# Assign an AML Case

Who works an open case — or nobody.

## Overview

- `assigneeId`: an active user of your tenant whose role decides these cases — `owner`, `tenantadmin`, `non_signing_admin` or `security_admin` —, or `null` for nobody. Anyone else: `400` `AML_CASE_ASSIGNEE_INVALID` (`The assignee must be an active user who decides these AML cases.`).
- An open case only: a decided one answers `409` `AML_CASE_DECIDED`. `404` `AML_CASE_NOT_FOUND` for none of your tenant's. An `onboarding` case is Aurea's to work: `403` `AML_CASE_AUREA_DECIDES`.
- `200` with the case. For `owner`, `tenantadmin`, `non_signing_admin` and `security_admin`; written to your audit trail as `aml_case.assigned` [Coming soon, upon request](https://docs.aureahub.com/docs/feature-availability.md).

## Endpoint

### `POST /v1/aml-cases/{caseId}/assign`

Authentication: bearer token required.

Assigns an open AML case, or unassigns it.

**Path parameters**

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `caseId` | string (uuid) | yes | The case's id |

**Request body**

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `assigneeId` | string (uuid) \| null | yes | Who works it; `null`: nobody |

**Responses**

`200` Assigned

```json
{
  "id": "5f2a8c1e-7b3d-4e90-a6c2-1d8e4b7f3a95",
  "status": "open",
  "assigneeId": "0d2f6b8a-4c1e-4a93-b7d5-2e9f1c3a8b60",
  "assignedAt": "2026-10-13T09:50:03.118Z",
  "…": "the case, as in List AML Cases"
}
```

`400` Not an assignee

```json
{
  "statusCode": 400,
  "error": "BadRequestError",
  "message": "The assignee must be an active user who decides these AML cases.",
  "details": { "code": "AML_CASE_ASSIGNEE_INVALID" }
}
```

`409` Decided

```json
{
  "statusCode": 409,
  "error": "ConflictError",
  "message": "This AML case is already decided.",
  "details": { "code": "AML_CASE_DECIDED" }
}
```

**Example request**

```bash
curl -X POST https://api.aureahub.com/v1/aml-cases/5f2a8c1e-7b3d-4e90-a6c2-1d8e4b7f3a95/assign \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "assigneeId": "0d2f6b8a-4c1e-4a93-b7d5-2e9f1c3a8b60" }'
```

---

Web version: https://docs.aureahub.com/#aml-case-assign
