---
title: "Grant config object access"
method: POST
path: "/v1/config-objects/{configObjectId}/access"
tags: ["Config Objects"]
---

# Grant config object access

`POST /v1/config-objects/{configObjectId}/access`

Creates or reactivates one access grant for a config object.

## Path parameters

- `configObjectId` string, typeid, required

## Request body

- object
  - `orgMembershipId` string, typeid — Den TypeID with 'om_' prefix and a 26-character base32 suffix.
  - `teamId` string, typeid — Den TypeID with 'tem_' prefix and a 26-character base32 suffix.
  - `orgWide` boolean
  - `role` 'viewer' | 'editor' | 'manager', required

## Response `201`

Config object access grant created successfully.

- PluginArchAccessGrantMutationResponse
  - `ok` true, required
  - `item` PluginArchAccessGrant, required
    - `id` union, required
      - string, typeid — Den TypeID with 'coa_' prefix and a 26-character base32 suffix.
      - string, typeid — Den TypeID with 'pag_' prefix and a 26-character base32 suffix.
      - string, typeid — Den TypeID with 'mag_' prefix and a 26-character base32 suffix.
      - string, typeid — Den TypeID with 'cia_' prefix and a 26-character base32 suffix.
    - `orgMembershipId` string, typeid, nullable, required — Den TypeID with 'om_' prefix and a 26-character base32 suffix.
    - `teamId` string, typeid, nullable, required — Den TypeID with 'tem_' prefix and a 26-character base32 suffix.
    - `orgWide` boolean, required
    - `role` 'viewer' | 'editor' | 'manager', required
    - `createdByOrgMembershipId` string, typeid, required — Den TypeID with 'om_' prefix and a 26-character base32 suffix.
    - `createdAt` string, date-time, required
    - `removedAt` string, date-time, nullable, required

## Other responses

- `400` — The access grant request was invalid.
- `401` — The caller must be signed in to manage config object access.
- `403` — The caller lacks permission to manage config object access.
- `404` — The config object could not be found.

## Changes

- **2026-08-20** `93df40e2efd5` — 8 info
  - removed the pattern `^cob_.*` from the `path` request parameter `configObjectId`
  - removed the pattern `^om_.*` from the request property `orgMembershipId`
  - removed the pattern `^tem_.*` from the request property `teamId`
  - added `subschema #1, subschema #2, subschema #3, subschema #4` to the `item/id` response property `anyOf` list for the response status `201`
  - …4 more

[Change history](https://skmtc.dev/openworklabs/apis/den-api/changes/v1/config-objects/:configObjectId/access/post.md)

---

[API](https://skmtc.dev/openworklabs/apis/den-api.md) · [All operations](https://skmtc.dev/openworklabs/apis/den-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/openworklabs/den-api/revisions/fcbb34aa1702/schema)