Updates the partial audit access permissions for a journey application and all associated evaluations, entities, and resources. This endpoint allows child customers in an Embedded Finance setup to grant partial audit access to parent organizations.
Partial audit access enables parent organizations to view specific journey applications and their related data without having full access to all data in the child account. This is useful for compliance, monitoring, and oversight purposes while maintaining appropriate data boundaries between organizations.
Important Notes:
-
This endpoint can only be called by child customers in an Embedded Finance relationship.
-
Only parent organizations with
partial_auditaccess type can be granted access via this endpoint. -
The request must include the
alloy-audit-account-slugsheader with comma-separated organization slugs. -
Access is managed at multiple levels including:
- Journey Application
- All evaluations within the application
- All entities associated with the evaluations
- Related resources (e.g., bank accounts for transaction evaluations)
-
Previously granted access can be revoked by omitting the organization slug from subsequent requests.