Create a tenant export request
curl --request POST \ --url https://auth.example.com/api/admin/tenant-backups/exports \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "idempotencyKey": "example", "selection": { "settings": true, "users": true, "admin": true, "artifacts": true, "logs": { "audit": true, "other": true, "sensitive": true, "period": 7 } } }'Requires admin:backups:read, admin:backups:manage, admin:backups:export and a human Admin session with MFA authenticated within five minutes. Selecting sensitive log details also requires admin:backups:sensitive. At least one category must be selected. The server fixes the authenticated tenant, canonical issuer and running product version. The same idempotency key may retry only the same request and actor. Creates a durable operation waiting for its wrapped content key; it does not return a completed artifact.
Authorizations
Section titled “Authorizations ”Request Body required
Section titled “Request Body required ”object
object
Responses
Section titled “ Responses ”The export request exists. Retries return the current operation state.
object
Example
{ "kind": "export", "state": "queued"}The request was rejected.
object
Example generated
{ "error": "example"}The request was rejected.
object
Example generated
{ "error": "example"}The request was rejected.
object
Example generated
{ "error": "example"}The request body exceeds 4096 bytes.
Required backup storage, key service, or audit service is unavailable. Missing artifact storage returns backup_storage_unavailable.
object
Example generated
{ "error": "example"}