Set Member Model Access

restriction is required. INHERIT uses the enterprise model catalog and ignores modelNames. ALLOWLIST replaces the list using public model names, not internal IDs; an empty list allows no models.

Authentication

MANAGEMENT key with tenant:policies:write.

Authorization: Bearer <CONTROL_KEY>

Any subAccountId must belong to the authenticated enterprise. hash is a metadata identifier, never a raw key.

Approval and retries

Approval-enabled enterprises require Idempotency-Key and may receive HTTP 409 / APPROVAL_REQUIRED with data.operation.executed=false. Nothing has executed at that point. Other enterprises execute directly; do not assume arbitrary POST requests support idempotent retries.

Approval and retry guide

Path parameters

subAccountIdstringrequired

10-digit public member ID / 10 位成员编号

Request body

restrictionstringrequired

INHERIT | ALLOWLIST

modelNamesstring[]

Public model names; replaces allowlist / 公开模型名称，替换白名单

Fields use camelCase. Required and optional fields are described above.

JSON

1{
2  "restriction": "INHERIT",
3  "modelNames": []
4}

Response

HTTP 200; code: 200. Values below are illustrative; fields use camelCase.

codeinteger

200

dataobject | null

data.restrictionstring

data.modelsarray

Errors

Check both HTTP status and code; on failure inspect serviceCode, msg and traceId. Invalid credentials receive no data; missing scopes return API_KEY_SCOPE_DENIED. Cross-tenant resources are inaccessible. Acceptance or pending approval does not mean business completion.