> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cocoondata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# <access-service>/api/v1/users/{userId}/unlock

## URL structure&#x20;

```text theme={null}
https://access-service.xy-company.com/api/v1/users/{userId}/unlock
```

where `{userId}` is the ID of a Covata user account.

## Supported methods and overview&#x20;

* `PUT` - unlocks a [Covata user](/3.5/api/authentication-and-authorisation.md)'s account (specified by `userId`).

> [!NOTE]
>
> This method takes no parameters.

## Detailed description&#x20;

This API endpoint unlocks a Covata user's account (specified by `userId`).

A Covata user's account can be come locked if the user of this account had entered their password incorrectly more than the Covata Platform's [configured maximum](/3.5/admin-platform/configuring-platform-administration-properties.md#maximum-number-of-password-retries) (which can be set through the [\<access-service>/api/v1/config/server/\{configId}](/3.5/api/access-service-api-v1-config-server-configid.md) API endpoint).

## Supported roles and conditions&#x20;

This API endpoint supports requests utilising Covata user accounts with the following roles (as described in the [SafeShare Administrator's](/3.5/admin-platform/administering-platform-administrator-users.md#platform-administrators-and-user-roles) and [Organisation Administrator's](/3.5/admin-org/administering-users-within-an-organisation.md#an-organisation-users-roles) Guides):

* [SafeShare administrator](/3.5/admin-platform/administering-platform-administrator-users.md#platform-administrator-role) - when this user is another SafeShare administrator user to the one whose account (specified by `{userId}` in the request's URL) is being unlocked.
* [Organisation administrator](/3.5/admin-org/administering-users-within-an-organisation.md#organisation-administrator-role) - a bug currently exists, which prevents users with this role from being able to unlock other Covata users who are members of their organisation through this API endpoint.

The Covata Platform's resources available to a Covata user meeting the criteria above is determined by the access token submitted in the [header](/3.5/api/access-service-api-v1-users-userid-unlock.md#access-service-api-v1-users-userid-unlock-required-headers) of requests to this endpoint.

## Required headers&#x20;

The appropriate access token as the `Bearer` token:

* `Authorisation: Bearer eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE0NjcwMTY2NjYsInVzZXJfbmFtZSI6ImFsZXgub...`

## Returns&#x20;

If the request succeeded, then an HTTP response status `200 OK` is returned.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.