Company logoHelp Center
Visit www.threatlocker.com

/portalAPI/ApprovalRequest/*

3 min. readlast update: 02.04.2025

This article will encompass all portalAPI calls that are related to /portalAPI/ApprovalRequest/* endpoints

 

Be sure to input the instance your organization exists on for each call. This is indicated with the "INSTANCE" text in each endpoint. Linked here is a KB to find your instance: 

Locating Your Organization's Instance | ThreatLocker Help Center

 

For more information on use cases and examples of processing Application Control Approval Requests through API, see this KB article:

Processing Application Control Approval Requests through API | ThreatLocker Help Center

 

ApprovalRequestGetFileDownloadDetailsById

https://portalapi.INSTANCE.threatlocker.com/portalapi/ApprovalRequest/ApprovalRequestGetFileDownloadDetailsById

  • Method: GET
  • Description: This API is used to get the file download details for a requested file when clicking on an Application Control Approval Request in the Response Center of the ThreatLocker Portal. This API returns the filename and the fileUrl which can be used to download the file directly. Be sure to get the full file name in the URL when using this API to download the file. If looking to get the file download details from an approval request in a different organization than the currently logged in/managed organization, utilize the managedOrganizationId header as described below.
  • Required Body/Parameters
    • Valid APIKey/Authorization Token in header
    • approvalRequestId: This field determines what file information will be returned based on what was requested in the supplied approval request.
      • Expects: <GUID> in format "00000000-0000-0000-0000-000000000000"
  • Optional Body/Parameters
    • In header: "managedOrganizationId": <GUID> in format "00000000-0000-0000-0000-000000000000"
  • Permissions Needed for User
    • Approve for Entire Organization
    • Approve for Group
    • Approve for Single Computer
    • Approve for Single Computer Application Only
    • View Approvals

 

ApprovalRequestGetPermitApplicationById

https://portalapi.INSTANCE.threatlocker.com/portalapi/ApprovalRequest/ApprovalRequestGetPermitApplicationById

  • Method: GET
  • Description: This API is used when clicking on an Application Control Approval Request in the Response Center of the ThreatLocker Portal. This API gets all the information related to the request itself, including all the id values and the formatted json field needed to utilize the ApprovalRequestPermitApplication endpoint. If looking to view an approval request from a different organization than the currently logged in/managed organization, utilize the managedOrganizationId header as described below.
    • statusId: This is one of the fields returned by this API and is used to determine the status of the request. Listed below are the Integer values that will be displayed and the corresponding status of each value.
      • Pending = 1
      • Ignored = 10
      • Approved = 4
      • Self-Approved = 16
      • Not Learned = 6
      • Added to Application = 12
      • Escalated from the Cyber Heroes = 13
  • Required Body/Parameters
    • Valid APIKey/Authorization Token in header
    • approvalRequestId: <GUID> in format "00000000-0000-0000-0000-000000000000"
  • Optional Body/Parameters
    • In header: "managedOrganizationId": <GUID> in format "00000000-0000-0000-0000-000000000000"
  • Permissions Needed for User
    • Approve for Entire Organization
    • Approve for Group
    • Approve for Single Computer
    • Approve for Single Computer Application Only
    • View Approvals
Was this article helpful?