Type to search.

Update a conversation's access control

Base URL
https://{kibana_url}
Auth

Replace a conversation's access mode and member list. Only the conversation owner can call this endpoint; every other caller receives a not-found response. Each call replaces the entire access control — the most recent successful update wins. Members can read and continue the conversation, but still need access to the conversation's agent. To learn more about agent conversations, refer to the agent chat documentation.

Required privileges

Privileges agentBuilder:read

Path parameters

space_id string optional

An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

conversation_id string · max length: 256 required

The unique identifier of the conversation whose access control to update.

Header parameters

kbn-xsrf string required

A required header to protect against CSRF attacks

Request body

access_mode enum required

Access-control mode: private (only the owner and the listed members can read and continue the conversation), public (any user with access to the conversation's agent can read and continue it).

Values: private public
entries object[] · max items: 100 required

Members to share the conversation with. The list replaces the stored one; submit an empty list to unshare. Entries naming the owner are ignored. Must be empty when access_mode is public; repeated ids are rejected.

id string · min length: 1 · max length: 1024 required

Stable identifier of the user to share the conversation with: a Kibana user profile uid. Users without a profile cannot be granted access.

role enum required

Role granted to the principal. member is the only role: it grants read and converse access to the conversation.

Values: member
type enum required
Values: user

Responses

200

Indicates a successful response

application/json
400

Bad Request — the request body failed validation.

application/json
404

Not Found — no conversation with this ID is readable by the caller, or the caller is not its owner. Matches the existing conversationNotFound shape, so members cannot distinguish a conversation they may not re-share from one that does not exist.

application/json