---
title: "Update JIT request status"
url: https://hexelstudio.com/docs/api/ciam-iam/jit/status
---

# Update JIT request status

**PATCH** `/jit/{request_id}/status`

Allowed changes: PENDING to APPROVED or REJECTED, APPROVED to ACTIVE, REVOKED or EXPIRED, ACTIVE to REVOKED or EXPIRED; any other change answers 409.
Approving or rejecting needs iam:jit:approve and is never allowed on the caller's own request. Activating or revoking needs iam:jit:approve, or iam:jit:write for the requester's own request. Expiring needs iam:jit:approve.
Activation sets expires_at to now plus duration_minutes. The actor is the caller.

## Path parameters

- `request_id: string`

  Request ID

## Headers

- `Authorization: string`

  `Bearer <token>`.

## Returns

`200` OK (`map[string]`)

## Errors

- `400` Bad Request
- `403` Forbidden
- `404` Not Found
- `409` Conflict

## Example

```bash
curl --request PATCH \
  --url 'https://api.hexelstudio.com/v1/jit/{request_id}/status' \
  --header "Authorization: Bearer $ACCESS_TOKEN"
```

### Response (200)

```json
{
  "key": "string"
}
```

### Response (400)

```json
{
  "key": "string"
}
```

### Response (403)

```json
{
  "key": "string"
}
```

### Response (404)

```json
{
  "key": "string"
}
```

### Response (409)

```json
{
  "key": "string"
}
```