---
title: "Perform Assessment Workflow Action"
method: POST
path: "/api/assessment/v2/assessments/{assessmentId}/actions"
tags: ["Assessment Actions"]
---

# Perform Assessment Workflow Action

`POST /api/assessment/v2/assessments/{assessmentId}/actions`

## Request

- Base URL: `https://hostname`
- URL: `https://hostname/api/assessment/v2/assessments/{assessmentId}/actions`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `ASSESSMENT`

Use this API to perform a workflow action on an assessment. The response reflects the updated workflow state of the assessment.

> 🗒 Things to Know
>
> - Supported actions include `SUBMIT`, `REVIEW`, `REJECT`, and `REOPEN`.

## Path parameters

- `assessmentId` string, uuid, required

## Request body

- PrivacyAutomationAssessmentAutomationWorkflowActionRequest
  - `action` 'SUBMIT' | 'REVIEW' | 'REJECT' | 'REOPEN', required: The workflow transition to perform.
  - `comment` string: Comment associated with the transition. Applies to SUBMIT (submission comment), REVIEW/REJECT (closure comment), and REOPEN (notification email comment).
  - `result` string: Display name of the result option to apply, e.g. "Approved" or "Rejected" (or a custom result name defined for the assessment's template). Matched case-insensitively against the active, non-internal result options available for this assessment and resolved to the underlying result ID internally - callers don't need to look up the ID first. Required when action is REVIEW; ignored otherwise.
  - `forceOverride` boolean: Flag to force override validation errors during closure. Applies to REVIEW and REJECT only.
  - `excludeRules` boolean: Flag to exclude rule execution during closure. Applies to REVIEW and REJECT only.
  - `attestationRequired` boolean: Flag indicating whether attestation is required for closure. Applies to REVIEW and REJECT only.
  - `disclaimerAccepted` boolean: Indicates whether the submitter has accepted the assessment submission disclaimer. Applies to SUBMIT only.

## Response `200`

OK

- PrivacyAutomationAssessmentAutomationWorkflowActionResponse
  - `assessmentId` string, uuid
  - `action` 'SUBMIT' | 'REVIEW' | 'REJECT' | 'REOPEN': The action that was performed.
  - `status` 'NOT_STARTED' | 'IN_PROGRESS' | 'UNDER_REVIEW' | 'COMPLETED': The assessment's status after the transition ran.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/privacy-automation-assessment-automation.md) - [All operations](https://skmtc.dev/onetrust/apis/privacy-automation-assessment-automation/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/privacy-automation-assessment-automation/revisions/fbdf0c71bfe5?raw)