Skip to content
Sencai Logo Sencai Logo Sencai Docs

Create a elevation-request

POST
/elevation-requests

Authorizations

Section titled “Authorizations ”

Request Body required

Section titled “Request Body required ”
object
data
object
requesting_user
One of:

DocumentId reference to plugin::users-permissions.user

string
requesting_org
One of:

DocumentId reference to api::organisation.organisation

string
target_org
One of:

DocumentId reference to api::organisation.organisation

string
requested_capabilities
required

List of capability names being requested

justification
required
string
duration_minutes
required
integer
status
required
string
Allowed values: pending approved denied expired revoked
approver
One of:

DocumentId reference to plugin::users-permissions.user

string
approved_at
string format: date-time
auto_expire_at
string format: date-time
denial_reason
string
used

Single-use guard — true once the grant has been consumed (JIT)

boolean
used_at

Timestamp when the grant was consumed (single-use)

string format: date-time
relationship
One of:

DocumentId reference to api::organisation-relationship.organisation-relationship

string
home_region
required

Logical data-residency region of the tenant (CELL invariant, F2.CELL.01)

string
Allowed values: eu us apac
cell_id

Deployment cell within home_region for blast-radius isolation (CELL invariant, F2.CELL.01)

string

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Created

object
data
object
requesting_user
One of:

DocumentId reference to plugin::users-permissions.user

string
requesting_org
One of:

DocumentId reference to api::organisation.organisation

string
target_org
One of:

DocumentId reference to api::organisation.organisation

string
requested_capabilities
required

List of capability names being requested

justification
required
string
duration_minutes
required
integer
status
required
string
Allowed values: pending approved denied expired revoked
approver
One of:

DocumentId reference to plugin::users-permissions.user

string
approved_at
string format: date-time
auto_expire_at
string format: date-time
denial_reason
string
used

Single-use guard — true once the grant has been consumed (JIT)

boolean
used_at

Timestamp when the grant was consumed (single-use)

string format: date-time
relationship
One of:

DocumentId reference to api::organisation-relationship.organisation-relationship

string
home_region
required

Logical data-residency region of the tenant (CELL invariant, F2.CELL.01)

string
Allowed values: eu us apac
cell_id

Deployment cell within home_region for blast-radius isolation (CELL invariant, F2.CELL.01)

string
documentId
string
id
integer
createdAt
string format: date-time
updatedAt
string format: date-time
publishedAt
string format: date-time
nullable

400

Section titled “400 ”

Validation error

401

Section titled “401 ”

Missing or invalid authentication

403

Section titled “403 ”

Not authorized (tenant scope or capability)