---
title: "Update risk configuration."
method: PATCH
path: "/api/v1/accounts/{accountId}/riskassessment/updateconfiguration"
---

# Update risk configuration.

`PATCH /api/v1/accounts/{accountId}/riskassessment/updateconfiguration`

## Request

- Base URL: `https://api.usa.cloud.watchguard.com/rest/aether-endpoint-security/aether-mgmt`
- URL: `https://api.usa.cloud.watchguard.com/rest/aether-endpoint-security/aether-mgmt/api/v1/accounts/{accountId}/riskassessment/updateconfiguration`
- Auth: API key in header `WatchGuard-API-Key` and HTTP bearer
- TypeScript: <https://skmtc.dev/watchguard/apis/aether-endpoint-security-api/docs/api/v1/accounts/:accountId/riskassessment/updateconfiguration/patch.ts> (a function with typed inputs; its response is checked against the schema)

Modifies the risk configuration.

## Path parameters

- `accountId` string, required

## Request body

- RiskAssessmentConfigurationUpdateInput
  - `risk_settings_list` RiskSettingsListInputConfiguration
    - `factor` 10 | 20 | 30 | 40 | 50 | 60 | 70 | 80 | 90 | 100 | 110 | 120 | 130 | 140 | 150 | 160 | 170 | 180: Risk type. - 10: Protection with error - 20: Outdated protection - 30: Outdated knowledge - 40: Knowledge communication status - 50: Uninstallation without protection - 60: Anti tampering disabled - 70: Antivirus disabled - 80: Audit working mode - 90: Hardening working mode - 100: Audit working mode for linux - 110: AntiExploits audit working mode - 120: Detect phishing disabled - 130: Web antivirus disabled - 140: Antivirus exclusions - 150: Indicators of attack - 160: Pending critical patches - 170: Audit mode enabled - 180: Network attack protection disabled or in 'Audit' mode
    - `enable` boolean: Indicates whether the risk is enabled for detection in the settings.
    - `severity` integer: Risk level. - 0: Undefined - 20: Medium risk - 30: High risk - 40: Critical risk - 50: Based on indicators of attack risks
    - `edited_by_user` boolean: Indicates whether the risk level is the recommended value or it was modified by you. This value has no effect, but you must include it.
    - `supported` boolean: Indicates whether the risk is compatible with the type of product assigned to the account. This value has no effect, but you must include it.
    - `threshold` boolean: This value has no effect for all risks, except for these risks: 150 — Number of days that the solution checks for IOAs. The default value is 30 days. This value is not shown in the management UI. 160 — Maximum number of days that can pass before a published patch must be applied. After that period, the risk is detected

## Response `200`

OK

- RiskAssessmentConfigurationUpdateOutput
  - `processed_ok` boolean: Indicates whether the configuration update is ok. Otherwise, the update could not be performed.

## Other responses

- `400`: BAD REQUEST.
- `403`: ACCESS DENIED.
- `404`: NOT FOUND.
- `405`: METHOD NOT ALLOWED.
- `500`: INTERNAL ERROR.

---

[API](https://skmtc.dev/watchguard/apis/aether-endpoint-security-api.md) - [All operations](https://skmtc.dev/watchguard/apis/aether-endpoint-security-api/llms.txt) - [OpenAPI document](https://skmtc.dev/watchguard/apis/aether-endpoint-security-api/revisions/1376eee70d39?raw)