---
title: "PATCH /api/v2/secret-rotations/dbt-service-token/{rotationId}"
method: PATCH
path: "/api/v2/secret-rotations/dbt-service-token/{rotationId}"
tags: ["Secret Rotations"]
---

# PATCH /api/v2/secret-rotations/dbt-service-token/{rotationId}

`PATCH /api/v2/secret-rotations/dbt-service-token/{rotationId}`

Update the specified DBT Service Token Rotation.

## Path parameters

- `rotationId` string, uuid, required

## Request body

- object
  - `name` string — The updated name of the DBT Service Token Rotation. Must be slug-friendly.
  - `description` string, nullable — The updated description of the DBT Service Token Rotation.
  - `isAutoRotationEnabled` boolean — Whether secrets should be automatically rotated when the specified rotation interval has elapsed.
  - `rotationInterval` number — The updated interval, in days, to automatically rotate secrets.
  - `rotateAtUtc` object — The updated hours and minutes rotation should occur at in UTC.
    - `hours` number, required
    - `minutes` number, required
  - `parameters` object
    - `tokenName` string, required — The name of the service token to create.
    - `permissionGrants` object[], required — The permission grants to apply to the service token.
      - `permissionSet` 'account_admin' | 'account_viewer' | 'admin' | 'analyst' | 'billing_admin' | 'cost_insights_admin' | 'cost_insights_viewer' | 'cost_management_admin' | 'cost_management_viewer' | 'database_admin' | 'developer' | 'fusion_admin' | 'git_admin' | 'job_admin' | 'job_runner' | 'job_viewer' | 'manage_marketplace_apps' | 'member' | 'metadata_only' | 'owner' | 'project_creator' | 'readonly' | 'scim_only' | 'security_admin' | 'semantic_layer_only' | 'stakeholder' | 'team_admin' | 'webhooks_only', required
      - `projectId` number
  - `secretsMapping` object
    - `serviceToken` string, required — The name of the secret that the service token will be mapped to.

## Response `200`

Default Response

- object
  - `secretRotation` object, required
    - `id` string, uuid, required
    - `name` string, required
    - `description` string, nullable
    - `isAutoRotationEnabled` boolean
    - `activeIndex` number
    - `folderId` string, uuid, required
    - `connectionId` string, uuid, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `rotationInterval` number, required
    - `rotationStatus` string, required
    - `lastRotationAttemptedAt` string, date-time, required
    - `lastRotatedAt` string, date-time, required
    - `lastRotationJobId` string, nullable
    - `nextRotationAt` string, date-time, nullable
    - `isLastRotationManual` boolean
    - `connection` object, required
      - `app` 'dbt', required
      - `name` string, required
      - `id` string, uuid, required
    - `environment` object, required
      - `slug` string, required
      - `name` string, required
      - `id` string, uuid, required
    - `projectId` string, required
    - `folder` object, required
      - `id` string, required
      - `path` string, required
    - `rotateAtUtc` object, required
      - `hours` number, required
      - `minutes` number, required
    - `lastRotationMessage` string, nullable
    - `type` 'dbt-service-token', required
    - `parameters` object, required
      - `tokenName` string, required — The name of the service token to create.
      - `permissionGrants` object[], required — The permission grants to apply to the service token.
        - `permissionSet` 'account_admin' | 'account_viewer' | 'admin' | 'analyst' | 'billing_admin' | 'cost_insights_admin' | 'cost_insights_viewer' | 'cost_management_admin' | 'cost_management_viewer' | 'database_admin' | 'developer' | 'fusion_admin' | 'git_admin' | 'job_admin' | 'job_runner' | 'job_viewer' | 'manage_marketplace_apps' | 'member' | 'metadata_only' | 'owner' | 'project_creator' | 'readonly' | 'scim_only' | 'security_admin' | 'semantic_layer_only' | 'stakeholder' | 'team_admin' | 'webhooks_only', required
        - `projectId` number
    - `secretsMapping` object, required
      - `serviceToken` string, required — The name of the secret that the service token will be mapped to.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/revisions/885aef3e6c11/schema)