Skip to main content

setOrgSecurityLevel

Atomically apply a security level preset bundle to the organization's trust policy. Derives the preset's flag combination from securityposture.ApplySecurityLevel and persists via setTrustPolicy (which emits trust_policy_changed). Emits org_security_level_changed audit event and a posture-transition alert on success.

CUSTOM is not applicable (it is a derived state — returned by SecurityPostureSummary.securityLevel when the org's flags do not match any preset). Passing CUSTOM returns SECURITY_LEVEL_CUSTOM_NOT_APPLICABLE. Admin-only via manage-trust-policy scope.

setOrgSecurityLevel(
  orgID: String!
  level: SecurityLevelEnum!
): Boolean!

Arguments​

setOrgSecurityLevel.orgID ● String! non-null scalar​

Keycloak organization alias (slug, e.g. "acme-corp").

setOrgSecurityLevel.level ● SecurityLevelEnum! non-null enum​

The preset level to apply. CUSTOM is rejected.

Type​

Boolean scalar​

The Boolean scalar type represents true or false.