---
title: "Update Issue"
method: PUT
path: "/v1/issues/{issueId}"
tags: ["Issues"]
---

# Update Issue

`PUT /v1/issues/{issueId}`

## Request

- Base URL: `https://hostname/api/issue-management`
- URL: `https://hostname/api/issue-management/v1/issues/{issueId}`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `ISSUE`

Use this API to update all details for a specific issue.

> 🗒 Things to Know
>
> - The `attributes` parameter must be included in the request body but is not required to have values. If there are no attributes to send, pass an empty object {} in the following manner: "attributes": {}. However, if values exist for an attribute, you must include the values for each of those attribute to ensure the values are retained. Otherwise, they will be overwritten.

## Path parameters

- `issueId` string, uuid, required

## Request body

- IssueUpdateRequest
  - `name` string, required: The name that describes the issue.
  - `orgGroupId` string, uuid, required: The unique identifier of the organization associated with the issue.
  - `priority` 'Low' | 'Medium' | 'High' | 'Critical', required: The priority level of the issue.
  - `description` string: The description of the issue.
  - `deadline` string, date: The date by which the issue should be resolved.
  - `ownerIds` string[]: The unique identifiers of the issue owners who will remediate the issue.
  - `approverIds` string[]: The unique identifier(s) of the users assigned as approvers of the issue.
  - `reasonForClosure` string: The reason why the issue was closed.
  - `category` string: The category of the issue.
  - `note` string: The notes related to resolving the issue.
  - `actionPlan` string: The remediation plan for the issue.
  - `attributes` object: The details of the associated attributes.

## Response `202`

Accepted

- IssueResponse
  - `id` string, uuid: The unique identifier of the issue.
  - `number` integer: The page number of the results.
  - `name` string: The name that describes the issue.
  - `orgGroupId` string, uuid: The unique identifier of the organization associated with the issue.
  - `description` string: The description of the issue.
  - `deadline` string, date: The date by which the issue should be resolved.
  - `ownerIds` string[]: The unique identifiers of the issue owners who will remediate the issue.
  - `approverIds` string[]: The unique identifier(s) of the users assigned as approvers of the issue.
  - `reasonForClosure` string: The reason why the issue was closed.
  - `category` string: The category of the issue.
  - `status` 'Open' | 'Closed': The status of the issue.
  - `sourceType` 'Control' | 'Evidence' | 'Initiative' | 'Issue' | 'Risk' | 'assessment' | 'assets' | 'entities' | 'policies' | 'procedures' | 'processing-activities' | 'standards' | 'vendors': The entity type of the source record.
  - `sourceId` string, uuid: The unique identifier of the source record.
  - `note` string: The notes related to resolving the issue.
  - `actionPlan` string: The remediation plan for the issue.
  - `closedBy` string, uuid: The unique identifier of the user who closed the issue.
  - `closedDate` string: The date when the issue is closed.
  - `createdBy` string, uuid: The unique identifier of the user who created the issue.
  - `createdDate` string, date: The date when the issue is created.
  - `workflowAndStage` EntityWorkflowInformation
    - `id` string, uuid, required: The unique identifier of the workflow.
    - `name` string, required: The name of the workflow.
    - `type` string, required: The type of workflow.
    - `workflowMode` 'ADVANCED, BASIC': The mode in which the workflow was created.
    - `stageId` string, uuid, required: The unique identifier of the workflow stage.
    - `stageName` string, required: The name of the workflow stage.
  - `auditFields` EntityRecordAuditInformation
    - `createdDate` string, date-time, required: The date and time that the issue was created.
    - `lastUpdatedDate` string, date-time: The date and time that the issue was last updated.
    - `createdBy` EntityBasicUserInformation
      - `id` string, uuid: The unique identifier of the user who last modified the issue.
      - `name` string: The name of the user who last modified the issue.
      - `email` string: The email address of the user who last modified the issue.
      - `initials` string: The initials of the user who last modified the issue.
    - `lastModifiedBy` EntityBasicUserInformation
      - `id` string, uuid: The unique identifier of the user who last modified the issue.
      - `name` string: The name of the user who last modified the issue.
      - `email` string: The email address of the user who last modified the issue.
      - `initials` string: The initials of the user who last modified the issue.
  - `attributes` object: The details of the associated attributes.

## Other responses

- `400`: Missing required attributes
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/tech-risk-compliance-issues-management.md) - [All operations](https://skmtc.dev/onetrust/apis/tech-risk-compliance-issues-management/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/tech-risk-compliance-issues-management/revisions/99b36925f377?raw)
