---
title: "Add or delete users (custodians) from a legal hold policy - v3"
method: POST
path: "/legalholds/v3/policies/{policyId}/users"
tags: ["Legal Hold"]
---

# Add or delete users (custodians) from a legal hold policy - v3

`POST /legalholds/v3/policies/{policyId}/users`

Add or delete users from a legal hold policy in Druva inSync.

## Path parameters

- `policyId` integer, required

## Request body

- RequestOperateOnCustodians
  - `custodians` object[]
    - `emailId` string — The email address of the user, who should be added to OR deleted from the legal hold policy.
  - `action` 'add' | 'delete' — The action to be performed on the user.

## Response `200`

OK

- ResponseOperateOncustodians
  - `alreadyOnLegalhold` object[] — While adding a user to a legal hold policy, if a user is already on legal hold then the email address is returned in this list. This field is returned only if the action is 'add'.
    - `emailId` string — Email address of users which are already on legal hold.
  - `notOnLegalhold` object[] — While deleting a user from a legal hold policy, if a user is already deleted from legal hold then the user email address will be returned in this list. This field is returned only if the action is 'delete'.
    - `emailId` string — Email address of users which are already deleted from legal hold or are not on legal hold.
  - `notInsyncUsers` object[]
    - `emailId` string — Email address of users which are not valid inSync users.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `404` — Not found
- `500` — Internal Server Error

---

[API](https://skmtc.net/druva/apis/authentication.md) · [All operations](https://skmtc.net/druva/apis/authentication/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/druva/authentication/revisions/2af2bf148b25/schema)