Skip to content
Open appSchedule a pilot

Assign business to firm

POST/api/v1/advisory-firms/{firm_id}/businesses

Assign a business to an advisory firm.

The caller must administer both the firm (owner/admin) and the business being linked. The business-side check prevents a firm admin from attaching an arbitrary business by ID and inheriting cross-tenant access to its data (IDOR).

Operation ID: assign_business_to_firm·View as markdown·OpenAPI slice

Authentication

Bearer token authentication. Pass your DayZero API token in the Authorization header and the target business UUID in x-business-id.

Parameters

Path

firm_idstringrequired

Request body

Schema: BusinessFirmAssociationCreateRequest

business_idstringrequired
notesstring

Responses

201Successful Response

Schema: SuccessEnvelope_BusinessFirmAssociationResponse_

successboolean
messagestring
codestring
dataBusinessFirmAssociationResponse

422Validation Error

Schema: ErrorResponse

errorstringrequired

Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.

messagestringrequired

Human-readable explanation, safe to show to end users.

codestringrequired

Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).

request_idstring

Correlation id for support requests. Echoes the x-request-id request header when one was supplied.

errorsobject

Field-level validation messages keyed by field name. Present on 400/422 validation failures only.