Skip to main content
PATCH
Update enterprise security profile settings
Updates the enterprise default security-profile selection and returns the resulting settings.

Permissions

Requires a service user or personal access token with the ManageAccountSecureModeProfiles permission at the enterprise level. Only available on enterprise accounts.

Behavior

  • Omitted fields are left unchanged. null is rejected; to clear the default, send {"default": {"selection": "none"}}.
  • profile_id is required when selection is profile and must be omitted otherwise. Only enterprise-owned profiles can be pinned.
  • A mandatory enterprise default is a floor: organizations, automations, and sessions can only narrow it. See mandatory vs. recommended enforcement.
  • Running sessions pick up the change the next time they boot or wake.

Authorizations

Authorization
string
header
required

Service User credential (prefix: cog_)

Body

application/json

PATCH semantics: omitted fields are left unchanged.

default
EnterpriseSecurityProfileDefaultSelection · object | null

A two-state default: none (no default profile) or profile (pin profile_id). There is no inherit at the enterprise level — nothing sits above the enterprise to inherit from.

Response

Successful Response

default
EnterpriseSecurityProfileDefaultState · object
required

Read view of the enterprise default binding.