Propagate template changes to user copies

Pushes selected fields from the template to every user that holds a copy. Use dry_run: true to preview the impact. By default, accumulated usage is preserved.

POST /api/governance/access-profiles/{profile_id}/propagate

Error

A valid request URL is required to generate request examples

200

{
  "affected_users": 123,
  "failed_users": 123,
  "skipped_users": 123,
  "user_ids": [
    "<string>"
  ],
  "fields": [
    "<string>"
  ],
  "applied": true,
  "vk_sync_errors": [
    "<string>"
  ]
}

This endpoint is available in Bifrost Enterprise only.

Authorizations

ManagementBearerAuthBasicAuth

Authorization · string · header · required

Management API authentication for /api/* endpoints. Use the Authorization header with Bearer <token>, where <token> is one of:

• a Bifrost management API key,
• a dashboard session token issued by POST /api/session/login,
• base64 of <admin-username>:<admin-password> (legacy equivalent of BasicAuth).

Virtual keys (sk-bf-*) and the x-api-key header are not accepted on management APIs - the sole exception is GET /api/governance/virtual-keys/quota, which is virtual-key-only.

Path Parameters

profile_id · integer · required

Body

application/json

fields · enum<string>[] · required

Minimum array length: 1

Available options: provider_configs, budgets, rate_limit, mcp_tool_groups, mcp_servers, mcp_tool_overrides

dry_run · boolean

user_ids · string[]

Empty or omitted = all users with a copy of this profile.

group_ids · string[]

Filter by SCIM group or team IDs.

reset_usage · boolean

If true, zero out budget and rate-limit usage on cloned rows. Default false (preserves usage).

Response

200

application/json

Propagation result.

affected_users · integer

failed_users · integer

skipped_users · integer

user_ids · string[]

fields · string[]

applied · boolean

False on dry run, true when changes were persisted.

vk_sync_errors · string[]