Skip to navigation
Air APIAPI ReferencePublishing

Set public vs restricted visibility (marketplace demo)

View as Markdown

Immediately sets visibility for an approved published marketplace demo. Send publicly_published true for global visibility, or false with allowed_orgs as the full replacement restricted allow-list (requesting org is always included; omit or [] for requesting-org-only). Must not send a non-empty allowed_orgs when publicly_published is true. For restricted visibility, optional preview lists the demo for all authenticated users while provisioning stays allow-list gated (omitted preview keeps the current value). Set publish_images to true to publish referenced images owned by the demo’s organization when needed to cover the target audience. Allow-list and preview changes reconcile open access requests (grant matching orgs; close remaining REQUESTED rows when turning preview off; close REQUESTED and GRANTED rows when elevating to public).

Required scopes (any one):

  • air:admin (roles: air_admin)
  • air:sre (roles: air_sre)

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

idstringRequiredformat: "uuid"
A UUID string identifying this marketplace demo publish access record.

Request

This endpoint expects an object.
publicly_publishedbooleanOptional

true makes the marketplace demo globally visible; false keeps it restricted to the effective allow-list.

previewbooleanOptional

When true, list the restricted demo for all authenticated users while provisioning stays allow-list gated. Only accepted when publishing as restricted (not public). When omitted for restricted visibility, the current preview setting is preserved.

publish_imagesbooleanOptionalDefaults to false

Set to true to publish referenced images owned by the demo organization when they do not cover the demo’s target audience.

allowed_orgslist of stringsOptional

When publicly_published is false, full replacement allow-list as org UUIDs. The requesting org is always included in the effective list. Omit or send [] for requesting-org-only access. Must be omitted or empty when publicly_published is true.

Response

idstringRead-onlyformat: "uuid"
createddatetimeRead-only
modifieddatetimeRead-only
marketplace_demostringRead-onlyformat: "uuid"
UUID of the marketplace demo this record governs.
marketplace_demo_namestring or nullRead-only
Marketplace demo name.
requested_bystring or nullRead-only
Email of the user who submitted this record.
requesting_orgstring or nullRead-only

Human-readable name of the org that submitted this record.

requesting_org_display_namestring or nullRead-only
Requesting org display name. Same source as list search and ordering for this field.
requesting_org_ngc_org_namestring or nullRead-only
Requesting org NGC name. Same source as list search and ordering for this field.
reviewed_bystring or nullRead-only
Email of the user who reviewed this record, if reviewed.
statusenum

Current status of the publish access record.

  • PENDING - Pending
  • APPROVED - Approved
  • DENIED - Denied
  • REMOVED - Removed
  • CANCELLED - Cancelled
  • PENDING_ELEVATION - Pending Elevation
  • PENDING_RESTRICTION - Pending Restriction
  • PENDING_UNPUBLISH - Pending Unpublish
  • PENDING_ALLOWLIST - Pending Allow List Change
  • APPROVED_PENDING_IMAGE_PUBLISH - Approved Pending Image Publish
publicly_publishedbooleanRead-only

Whether the resource is published to all users (public) vs restricted to the allow-list. Set by the community manager at approval time. This is the single source of truth for public vs restricted visibility.

prefer_publicbooleanRead-only
Whether the requester prefers public publishing.
previewbooleanRead-only

Whether this demo is allowed to be previewed: all authenticated users can list and retrieve it, but only allow-listed organizations may provision. Preview requires restricted (non-public) publishing.

prefer_previewbooleanRead-only
Whether the requester prefers preview publishing. Takes effect only after community manager approval.
justificationstringRead-only

Optional text from the requester explaining who/why to share.

allowed_orgs_request_textstringRead-only

Free-text hint from the requester describing which orgs should have access for restricted publishing. Not the authoritative allow list.

denial_reasonstringRead-only
Reason provided by community manager when denying this record.
requested_atdatetime or nullRead-only
When the current request was submitted. Cleared when the requester cancels without a review.
reviewed_atdatetime or nullRead-only

When a community manager or privileged actor last reviewed the current or most recent request (approve, deny, or immediate visibility change).

Errors

400
Bad Request Error
403
Forbidden Error
404
Not Found Error
500
Internal Server Error