Enable or disable Local Account Password Management
PATCH/config/managed-sids
Merges the request body into the stored setting and saves it.
Only enabled is meaningful. The change is written to the audit log (capability enablement) with the acting user. The body is not schema-validated. Accepts JSON or application/x-www-form-urlencoded bodies. Required role: admin or superadmin.
Request
Responses
- 200
- 400
- 401
- 403
The saved setting.
A non-boolean enabled (for example "maybe") is rejected. The body is an ErrorTyped with name ValidationError, and message says which field failed validation. Send true or false.
No token, or the token is invalid or expired. The body is {message}: No auth token provided when no token is sent, otherwise the token check's message (jwt expired, jwt malformed, invalid signature, invalid token, jwt signature is required). Send Authorization: Bearer <token> exactly: the server drops the first seven characters of the header and reads the rest as the token, so a different scheme or an extra space fails. If Authorization is absent, the server reads a token field in the body, then a token query parameter, then x-access-token. Routes that validate query fields reject ?token= with 400 InvalidQuery.
The token's role is not allowed for this operation, or the token's scopes exclude the route
(Scope not allowed by token).