Configure a locker using API

Use a combination of endpoints to create a locker and assign locker access permissions to users.

1. Add the authentication token to the request header.
2. Use the POST method and endpoint URL:<your_control_room_url>/v2/credentialvault/lockers to create the locker.
   Request body:

   {
     "name": "HumanResourcesCredentials",
     "description": "Login credentials for the HR dept"
   }

3. Send the request.
   Response body: In a successful request, this endpoint returns the id, which is a unique numeric identifier for the locker. Use the locker ID in subsequent API requests, such as to add consumers or credentials to the locker.

   {
       "id": "1551",
       "name": "HumanResourcesCredentials",
       "description": "Login credentials for the HR dept",
       "createdBy": "1508",
       "createdOn": "2020-12-28T22:24:40.462253Z",
       "updatedBy": "1508",
       "updatedOn": "2020-12-28T22:24:40.462259Z",
       "version": "0"
   }

   The REST API responds to each request with an HTTP response code. For response codes, see API response codes.

Assign locker access permissions to users. Locker permissions

4. Optional: Assign another locker owner. Use the PUT method and endpoint URL:<your_control_room_url>/v2/credentialvault/lockers/{lockerId}/members/{userId}.
   Note: The locker creator is automatically assigned the locker owner permission.

   Request body:

   {
     "permissions": [
       "own"
     ]
   }

5. Send the request.
   Response body: This endpoint does not return data.
6. Optional: Assign a locker manager. Use the PUT method and endpoint URL:<your_control_room_url>/v2/credentialvault/lockers/{lockerId}/members/{userId}.
   Request body:

   {
     "permissions": [
       "manage"
     ]
   }

7. Send the request.
   Response body: This endpoint does not return data.
8. Optional: Assign a locker participant. Use the PUT method and endpoint URL:<your_control_room_url>/v2/credentialvault/lockers/{lockerId}/members/{userId}.
   Request body:

   {
     "permissions": [
       "participate"
     ]
   }

9. Send the request.
   Response body: This endpoint does not return data.
10. Assign locker consumers. Use the POST method and endpoint URL:: <your_control_room_url>/v2/credentialvault/lockers/{lockerId}/consumers
    Request body: Provide the role ID. All users who are assigned that custom role can build and run bots using the credentials in this locker, as well as enter values into credentials that accept user-provided attribute values.

    {
        "id":"516"
    }

11. Send the request.
    Response body: This endpoint does not return data.