grants.approve is used to approve a grant. This method can only be called on a grant when it's in the APPROVAL_AWAITED state. This operation can't be undone.
HTTP request
POST https://privilegedaccessmanager.googleapis.com/v1beta/{name=folders/*/locations/*/entitlements/*/grants/*}:approve
Required. Name of the grant resource which is being approved.
Request body
The request body contains data with the following structure:
JSON representation
{"reason": string}
Fields
reason
string
Optional. The reason for approving this grant. This is required if the requireApproverJustification field of the ManualApprovals workflow used in this grant is true.
Response body
If successful, the response body contains an instance of Grant.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-21 UTC."],[[["\u003cp\u003eThis endpoint approves a grant, which can only be done when the grant is in the \u003ccode\u003eAPPROVAL_AWAITED\u003c/code\u003e state, and the action is irreversible.\u003c/p\u003e\n"],["\u003cp\u003eThe HTTP request is a \u003ccode\u003ePOST\u003c/code\u003e method to a specific URL using gRPC Transcoding syntax, with a required \u003ccode\u003ename\u003c/code\u003e path parameter representing the grant to be approved.\u003c/p\u003e\n"],["\u003cp\u003eThe request body requires a JSON object, including an optional \u003ccode\u003ereason\u003c/code\u003e field, which becomes mandatory if the related \u003ccode\u003erequireApproverJustification\u003c/code\u003e workflow is set to true.\u003c/p\u003e\n"],["\u003cp\u003eA successful response to the request will contain an instance of the \u003ccode\u003eGrant\u003c/code\u003e resource.\u003c/p\u003e\n"],["\u003cp\u003eThe required authorization scope for this operation is \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,["# Method: folders.locations.entitlements.grants.approve\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Request body](#body.request_body)\n - [JSON representation](#body.request_body.SCHEMA_REPRESENTATION)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [Examples](#examples)\n- [Try it!](#try-it)\n\n`grants.approve` is used to approve a grant. This method can only be called on a grant when it's in the `APPROVAL_AWAITED` state. This operation can't be undone.\n\n### HTTP request\n\n`POST https://privilegedaccessmanager.googleapis.com/v1beta/{name=folders/*/locations/*/entitlements/*/grants/*}:approve`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Path parameters\n\n### Request body\n\nThe request body contains data with the following structure:\n\n### Response body\n\nIf successful, the response body contains an instance of [Grant](/iam/docs/reference/pam/rest/v1beta/folders.locations.entitlements.grants#Grant).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](https://cloud.google.com/docs/authentication/)."]]
