dev hour.
      - `security_review_estimate` DashboardConfigReviewTimeConfig: Configuration for calculating review time saved.
        - `large_pr_minutes` integer: Time in minutes to review a large PR (more than 500 lines).
        - `medium_pr_minutes` integer: Time in minutes to review a medium PR (100-500 lines).
        - `small_pr_minutes` integer: Time in minutes to review a small PR (less than 100 lines).
      - `shift_left_estimate` DashboardConfigShiftLeftEstimateConfig: Configuration for calculating shift-left estimated savings.
        - `post_merge_fix_minutes` number, double: Estimated minutes to fix an issue caught post-merge.
        - `pre_merge_fix_minutes` number, double: Estimated minutes to fix an issue caught pre-merge.
      - `sla_days` DashboardConfigSLAConfig
        - `critical` integer: SLA days for critical findings.
        - `high` integer: SLA days for critical findings.
        - `low` integer: SLA days for critical findings.
        - `medium` integer: SLA days for critical findings.
      - `vuln_prioritization` DashboardConfigVulnPrioritizationConfig
        - `epss_probability_score_threshold` number, double: Threshhold for EPSS probability score in the vuln prioritization.
        - `finding_reachability_tags` V1FindingTags[]: Finding tags to use with reachability filter.
    - `tenant_meta` object: DashboardConfig is associated with a tenant and namespace.
    - `uuid` string: The UUID of the dashboard configuration object.
  - `request` V1UpdateRequest: Message used for all update requests.
    - `force` boolean: Force will force the update of the resource if any checks fail.
    - `update_mask` string: Fields to update. Defaults to all fields.

## Response `200`

A successful response.

- V1DashboardConfig: DashboardConfig represents the dashboard configuration for a namespace.
  - `meta` V1Meta, required: Common fields for all Endor Labs resources.
    - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
    - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
    - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
    - `description` string: Resource description. Must be less than 1024 bytes.
    - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
      - `data` string[]
      - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
      - `tenant` string
      - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
    - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
    - `name` string, required: Resource name. Must be 63 characters or less.
    - `parent_kind` string: Parent object resource kind, for example, Project.
    - `parent_uuid` string: Parent object UUID.
    - `references` object: Map of objects referenced in a query API.
    - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
    - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
    - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
    - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
    - `version` string: Message version.
  - `propagate` boolean: Propagate indicates that the object should be visible in child namespaces.
  - `spec` V1DashboardConfigSpec, required
    - `dev_estimate` DashboardConfigDevEstimateConfig
      - `baseline_findings_filter` string: Baseline for the findings count in the dev estimate.
      - `currency_code` string: The currency code to use in estimate displays.
      - `dev_hours` number, double: The projected value for dev hours per vulnerability.
      - `hourly_cost` number, double: The projected value for hourly cost per dev hour.
    - `security_review_estimate` DashboardConfigReviewTimeConfig: Configuration for calculating review time saved.
      - `large_pr_minutes` integer: Time in minutes to review a large PR (more than 500 lines).
      - `medium_pr_minutes` integer: Time in minutes to review a medium PR (100-500 lines).
      - `small_pr_minutes` integer: Time in minutes to review a small PR (less than 100 lines).
    - `shift_left_estimate` DashboardConfigShiftLeftEstimateConfig: Configuration for calculating shift-left estimated savings.
      - `post_merge_fix_minutes` number, double: Estimated minutes to fix an issue caught post-merge.
      - `pre_merge_fix_minutes` number, double: Estimated minutes to fix an issue caught pre-merge.
    - `sla_days` DashboardConfigSLAConfig
      - `critical` integer: SLA days for critical findings.
      - `high` integer: SLA days for critical findings.
      - `low` integer: SLA days for critical findings.
      - `medium` integer: SLA days for critical findings.
    - `vuln_prioritization` DashboardConfigVulnPrioritizationConfig
      - `epss_probability_score_threshold` number, double: Threshhold for EPSS probability score in the vuln prioritization.
      - `finding_reachability_tags` V1FindingTags[]: Finding tags to use with reachability filter.
  - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
    - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
  - `uuid` string: The UUID of the dashboard configuration object.

## Other responses

- `default`: An unexpected error response.

## Changes

- **2026-11-03** `4acd9fe15140`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/changes/v1/namespaces/:object.tenant_meta.namespace/dashboard-config/patch.md)

---

[API](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference.md) - [All operations](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/revisions/4acd9fe15140?raw)
