Administration

Set a team's two-factor requirement

POST/api/admin/teams/{teamId}/2fa

Enables or disables the requirement for members of the specified team to use two-factor authentication.

Try it

Headers

Name	Type	Description
Authorizationrequired	string	Token returned by POST /api/auth/login, or an API key (`umami_…`) created under Settings → API keys (self-hosted only). `Bearer <token>`.

Path parameters

Name	Type	Description
teamIdrequired	string	ID of the associated team.

Request body

Name	Type	Description
requiredrequired	boolean

Example request

{
  "required": true
}

Responses

200The operation completed successfully.

Name	Type	Description
okrequired	boolean	Whether the operation succeeded.
teamIdrequired	string	ID of the associated team.
twoFactorRequiredrequired	any	Whether two-factor authentication is required.

200 example

{
  "ok": true,
  "teamId": "string",
  "twoFactorRequired": {}
}

400Bad request.

Name	Type	Description
errorrequired	object	Error details returned when the operation fails.

400 example

{
  "error": {
    "code": "bad-request",
    "message": "Bad request.",
    "status": 400
  }
}

401Unauthorized.

Name	Type	Description
errorrequired	object	Error details returned when the operation fails.

401 example

{
  "error": {
    "code": "unauthorized",
    "message": "Unauthorized.",
    "status": 401
  }
}

404Not found.

Name	Type	Description
errorrequired	object	Error details returned when the operation fails.

404 example

{
  "error": {
    "code": "not-found",
    "message": "Not found.",
    "status": 404
  }
}

503Service unavailable.

Name	Type	Description
errorrequired	object	Error details returned when the operation fails.

503 example

{
  "error": {
    "code": "service-unavailable",
    "message": "Service unavailable.",
    "status": 503
  }
}

Code samples

cURL

curl -X POST 'https://api.example.com/api/admin/teams/{teamId}/2fa' \
  -H 'Authorization: Bearer <token>' \
  -H 'Content-Type: application/json' \
  -d '{
  "required": true
}'

PreviousReset a user's two-factor authentication NextSet a user's two-factor requirement