Skip to main content

​
Endpoint

POST /api/v1/bras

​
Description

Creates a new Business Risk Assessment. An initial snapshot is automatically created upon BRA creation.

​
Required Role

  • Client Admin
  • Assessor

​
Request Body

{
  "name": "Q1 2026 Retail Banking Assessment",
  "description": "Comprehensive risk assessment for retail operations",
  "legal_entity_id": "le-uuid-001",
  "business_unit_id": "bu-uuid-001",
  "period": "Q1 2026",
  "assessor": "John Smith",
  "start_date": "2026-01-01"
}
FieldTypeRequiredDescription
namestringYesBRA name
descriptionstringNoDescription of the assessment
legal_entity_idUUIDYesLegal Entity being assessed
business_unit_idUUIDNoBusiness Unit (optional)
periodstringYesAssessment period (e.g., “Q1 2026”)
assessorstringYesName of assessor
start_datedateNoAssessment start date

​
Response

{
  "data": {
    "id": "bra-uuid-001",
    "name": "Q1 2026 Retail Banking Assessment",
    "description": "Comprehensive risk assessment for retail operations",
    "legal_entity_id": "le-uuid-001",
    "business_unit_id": "bu-uuid-001",
    "status": "draft",
    "period": "Q1 2026",
    "assessor": "John Smith",
    "start_date": "2026-01-01",
    "created_at": "2026-01-15T10:30:00Z",
    "updated_at": "2026-01-15T10:30:00Z"
  },
  "message": "BRA created successfully"
}

​
Example Request

curl -X POST "https://api.risklegion.com/api/v1/bras" \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Q1 2026 Retail Banking Assessment",
    "legal_entity_id": "le-uuid-001",
    "period": "Q1 2026",
    "assessor": "John Smith"
  }'

​
Validation Rules

  • name must be unique within the enterprise
  • legal_entity_id must exist and be accessible to the user
  • business_unit_id must belong to the specified legal entity
  • Assessors can only create BRAs for their assigned entities