---
title: "Create verified contact delegation"
source_url: https://dev.digicert.com/certcentral-apis/services-api/users/create-verified-contact-delegation.html
api_method: POST
api_endpoint: "/services/v2/user/delegation"
api_url: "https://www.digicert.com/services/v2/user/delegation"
---

**POST** `https://www.digicert.com/services/v2/user/delegation`

Use this endpoint to request a verified contact’s authorization for a CertCentral user to approve certificate orders on the verified contact’s behalf. 


> **Info**
>
> The authenticated user must be an administrator or manager with the **Delegate Verified Contacts** permission. Both the user receiving authority and the verified contact must belong to the authenticated user’s account.
>
> If the authenticated user is the selected verified contact, the delegation is immediately approved. Otherwise, the API emails the verified contact an approval link and creates a pending delegation. The contact can approve or reject the request through that link, which expires seven days after the most recent email was sent. Once a delegation to an API-only service user is approved, qualifying orders submitted through the API are approved automatically on the verified contact’s behalf.
>
> The API groups verified-contact records that have the same normalized first name, last name, and email address. One request can therefore create multiple delegation records for the same contact identity. A duplicate delegation for the same user and verified contact is rejected.


## Example request and response

```bash
curl -X POST \
  'https://www.digicert.com/services/v2/user/delegation' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
  -d '{
    "user_id": 123456,
    "delegated_verified_contact_id": 456789
  }'
```
## 200 OK

**Approval required**

```bash
{
  "status": "pending"
}
```

**Authenticated user is the verified contact**

```bash
{
  "status": "approved"
}
```

## Request parameters

<table class="params-table">
<thead>
<tr><th>Name</th><th>Req/Opt</th><th>Type</th><th>Description</th></tr>
</thead>
<tbody>
<tr><td>user_id</td><td>required</td><td>int</td><td>ID of the CertCentral user receiving delegated approval authority. The user must belong to the authenticated user’s account.</td></tr>
<tr><td>delegated_verified_contact_id</td><td>required</td><td>int</td><td>ID of the verified contact granting authority. Retrieve an eligible ID from the <a href="https://dev.digicert.com/md/certcentral-apis/services-api/users/list-verified-contacts-that-can-delegate.md">List verified contacts that can delegate</a> endpoint. The contact must belong to the authenticated user’s account.</td></tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr><th>Name</th><th>Type</th><th>Description</th></tr>
</thead>
<tbody>
<tr><td>status</td><td>string</td><td><code>pending</code> if the verified contact must approve the emailed request. 
<br> <code>approved</code> if the authenticated user is the selected verified contact.</td></tr>
</tbody>
</table>