---
title: "Update Enterprise Portal Security Center display settings."
method: PUT
path: "/app/{app_id}/enterprise-portal/security-settings"
tags: ["enterprisePortal"]
---

# Update Enterprise Portal Security Center display settings.

`PUT /app/{app_id}/enterprise-portal/security-settings`

## Request

- Base URL: `https://api.replicated.com/vendor/v3`
- URL: `https://api.replicated.com/vendor/v3/app/{app_id}/enterprise-portal/security-settings`
- Auth: API key in header `Authorization`

The complete settings object is required. All properties must be JSON booleans.

Required RBAC Policy: kots/app/[:appid]/update

## Path parameters

- `app_id` string, required

## Request body

- object
  - `allowRawScanDownload` boolean, required: Whether Enterprise Portal customers can download raw scan results.
  - `showUnfixableCVEs` boolean, required: Whether Enterprise Portal displays CVEs that do not have a fix.

## Response `200`

EnterprisePortalSecuritySettingsResponse contains an app's Security Center
display settings.

- object
  - `allowRawScanDownload` boolean: Whether Enterprise Portal customers can download raw scan results.
  - `showUnfixableCVEs` boolean: Whether Enterprise Portal displays CVEs that do not have a fix.

## Other responses

- `400`: Returned on bad input
- `401`: Return if the caller is not authorized
- `403`: Returned if the caller does not have the needed permission
- `404`: Returned on resource not found

## Changes

- **2026-11-03** `a36c6aead22f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/replicated/apis/vendor-api-v3-2/changes/app/:app_id/enterprise-portal/security-settings/put.md)

---

[API](https://skmtc.dev/replicated/apis/vendor-api-v3-2.md) - [All operations](https://skmtc.dev/replicated/apis/vendor-api-v3-2/llms.txt) - [OpenAPI document](https://skmtc.dev/replicated/apis/vendor-api-v3-2/revisions/a36c6aead22f?raw)