---
title: "POST /roadmaps/{id}/audit-lock"
method: POST
path: "/roadmaps/{id}/audit-lock"
tags: ["Map"]
---

# POST /roadmaps/{id}/audit-lock

`POST /roadmaps/{id}/audit-lock`

## Request

- Base URL: `https://dev-rest.onboard.io`
- URL: `https://dev-rest.onboard.io/roadmaps/{id}/audit-lock`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/onboard/apis/onboard-api-complete-specification/docs/roadmaps/:id/audit-lock/post.ts> (a function with typed inputs; its response is checked against the schema)

Lock an Approved or Declined case and store its audit snapshot. Admin, manager, API user, or internal user who can see the case. Team members (lead/member) need the compliance_case_lock feature (team member features, Compliance hub); without it, and for view-only seats, 403. Portal users receive 403. On success the case's Stream comment channels are frozen.

## Path parameters

- `id` string, required

## Request body

- object
  - `reason` string, nullable: Optional. Blank is allowed.

## Response `200`

Lock state, the snapshot taken by this lock, and event_id.

- object
  - `id` integer
  - `audit_lock_eligible` boolean
  - `audit_lock_supported` boolean
  - `is_audit_locked` boolean
  - `audit_locked_at` string, date-time, nullable
  - `audit_locked_by` object, nullable
    - `id` integer
    - `name` string
    - `email` string
  - `audit_lock_reason` string
  - `audit_snapshot` object, nullable: Point-in-time record taken by this lock.
  - `event_id` integer

## Other responses

- `400`: The case cannot be locked yet. Audit lock is only available on compliance cases and projects marked eligible, and only after the case is Approved or Declined.
- `401`: Unauthorized
- `403`: You don't have permission to lock cases for audit. Ask an admin to enable Lock cases for audit (compliance_case_lock) on your team member profile. Also returned to portal users and callers who cannot see the case.
- `404`: Not found
- `409`: This case is already locked for audit.

## Changes

- **2026-11-04** `db7ac8431870`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/onboard/apis/onboard-api-complete-specification/changes/roadmaps/:id/audit-lock/post.md)

---

[API](https://skmtc.dev/onboard/apis/onboard-api-complete-specification.md) - [All operations](https://skmtc.dev/onboard/apis/onboard-api-complete-specification/llms.txt) - [OpenAPI document](https://skmtc.dev/onboard/apis/onboard-api-complete-specification/revisions/db7ac8431870?raw)