Checkout a profile for a specific device. Use accessType=DEVICE to elevate privileges on the device.
Profile (PAP) ID to checkout
Device ID within the application
Type of access to checkout. DEVICE elevates privileges of the device. This is the only supported type.
Optional ITSM ticket details for approval-gated profiles
{
"justification": "Access required for incident response",
"ticketId": "INC0001234",
"ticketType": "INCIDENT",
"userOnCall": false
}Per-checkout map of variableName -> value for every variable on the resolved profile-permission flagged with promptAtCheckout=true. UI populates from ResourceProfileSettings.checkoutVariablePrompts returned by GET /api/resource-manager/my-resources//resources//settings. Server validates each supplied value against the variable's regexPattern when one is configured (any type); values for variables without a pattern are taken literally. Missing/blank for a required variable produces 400 RM-0024; regex validation failure produces 400 RM-0025; entries for variables not flagged promptAtCheckout are silently ignored.
Checkout initiated successfully. Poll status until checkedOut.
Status of a profile checkout or check-in operation
Unique transaction identifier; required for getTokens, getConsoleUrl, and check-in calls
Profile (PAP) string identifier
Application container identifier
Environment identifier
User identifier (string form)
Current lifecycle status of the checkout operation
Human-readable label for status
Timestamp when the profile was checked out
Timestamp when the profile was checked in; null if still active
Timestamp when the session expires automatically
Number of times the session has been extended
End time derived from policy time conditions, if applicable
Error details if the checkout or check-in operation failed
Access denied or profile policy conditions not met
Profile or environment not found