---
title: "Update Audit"
method: PUT
path: "/api/audit-management/v1/audits/{auditId}"
tags: ["Audits"]
---

# Update Audit

`PUT /api/audit-management/v1/audits/{auditId}`

## Request

- Base URL: `https://hostname`
- URL: `https://hostname/api/audit-management/v1/audits/{auditId}`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `AUDIT_MANAGEMENT`

Use this API to update the approvers, attributes, and auditors of a specific audit.

## Path parameters

- `auditId` string, uuid, required

## Request body

- AuditUpdateModel
  - `header` AuditHeaderModel, required
    - `name` string, required: Audit Name
    - `auditTypeId` string, uuid, required: Audit Type Identifier
    - `goal` string: The goal of the Audit.
    - `startDate` string, date: Audit Start Date
    - `endDate` string, date: Audit End Date
  - `auditors` UserAssignmentModel[], required: List of auditors. A minimum of one auditor has to be assigned to the audit
    - `email` string, required: Email
  - `approvers` UserAssignmentModel[], required: List of approvers. A minimum of one approver has to be assigned to the audit
    - `email` string, required: Email
  - `auditorAssignmentType` 'THROW_EXCEPTION_ON_AUDITOR_REMOVAL_IF_SCOPES_ASSIGNED' | 'UNASSIGN_SCOPES_ON_AUDITOR_REMOVAL', required
  - `attributes` object: Custom Attributes

## Response `200`

OK

- AuditDetailInformation
  - `auditId` string, uuid: Audit Identifier
  - `name` string: Audit Name
  - `number` integer: Audit Number
  - `orgGroupId` string, uuid: Audit Organization Group Identifier
  - `auditTypeId` string, uuid: Audit Type Identifier
  - `auditType` string: Audit Type
  - `auditTypeNameKey` string: Translation key for the audit type name used for localization
  - `goal` string: The goal of the Audit.
  - `frameworks` BasicEntityDetail[]: Frameworks
    - `id` string, uuid, required: ID of the entity
    - `name` string: Name of the Entity
  - `startDate` string, date: Audit Start Date
  - `endDate` string, date: Audit End Date
  - `orgGroup` string: Audit Organization Group
  - `auditors` AuditorInformation[]: Auditors
    - `auditorId` string, uuid: Auditor Identifier
    - `fullName` string: Auditor Name
  - `approvers` ApproverInformation[]: Audit Approvers
    - `approverId` string, uuid: Approver Identifier
    - `fullName` string: Approver Name
  - `workflow` BasicEntityDetailTranslation
    - `id` string, uuid, required: ID of the entity
    - `name` string: Name of the Entity
    - `nameKey` string: Namekey of the entity for localization
  - `stage` StageInformation
    - `id` string, uuid, required: ID of the entity
    - `name` string: Name of the Entity
    - `nameKey` string: Namekey of the entity for localization
    - `badgeColor` string: Workflow Stage Badge Color
  - `lastModifiedDate` string, date-time: Date when the audit was last modified
  - `attributes` object: Custom Attributes

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/tech-risk-compliance-audit-management.md) - [All operations](https://skmtc.dev/onetrust/apis/tech-risk-compliance-audit-management/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/tech-risk-compliance-audit-management/revisions/b01323a55e99?raw)