---
title: "Link Controls"
method: POST
path: "/api/controls/v1/links/bulk"
tags: ["Control Links"]
---

# Link Controls

`POST /api/controls/v1/links/bulk`

## Request

- Base URL: `https://hostname`
- URL: `https://hostname/api/controls/v1/links/bulk`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `CONTROL`

Use this API to link an existing control to one or multiple related controls in the Controls Library.

## Request body

- TechRiskComplianceITRiskManagementControlBulkLinkCreateRequest
  - `source` TechRiskComplianceITRiskManagementLinkableEntity, required
    - `id` string, uuid, required: Linkable Entity Identifier
    - `type` string: Linkable Entity Type
    - `name` string: Linkable Entity Name
    - `orgGroupId` string, uuid: Linkable Entity Organization Group Identifier
  - `destinations` TechRiskComplianceITRiskManagementLinkableEntity[], required: Destination linkable(s). At least one destination should be provided
    - `id` string, uuid, required: Linkable Entity Identifier
    - `type` string: Linkable Entity Type
    - `name` string: Linkable Entity Name
    - `orgGroupId` string, uuid: Linkable Entity Organization Group Identifier
  - `linkTypeNameKey` string, required: Specifies the relationship type key
  - `parameters` object: Custom Parameters for domain specific processing

## Response `201`

Created

- TechRiskComplianceITRiskManagementLinkInformation[]
  - `id` string, uuid: Link Information Identifier
  - `sourceId` string, uuid: Link Information Source Identifier
  - `sourceType` string: Link Information Source Type
  - `destinationId` string, uuid: Link Information Destination Identifier
  - `destinationType` string: Link Information Destination Type
  - `destinationName` string: Link Information Destination Name
  - `destinationOrgGroupId` string, uuid: Link Information Destination Organization Group Identifier
  - `linkType` TechRiskComplianceITRiskManagementLinkTypeInformation
    - `id` string, uuid: Link Type Information Identifier
    - `name` string: Link Type Information Name
    - `nameKey` string: Link Type Information Name Key used for translation

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management.md) - [All operations](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management/revisions/d0bfd2a3c53e?raw)