---
updatedAt: 2026-04-21T13:55:31.000Z
agentTools:
  projectIndex: https://developer.operations1.com/llms.txt
---

# Create access controls for a base document

Create access controls for a base document

# OpenAPI definition

```json
{
  "openapi": "3.1.0",
  "info": {
    "title": "Operations1 REST API",
    "description": "Operations1 REST API documentation",
    "version": "2025-04-21"
  },
  "components": {
    "securitySchemes": {
      "bearerAuth": {
        "type": "http",
        "scheme": "bearer"
      }
    }
  },
  "paths": {
    "/tenants/{tenantId}/base-documents/access-controls": {
      "post": {
        "summary": "Create access controls for a base document",
        "tags": [
          "Base document"
        ],
        "description": "Create access controls for a base document",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "baseDocumentIds"
                ],
                "properties": {
                  "baseDocumentIds": {
                    "type": "array",
                    "items": {
                      "type": "number"
                    }
                  },
                  "userIds": {
                    "type": "array",
                    "items": {
                      "type": "number"
                    }
                  },
                  "groupIds": {
                    "type": "array",
                    "items": {
                      "type": "number"
                    }
                  }
                }
              }
            }
          }
        },
        "parameters": [
          {
            "schema": {
              "type": "string",
              "minLength": 1,
              "maxLength": 100
            },
            "in": "path",
            "name": "tenantId",
            "required": true,
            "description": "Consists of the subdomain. The `tenantId` for `https://company.operations1.app/` is `company`."
          },
          {
            "schema": {
              "anyOf": [
                {
                  "type": "string",
                  "examples": [
                    "2025-04-21",
                    "unstable"
                  ],
                  "format": "date",
                  "description": "Specifies the API version in date format (e.g., \"2024-01-01\"). Allowed values include 2025-04-21"
                },
                {
                  "type": "string",
                  "examples": [
                    "latest"
                  ],
                  "description": "Indicates the most recent stable API version.",
                  "enum": [
                    "latest"
                  ]
                },
                {
                  "type": "string",
                  "examples": [
                    "unstable"
                  ],
                  "description": "Indicates the unstable API version.",
                  "enum": [
                    "unstable"
                  ]
                }
              ]
            },
            "examples": {
              "2025-04-21": {
                "value": "2025-04-21"
              },
              "unstable": {
                "value": "unstable"
              }
            },
            "in": "header",
            "name": "accept-version",
            "required": true,
            "description": "Defines the API version. Using a date is recommended for stability. Avoid using `latest` in production, as it refers to the most up-to-date functionality, which may include breaking changes. For more details, see our article on [versioning](https://developer.operations1.com/reference/versioning)."
          }
        ],
        "responses": {
          "201": {
            "description": "Default Response",
            "content": {
              "application/json": {
                "schema": {
                  "type": "array",
                  "items": {
                    "type": "object",
                    "required": [
                      "id",
                      "name",
                      "displayName",
                      "type",
                      "numberOfUsers",
                      "source",
                      "createdAt"
                    ],
                    "properties": {
                      "id": {
                        "type": "number"
                      },
                      "name": {
                        "type": "string"
                      },
                      "displayName": {
                        "type": "string"
                      },
                      "type": {
                        "enum": [
                          "user",
                          "group"
                        ],
                        "type": "string"
                      },
                      "numberOfUsers": {
                        "type": "number"
                      },
                      "source": {
                        "type": "array",
                        "items": {
                          "enum": [
                            "inherited",
                            "direct",
                            "responsibility"
                          ],
                          "type": "string"
                        }
                      },
                      "createdAt": {
                        "type": "string",
                        "format": "date-time"
                      }
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "servers": [
    {
      "url": "https://api.operations1.app"
    }
  ],
  "security": [
    {
      "bearerAuth": []
    }
  ]
}
```