---
title: "Configure access control for accounts"
method: POST
path: "/restapi/json/v1/accounts/configureaccesscontrol"
tags: ["Access Control"]
---

# Configure access control for accounts

`POST /restapi/json/v1/accounts/configureaccesscontrol`

## Request

- Base URL: `https://Hostname:Port`
- URL: `https://Hostname:Port/restapi/json/v1/accounts/configureaccesscontrol`
- Auth: API key in header `AUTHTOKEN`
- TypeScript: <https://skmtc.dev/manageengine/apis/pam360-rest-api/docs/restapi/json/v1/accounts/configureaccesscontrol/post.ts> (a function with typed inputs; its response is checked against the schema)

Enables and configures access control settings for one or more accounts. Specify approval administrators, checkout duration, grace time, auto-approve options, and other access control parameters.
**Known limitation:** This endpoint may reject INPUT_DATA in certain PAM360 versions.

## Headers

- `orgName` string

## Request body `application/x-www-form-urlencoded`

- object
  - `INPUT_DATA` object, required: Access control configuration for accounts.
    - `operation` object
      - `Details` object
        - `accountIds` integer[], required: Account IDs to configure access control for
        - `addApprovalAdmins` integer[]: User IDs to add as approval administrators
        - `removeApprovalAdmins` integer[]: User IDs to remove from approval administrators
        - `addApprovalAdminGroups` integer[]: User group IDs to add as approval admin groups
        - `removeApprovalAdminGroups` integer[]: User group IDs to remove from approval admin groups
        - `addExcludeUsers` integer[]: User IDs to exclude from access control
        - `removeExcludeUsers` integer[]: User IDs to remove from exclusion list
        - `addExcludeUserGroups` integer[]: User group IDs to exclude from access control
        - `reasonRequired` boolean: Users must provide a reason when requesting access
        - `remindAdmins` boolean: Enable admin reminders for pending approvals
        - `reminderMinutes` integer: Reminder frequency in minutes (1-60)
        - `checkOutTime` integer: Maximum duration in minutes for which access is granted
        - `enforceMultipleAdmins` boolean: Require multiple admin approvals
        - `numberOfApprovalAdmins` integer: Number of admins needed to approve
        - `autoApprove` boolean: Enable automated request approval
        - `autoApproveOption` 'allday' | 'helpdesk' | 'time': Auto-approval mechanism type
        - `timesOfTheDay0` string[]: Auto-approval time window for all days. Format: "fromHrs:fromMins | toHrs:toMins" (24-hour). Multiple windows per day supported. Used when autoApproveOption is "time".
        - `timesOfTheDay1` string[]: Auto-approval time window for Sunday. Format: "fromHrs:fromMins | toHrs:toMins".
        - `timesOfTheDay2` string[]: Auto-approval time window for Monday. Format: "fromHrs:fromMins | toHrs:toMins".
        - `timesOfTheDay3` string[]: Auto-approval time window for Tuesday. Format: "fromHrs:fromMins | toHrs:toMins".
        - `timesOfTheDay4` string[]: Auto-approval time window for Wednesday. Format: "fromHrs:fromMins | toHrs:toMins".
        - `timesOfTheDay5` string[]: Auto-approval time window for Thursday. Format: "fromHrs:fromMins | toHrs:toMins".
        - `timesOfTheDay6` string[]: Auto-approval time window for Friday. Format: "fromHrs:fromMins | toHrs:toMins".
        - `provideGraceTime` boolean: Allow grace period before access revocation
        - `graceTime` integer: Grace period duration in minutes (1-60)

## Response `200`

Access control configured

- ConfigureAccountAccessControlResponse
  - `operation` object
    - `result` OperationResult
      - `message` string: Result message describing the operation outcome
      - `status` string: Operation status
    - `Details` object
      - `configurationResult` object[]
        - `accountId` integer: ID of the account for which access control was configured
        - `resourceId` integer: ID of the resource the account belongs to
        - `status` string
        - `statusCode` integer
        - `message` string
    - `name` string

---

[API](https://skmtc.dev/manageengine/apis/pam360-rest-api.md) - [All operations](https://skmtc.dev/manageengine/apis/pam360-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/manageengine/apis/pam360-rest-api/revisions/44a47abb4bdb?raw)