---
title: "Update access certification settings"
method: PUT
path: "/api/v2/access-certification/settings"
tags: ["Access Certification"]
---

# Update access certification settings

`PUT /api/v2/access-certification/settings`

## Request

- Base URL: `https://console.jumpcloud.com`
- URL: `https://console.jumpcloud.com/api/v2/access-certification/settings`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/docs/api/v2/access-certification/settings/put.ts> (a function with typed inputs; its response is checked against the schema)

Creates or replaces your access certification settings. Send the full settings object —
partial updates are not supported.

Use this endpoint to:
- Enable or disable Access Certification (`featureEnabled`)
- Configure notification platforms and which lifecycle events each destination receives

Disabling Access Certification (`featureEnabled` `false`) requires that no campaigns are
**Active**. When disabled, all **Scheduled** campaigns with `config.enabled` `true` are
set to inactive (`config.enabled` `false`) and will not auto-start until manually
re-enabled after the org feature is turned back on.

API operations for listing and viewing campaigns, finalizing runs, remediation, reassign, and
audit download and sign-off remain available while Access Certification is disabled. Only
creating and activating campaigns (and reviewer notifications) are blocked.

The Admin Console may prompt you to re-enable the feature; that experience is separate from
API behavior described here.

Notification destination IDs reference channels configured in JumpCloud Notifications.

**Required permission:** `accesscertification` (Full Access)

## Request body

- JumpcloudHttpAccesscertificationOrgAccessCertificationSettings: Access certification settings for your organization. Controls whether the feature is enabled, AI suggestions, and default notification platform configuration.
  - `featureEnabled` boolean, required: Master switch for Access Certification. When `false`: - Reviewer notifications are paused and User Portal campaign access is hidden - Creating and activating campaigns returns 409 Conflict - All Scheduled campaigns with `config.enabled` `true` are set inactive on disable - Disabling returns 409 Conflict while any campaign is Active - Viewing campaigns, finalizing runs, remediating, reassigning, and downloading or signing off audit reports remain available while the feature is disabled - Re-enabling does not auto-activate previously disabled Scheduled campaigns
  - `platforms` JumpcloudHttpAccesscertificationNotificationPlatform[], required: Email, Slack, and/or Webhook platform configuration
    - `type` 'email' | 'slack' | 'webhook', required: Notification delivery platform
    - `enabled` boolean, required: Whether this platform is enabled for org notifications
    - `destinations` JumpcloudHttpAccesscertificationNotificationDestination[], required: Notification destinations for this platform, each with its own event list
      - `destinationId` string, required: JumpCloud Notifications channel ID for this destination
      - `events` JumpcloudHttpAccesscertificationNotificationEvent[], required: Org lifecycle events this destination listens to (empty = none)

## Response `200`

Updated access certification settings

- JumpcloudHttpAccesscertificationOrgAccessCertificationSettings: Access certification settings for your organization. Controls whether the feature is enabled, AI suggestions, and default notification platform configuration.
  - `featureEnabled` boolean, required: Master switch for Access Certification. When `false`: - Reviewer notifications are paused and User Portal campaign access is hidden - Creating and activating campaigns returns 409 Conflict - All Scheduled campaigns with `config.enabled` `true` are set inactive on disable - Disabling returns 409 Conflict while any campaign is Active - Viewing campaigns, finalizing runs, remediating, reassigning, and downloading or signing off audit reports remain available while the feature is disabled - Re-enabling does not auto-activate previously disabled Scheduled campaigns
  - `platforms` JumpcloudHttpAccesscertificationNotificationPlatform[], required: Email, Slack, and/or Webhook platform configuration
    - `type` 'email' | 'slack' | 'webhook', required: Notification delivery platform
    - `enabled` boolean, required: Whether this platform is enabled for org notifications
    - `destinations` JumpcloudHttpAccesscertificationNotificationDestination[], required: Notification destinations for this platform, each with its own event list
      - `destinationId` string, required: JumpCloud Notifications channel ID for this destination
      - `events` JumpcloudHttpAccesscertificationNotificationEvent[], required: Org lifecycle events this destination listens to (empty = none)

## Other responses

- `400`: Validation error with field-level details
- `401`: Missing or invalid credentials
- `403`: Forbidden — principal not assigned or lacks required role
- `409`: Conflict — cannot disable while Active campaigns exist, or other state conflict
- `default`: Unexpected error

---

[API](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api.md) - [All operations](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/llms.txt) - [OpenAPI document](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/revisions/f396d9271b46?raw)