---
title: "PATCH /v1/{+name}"
method: PATCH
path: "/v1/{+name}"
tags: ["organizations"]
---

# PATCH /v1/{+name}

`PATCH /v1/{+name}`

Updates the KeyAccessJustificationsPolicyConfig for a given organization, folder, or project.

## Path parameters

- `name` string, required

## Query parameters

- `updateMask` string

## Request body

- KeyAccessJustificationsPolicyConfig — Represents a singleton configuration for Key Access Justifications policies.
  - `defaultKeyAccessJustificationPolicy` KeyAccessJustificationsPolicy — A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason values for encrypt, decrypt, and sign operations on a CryptoKey or KeyAccessJustificationsPolicyConfig (the default Key Access Justifications policy).
    - `allowedAccessReasons` string[] — The list of allowed reasons for access to a CryptoKey. Note that empty allowed_access_reasons has a different meaning depending on where this message appears. If this is under KeyAccessJustificationsPolicyConfig, it means allow-all. If this is under CryptoKey, it means deny-all.
  - `defaultPolicyAvailable` boolean — Output only. Indicates whether this parent resource is available to default policy feature. Please consult [the prerequisite of default policy feature](https://cloud.google.com/assured-workloads/key-access-justifications/docs/set-default-policy#before) for more details.
  - `name` string — Identifier. Represents the resource name for this KeyAccessJustificationsPolicyConfig in the format of "{organizations|folders|projects}/*/kajPolicyConfig".

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/cloudkms.md) · [All operations](https://skmtc.net/google/apis/cloudkms/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/cloudkms/revisions/576b283e53dd/schema)