---
title: "POST /detector/{detectorId}/admin"
method: POST
path: "/detector/{detectorId}/admin"
---

# POST /detector/{detectorId}/admin

`POST /detector/{detectorId}/admin`

Configures the delegated administrator account with the provided values. You must provide the value for either `autoEnableOrganizationMembers` or `autoEnable`.

There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see [Regions and endpoints](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html).

## Path parameters

- `detectorId` string, required

## Request body

- object
  - `autoEnable` boolean — <p>Indicates whether to automatically enable member accounts in the organization.</p> <p>Even though this is still supported, we recommend using <code>AutoEnableOrganizationMembers</code> to achieve the similar results.</p>
  - `dataSources` object — An object that contains information on which data sources will be configured to be automatically enabled for new members within the organization.
    - `S3Logs` object — Describes whether S3 data event logs are enabled for new members of the organization.
      - `AutoEnable` boolean, required — A value that contains information on whether S3 data event logs will be enabled automatically as a data source for the organization.
    - `Kubernetes` object — Describes the configuration of Kubernetes data sources for new members of the organization.
      - `AuditLogs` object, required — Whether Kubernetes audit logs data source should be auto-enabled for new members joining the organization.
        - `AutoEnable` boolean, required — A value that contains information on whether Kubernetes audit logs should be enabled automatically as a data source for the organization.
    - `MalwareProtection` object — Describes the configuration of Malware Protection for new members of the organization.
      - `ScanEc2InstanceWithFindings` object — Whether Malware Protection for EC2 instances with findings should be auto-enabled for new members joining the organization.
        - `EbsVolumes` object — Whether scanning EBS volumes should be auto-enabled for new members joining the organization.
          - `AutoEnable` boolean — Whether scanning EBS volumes should be auto-enabled for new members joining the organization.
  - `features` OrganizationFeatureConfiguration[] — A list of features that will be configured for the organization.
    - `Name` 'S3_DATA_EVENTS' | 'EKS_AUDIT_LOGS' | 'EBS_MALWARE_PROTECTION' | 'RDS_LOGIN_EVENTS' | 'EKS_RUNTIME_MONITORING' | 'LAMBDA_NETWORK_LOGS' — The name of the feature that will be configured for the organization.
    - `AutoEnable` 'NEW' | 'NONE' — The status of the feature that will be configured for the organization.
    - `AdditionalConfiguration` OrganizationAdditionalConfiguration[] — The additional information that will be configured for the organization.
      - `Name` 'EKS_ADDON_MANAGEMENT' — The name of the additional configuration that will be configured for the organization.
      - `AutoEnable` 'NEW' | 'NONE' — The status of the additional configuration that will be configured for the organization.
  - `autoEnableOrganizationMembers` 'NEW' | 'ALL' | 'NONE' — <p>Indicates the auto-enablement configuration of GuardDuty for the member accounts in the organization. </p> <ul> <li> <p> <code>NEW</code>: Indicates that when a new account joins the organization, they will have GuardDuty enabled automatically. </p> </li> <li> <p> <code>ALL</code>: Indicates that all accounts in the Amazon Web Services Organization have GuardDuty enabled automatically. This includes <code>NEW</code> accounts that join the organization and accounts that may have been suspended or removed from the organization in GuardDuty.</p> </li> <li> <p> <code>NONE</code>: Indicates that GuardDuty will not be automatically enabled for any accounts in the organization. GuardDuty must be managed for each account individually by the administrator.</p> </li> </ul>

## Response `200`

Success

- UpdateOrganizationConfigurationResponse

## Other responses

- `480` — BadRequestException
- `481` — InternalServerErrorException

---

[API](https://skmtc.net/aws/apis/guardduty.md) · [All operations](https://skmtc.net/aws/apis/guardduty/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/guardduty/versions/d35ef49b25a3/schema)