---
title: "POST /roadmaps/{id}/audit-unlock"
method: POST
path: "/roadmaps/{id}/audit-unlock"
tags: ["Map"]
---

# POST /roadmaps/{id}/audit-unlock

`POST /roadmaps/{id}/audit-unlock`

## Request

- Base URL: `https://dev-rest.onboard.io`
- URL: `https://dev-rest.onboard.io/roadmaps/{id}/audit-unlock`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/onboard/apis/onboard-api-complete-specification/docs/roadmaps/:id/audit-unlock/post.ts> (a function with typed inputs; its response is checked against the schema)

Unlock a locked case. Admin, manager, or internal user. The last snapshot is kept on the case and is not returned here. Team members receive 403.

## Path parameters

- `id` string, required

## Request body

- object
  - `reason` string, nullable: Optional. Blank is allowed.

## Response `200`

Lock state after unlock, and event_id. The stored snapshot is unchanged.

- object
  - `id` integer
  - `audit_lock_eligible` boolean
  - `audit_lock_supported` boolean
  - `is_audit_locked` boolean
  - `audit_locked_at` string, date-time, nullable
  - `audit_locked_by` object, nullable
    - `id` integer
    - `name` string
    - `email` string
  - `audit_lock_reason` string
  - `event_id` integer

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Not an admin, manager, or internal user, or the case is not visible.
- `404`: Not found
- `409`: This case is not locked.

## Changes

- **2026-11-04** `db7ac8431870`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/onboard/apis/onboard-api-complete-specification/changes/roadmaps/:id/audit-unlock/post.md)

---

[API](https://skmtc.dev/onboard/apis/onboard-api-complete-specification.md) - [All operations](https://skmtc.dev/onboard/apis/onboard-api-complete-specification/llms.txt) - [OpenAPI document](https://skmtc.dev/onboard/apis/onboard-api-complete-specification/revisions/db7ac8431870?raw)