Assign business to firm

POST/api/v1/advisory-firms/{firm_id}/businesses

Assign a business to an advisory firm.

The caller must administer both the firm (owner/admin) and the business being linked. The business-side check prevents a firm admin from attaching an arbitrary business by ID and inheriting cross-tenant access to its data (IDOR).

Operation ID: assign_business_to_firm_api_v1_advisory_firms__firm_id__businesses_post·View as markdown·OpenAPI slice

Authentication

Bearer token authentication. Pass your DayZero API token in the Authorization header and the target business UUID in x-business-id.

Parameters

Path

firm_idstringrequired

Request body

Schema: BusinessFirmAssociationCreateRequest

business_idstringrequired
notesstring

Responses

201Successful Response

Schema: SuccessEnvelope_BusinessFirmAssociationResponse_

successboolean
messagestring
codestring
dataBusinessFirmAssociationResponse

422Validation Error

Schema: HTTPValidationError

detailarray · ValidationErrorValidationError

5 fields

locarray · string | integerrequired
msgstringrequired
typestringrequired
inputobject
ctxobject

Code samples

POST/api/v1/advisory-firms/{firm_id}/businesses

bash

curl -X POST 'https://api.ondayzero.com/api/v1/advisory-firms/{firm_id}/businesses' \
  -H 'Authorization: Bearer dz_your_token' \
  -H 'x-business-id: YOUR_BUSINESS_ID' \
  -H 'Content-Type: application/json' \
  -d '{
  "business_id": "string"
}'