# Delegated Access

Manage delegated access, which allows a user to perform actions on behalf of another user. These APIs allow logged-in users to request consent from other app users, grant consent requests, view all consents related to their account, and revoke any granted permissions.<br><br>To request delegated access, see [OAuth2.0 Token](/openapi/user/oidc.openapi/other/oidctoken).<br>To create a dependent user with delegated access, see [Create users](/openapi/user/user.openapi/other/createuser#other/createuser/t=request&path=delegated_access)


## Servers

Sandbox environment
```
https://api.sbx.transmitsecurity.io/cis
```

US production environment
```
https://api.transmitsecurity.io/cis
```

EU production environment
```
https://api.eu.transmitsecurity.io/cis
```

CA production environment
```
https://api.ca.transmitsecurity.io/cis
```

AU production environment
```
https://api.au.transmitsecurity.io/cis
```

JP production environment
```
https://api.gasne1-ts01.transmitsecurity.io/cis
```

## Security

### bearer

Type: http
Scheme: bearer
Bearer Format: JWT

### UserAccessToken

A token returned upon end-user authentication, which provides access to resources and data for the user and app for which it was generated

Type: http
Scheme: bearer
Bearer Format: JWT

### AdminAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### ClientAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### OrgAdminAccessToken

A token returned upon B2B authentication for a user that has the organizationAdmin or organizationCreator role.

Type: oauth2
Token URL: /oidc/token
Scopes:

## Download OpenAPI description

 - [Delegated Access](https://developer.transmitsecurity.com/_bundle/openapi/user/delegated-access.openapi.yaml)

 - [POST /v1/delegated-access/consents/me/grant](https://developer.transmitsecurity.com/openapi/user/delegated-access.openapi/other/grantconsent.md): Grant the requested consent once it's approved by the user. This will provide the requesting user (the actor) permissions to act on behalf of the user that approved the consent (the subject). Since th
 - [POST /v1/delegated-access/consents/me/request](https://developer.transmitsecurity.com/openapi/user/delegated-access.openapi/other/requestconsent.md): Send a consent request to give the requesting user (the actor) permissions to act on behalf of another user (the subject) when needed. An email will be sent to the subject with a link to your consent
 - [GET /v1/delegated-access/consents/me](https://developer.transmitsecurity.com/openapi/user/delegated-access.openapi/other/getuserconsents.md): Get all the consents that were granted or requested by the specified user. This call is authorized by a user access token of this user.
 - [DELETE /v1/delegated-access/consents/me/permissions/actor](https://developer.transmitsecurity.com/openapi/user/delegated-access.openapi/other/removesubjectpermissionsofloggedinactor.md): Revokes my permissions (the actor) to act on behalf of another user (the subject). This call is initiated by the actor who is logged-in, so it's authorized using a user access token.
 - [DELETE /v1/delegated-access/consents/me/permissions/subject](https://developer.transmitsecurity.com/openapi/user/delegated-access.openapi/other/removeactorpermissionsofloggedinsubject.md): Revokes permissions of another user (the actor) to act on my behalf (the subject). This call is initiated by the subject who is logged-in, so it's authorized using a user access token.