🎯API Stability
Long-TermThis API is stable and will remain supported across versions with minimal breaking changes.

Summary

The updateActionSecurityPolicies() mutation sets which action types are permitted across your organization. The mutation enables or disables email, webhook, messaging, and other action categories in bulk. It controls the organization-wide policy; individual repositories inherit these settings.

Syntax

graphql
updateActionSecurityPolicies(
      input: ActionSecurityPoliciesInput!
   ): Organization!

The input argument is required. It accepts an ActionSecurityPoliciesInput object that specifies which action types to enable or disable. Set each policy field to true to permit that action type. The mutation returns the full Organization! object, so you can confirm the updated policy state in a single call.

The returned Organization object includes the permitted action types, creation and modification timestamps, and other organization-level fields.

Example

Raw
graphql
mutation {
  updateActionSecurityPolicies( input:
    {
      emailActionEnabled: true,
      repoActionEnabled: false,
      opsGenieActionEnabled: false,
      pagerDutyActionEnabled: false,
      slackSingleChannelActionEnabled: true,
      slackMultiChannelActionEnabled: false,
      uploadFileActionEnabled: false,
      victorOpsActionEnabled: false,
      webhookActionEnabled: true
    }
  )
  { id }
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  updateActionSecurityPolicies( input:
    {
      emailActionEnabled: true,
      repoActionEnabled: false,
      opsGenieActionEnabled: false,
      pagerDutyActionEnabled: false,
      slackSingleChannelActionEnabled: true,
      slackMultiChannelActionEnabled: false,
      uploadFileActionEnabled: false,
      victorOpsActionEnabled: false,
      webhookActionEnabled: true
    }
  )
  { id }
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  updateActionSecurityPolicies( input:
    {
      emailActionEnabled: true,
      repoActionEnabled: false,
      opsGenieActionEnabled: false,
      pagerDutyActionEnabled: false,
      slackSingleChannelActionEnabled: true,
      slackMultiChannelActionEnabled: false,
      uploadFileActionEnabled: false,
      victorOpsActionEnabled: false,
      webhookActionEnabled: true
    }
  )
  { id }
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "mutation { ^
  updateActionSecurityPolicies( input: ^
    { ^
      emailActionEnabled: true, ^
      repoActionEnabled: false, ^
      opsGenieActionEnabled: false, ^
      pagerDutyActionEnabled: false, ^
      slackSingleChannelActionEnabled: true, ^
      slackMultiChannelActionEnabled: false, ^
      uploadFileActionEnabled: false, ^
      victorOpsActionEnabled: false, ^
      webhookActionEnabled: true ^
    } ^
  ) ^
  { id } ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "mutation {
  updateActionSecurityPolicies( input:
    {
      emailActionEnabled: true,
      repoActionEnabled: false,
      opsGenieActionEnabled: false,
      pagerDutyActionEnabled: false,
      slackSingleChannelActionEnabled: true,
      slackMultiChannelActionEnabled: false,
      uploadFileActionEnabled: false,
      victorOpsActionEnabled: false,
      webhookActionEnabled: true
    }
  )
  { id }
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "mutation {
  updateActionSecurityPolicies( input:
    {
      emailActionEnabled: true,
      repoActionEnabled: false,
      opsGenieActionEnabled: false,
      pagerDutyActionEnabled: false,
      slackSingleChannelActionEnabled: true,
      slackMultiChannelActionEnabled: false,
      uploadFileActionEnabled: false,
      victorOpsActionEnabled: false,
      webhookActionEnabled: true
    }
  )
  { id }
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "mutation {
  updateActionSecurityPolicies( input:
    {
      emailActionEnabled: true,
      repoActionEnabled: false,
      opsGenieActionEnabled: false,
      pagerDutyActionEnabled: false,
      slackSingleChannelActionEnabled: true,
      slackMultiChannelActionEnabled: false,
      uploadFileActionEnabled: false,
      victorOpsActionEnabled: false,
      webhookActionEnabled: true
    }
  )
  { id }
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "mutation {
  updateActionSecurityPolicies( input:
    {
      emailActionEnabled: true,
      repoActionEnabled: false,
      opsGenieActionEnabled: false,
      pagerDutyActionEnabled: false,
      slackSingleChannelActionEnabled: true,
      slackMultiChannelActionEnabled: false,
      uploadFileActionEnabled: false,
      victorOpsActionEnabled: false,
      webhookActionEnabled: true
    }
  )
  { id }
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();
Example Responses
Success (HTTP Response Code 200 OK)
json
{
  "data": {
    "updateActionSecurityPolicies": {
      "id": "SINGLE_ORGANIZATION_ID"
    }
  }
}

Input parameters

The input argument accepts an ActionSecurityPoliciesInput object. Each field in the input corresponds to an action type your organization can permit. Set a field to true to enable that action type organization-wide.

Table: ActionSecurityPoliciesInput Input Datatype

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
emailActionEnabledBooleanyes Long-Term Whether email actions should be enabled.
emailActionRecipientAllowListStringyes Long-Term Allow list of glob patterns restricting which recipient can be set on email actions. For example, *@organization.com. Empty list means no recipients allowed whereas not setting it means all allowed.
gcsActionEnabledBooleanyes  added in 1.259Whether GCS actions should be enabled
opsGenieActionEnabledBooleanyes Long-Term Whether OpsGenie actions should be enabled.
pagerDutyActionEnabledBooleanyes Long-Term Whether PagerDuty actions should be enabled.
repoActionEnabledBooleanyes Long-Term Whether repository actions should be enabled.
s3ActionEnabledBooleanyes   Whether S3 actions should be enabled
slackMultiChannelActionEnabledBooleanyes Long-Term Whether multi channel Slack actions should be enabled.
slackSingleChannelActionEnabledBooleanyes Long-Term Whether single channel Slack actions should be enabled.
uploadFileActionEnabledBooleanyes Long-Term Whether upload file actions should be enabled.
victorOpsActionEnabledBooleanyes Long-Term Whether VictorOps actions should be enabled.
webhookActionEnabledBooleanyes Long-Term Whether webhook actions should be enabled.
webhookActionUrlAllowListStringyes Long-Term Allow list of glob patterns restricting which URL can be set on webhook actions. For example, *.organization.com. Empty means no recipients allowed whereas null means all.

Returned values

The mutation returns an Organization! object. This non-nullable return means you can confirm the updated security policies immediately. The object includes permitted action types, organization configuration details, and modification metadata.

Table: Organization Datatype

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
actionOrganizationAction):Booleanyes Short-Term The action to check if a user is allowed to perform on an organization.
cidString  Short-Term The CID corresponding to the organization.
configsOrganizationConfigsyes Short-Term Organization configurations and settings. See OrganizationDetails.
createdAtLong  Short-Term Date organization was created.
defaultCachePolicyCachePolicy  Short-Term The default cache policy of the organization. See CachePolicy. This is a preview and subject to change.
deletedAtLong  Short-Term Day organization was deleted if it was marked for deletion.
descriptionString  Short-Term The description for the Organization. Can be null.
detailsOrganizationDetailsyes Short-Term Any additional details related to the organization. See OrganizationDetails.
externalGroupSynchronizationBooleanyes Short-Term Whether there is group synchronization.
externalPermissionsBooleanyes Short-Term Whether permissions are managed externally.
idStringyes Short-Term The unique id for the Organization.
ingestUrlString  Short-Term The ingest URL for the organization.
limitsLimityes Short-Term Limits assigned to the organization. See Limit.
limitsV2LimitV2yes Short-Term Limits assigned to the organization. See LimitV2.
nameStringyes Short-Term The name for the Organization.
publicUrlString  Short-Term The public URL for the organization.
readonlyDashboardIPFilterString  Short-Term IP filter for readonly dashboard links.
searchDomainsSearchDomainyes Short-Term Search domains within the organization. See SearchDomain.
statsOrganizationStatsyes Short-Term Statistics of the organization. See OrganizationStats.
trialStartedAtLong  Short-Term Date organization's trial started.