Create verified contact delegation

POST https://www.digicert.com/services/v2/user/delegation

Use this endpoint to request a verified contact’s authorization for a CertCentral user to approve certificate orders on the verified contact’s behalf.

The authenticated user must be an administrator or manager with the Delegate Verified Contacts permission. Both the user receiving authority and the verified contact must belong to the authenticated user’s account.

If the authenticated user is the selected verified contact, the delegation is immediately approved. Otherwise, the API emails the verified contact an approval link and creates a pending delegation. The contact can approve or reject the request through that link, which expires seven days after the most recent email was sent. Once a delegation to an API-only service user is approved, qualifying orders submitted through the API are approved automatically on the verified contact’s behalf.

The API groups verified-contact records that have the same normalized first name, last name, and email address. One request can therefore create multiple delegation records for the same contact identity. A duplicate delegation for the same user and verified contact is rejected.

Example request and response

curl -X POST \
  'https://www.digicert.com/services/v2/user/delegation' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
  -d '{
    "user_id": 123456,
    "delegated_verified_contact_id": 456789
  }'

200 OK

{
  "status": "pending"
}
{
  "status": "approved"
}

Request parameters

NameReq/OptTypeDescription
user_idrequiredintID of the CertCentral user receiving delegated approval authority. The user must belong to the authenticated user’s account.
delegated_verified_contact_idrequiredintID of the verified contact granting authority. Retrieve an eligible ID from the List verified contacts that can delegate endpoint. The contact must belong to the authenticated user’s account.

Response parameters

NameTypeDescription
statusstringpending if the verified contact must approve the emailed request.
approved if the authenticated user is the selected verified contact.