---
title: "Bulk Update Finding State"
method: POST
path: "/api/v1/findings/bulk/state"
tags: ["Findings"]
---

# Bulk Update Finding State

`POST /api/v1/findings/bulk/state`

Bulk update finding states.

## Request body

- C1ApiFindingV1BulkUpdateFindingStateRequest — The BulkUpdateFindingStateRequest message. This message contains a oneof named action. Only a single field of the following list may be set at a time: - snooze - suppress - acceptRisk - unsuppress - assignOwner - reopen
  - `acceptRisk` C1ApiFindingV1BulkAcceptRiskAction, nullable — The BulkAcceptRiskAction message.
    - `expiresAt` string, date-time
    - `justification` string — The justification field.
  - `assignOwner` C1ApiFindingV1BulkAssignOwnerAction, nullable — The BulkAssignOwnerAction message.
    - `owner` C1ApiFindingV1FindingOwnerRef — The FindingOwnerRef message. This message contains a oneof named owner. Only a single field of the following list may be set at a time: - identityUserId - appOwnerAppId - managerOfUserId - userSetId
      - `appOwnerAppId` string, nullable — The appOwnerAppId field. This field is part of the `owner` oneof. See the documentation for `c1.api.finding.v1.FindingOwnerRef` for more details.
      - `identityUserId` string, nullable — The identityUserId field. This field is part of the `owner` oneof. See the documentation for `c1.api.finding.v1.FindingOwnerRef` for more details.
      - `managerOfUserId` string, nullable — The managerOfUserId field. This field is part of the `owner` oneof. See the documentation for `c1.api.finding.v1.FindingOwnerRef` for more details.
      - `userSetId` string, nullable — The userSetId field. This field is part of the `owner` oneof. See the documentation for `c1.api.finding.v1.FindingOwnerRef` for more details.
  - `refs` C1ApiFindingV1FindingRef[], nullable — By-ID mode: specify individual finding refs.
    - `id` string — The ID of the finding.
  - `reopen` C1ApiFindingV1BulkReopenAction, nullable — The BulkReopenAction message.
  - `searchRequest` C1ApiFindingV1FindingSearchRequest — The FindingSearchRequest message.
    - `appIds` string[], nullable — Filter by app IDs (OR within field).
    - `appUserIds` string[], nullable — Filter by app user IDs (OR within field). Matches findings whose target.app_user_target.app_user_id is in this list.
    - `findingTypes` string[], nullable — Filter by finding type (OR within field).
    - `pageSize` integer — Maximum number of findings to return per page.
    - `pageToken` string — Pagination token from a previous response.
    - `query` string — Free text search query.
    - `severities` string[], nullable — Filter by severities (OR within field).
    - `states` string[], nullable — Filter by states (OR within field).
  - `snooze` C1ApiFindingV1BulkSnoozeAction, nullable — The BulkSnoozeAction message.
    - `reason` string — The reason field.
    - `snoozeUntil` string, date-time
  - `suppress` C1ApiFindingV1BulkSuppressAction, nullable — The BulkSuppressAction message.
    - `reason` string — The reason field.
  - `unsuppress` C1ApiFindingV1BulkUnsuppressAction, nullable — The BulkUnsuppressAction message.

## Response `200`

Successful response

- C1ApiFindingV1BulkUpdateFindingStateResponse — The BulkUpdateFindingStateResponse message.
  - `bulkActionId` string — The ID of the asynchronous bulk action, which can be used to track progress.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/versions/d391405a35d3/schema)