> ## Documentation Index > Fetch the complete documentation index at: https://docs.msportal.ai/llms.txt > Use this file to discover all available pages before exploring further. # Decide a CSAT review > Explain (record what happened and close), correct (change a mis-submitted rating; the original is kept), revert_correction, dismiss, reopen or reassign. Only the assigned reviewer or a survey manager can decide. Staff only; requires the csat_review_queue feature (403 otherwise). Scope surveys.write; permission view_csat. ## OpenAPI ````yaml /openapi.json post /api/public/v1/surveys/csat-reviews/{id}/decision openapi: 3.0.3 info: title: MSPortal Public API version: 1.0.0 description: >- Public API for MSPortal - provides programmatic access to tenant data. ## Authentication All endpoints require authentication via API key passed as a Bearer token: ``` Authorization: Bearer ``` API keys can be created in the MSPortal dashboard under Settings → Integrations → API Access. **Important:** Do not include cookies in API requests. The public API uses stateless authentication only. ## Scopes API keys are granted specific scopes that determine what operations they can perform. Each endpoint documents its required scope(s). ## Rate Limiting API calls are rate limited per API key. Rate limit information is returned in response headers: - `X-RateLimit-Limit`: Maximum requests per minute - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: When the rate limit resets (ISO 8601) ## Request ID All responses include an `X-Request-Id` header for debugging and support. You can also pass your own `X-Request-Id` header to correlate requests. contact: name: MSPortal Support email: support@msportal.ai license: name: Proprietary servers: - url: https://app.msportal.ai description: Production (US) - url: https://eu.msportal.ai description: Production (EU) security: - BearerAuth: [] tags: - name: Budgets description: >- Budget management - create, track, and forecast budgets with line items, categories, and products - name: Calendar description: Calendar and meeting management - events, participants, and meeting types - name: Companies description: Company management endpoints - name: Company Users description: Company user management - client portal contacts (read-only, paginated) - name: Compliance description: Compliance check management - runs, assigned checks, and status updates - name: Dashboards description: Dashboard management - external iframe resources and internal dashboards - name: Devices description: Device management - inventory, types, and locations - name: Goals description: Goal management - create, track, and manage goals with tasks and updates - name: NPS Surveys description: >- NPS survey management - Net Promoter Score surveys, responses, and analytics - name: Reports description: >- Report management - create, manage, and schedule reports with templates and types - name: Planner description: >- Planner item management - tasks, roadmap items, and project planning with linked goals, compliance, and projects - name: Surveys description: >- General survey management - multi-question surveys, responses, and statistics - name: Tickets description: Ticket management - view and filter tickets from PSA integrations - name: Training description: >- Training management - courses, enrollments, certificates, and progress tracking - name: Users description: Tenant user management - internal staff and team members (read-only) - name: Automation Rules description: >- Automation rule management - create, configure, and monitor automation rules with triggers, conditions, and actions - name: Analytics description: >- Analytics and reporting - company audit data, training analytics, user activity, and portfolio metrics - name: Client Onboarding description: >- Client onboarding - portals (phases, tasks, contacts, activation), templates, checklist templates, forms and documentation pages - name: Backup description: >- Backup - summaries, protected devices, alerts and SaaS protection (Datto, Axcient, Slide, Kaseya) - name: Microsoft 365 description: Microsoft 365 - licenses, users, domains and Secure Score - name: Security description: >- Security - posture summary, EDR incidents, vulnerabilities, email threats, firewalls, DNS filtering and security awareness - name: Financial description: Financial - quotes, invoices and revenue summaries - name: Integrations description: Integrations - status, sync health, pause and resume (never credentials) - name: Documentation description: >- Documentation - pages, folders and articles synced from Hudu or IT Glue, plus built-in pages - name: Broadcasts description: Broadcasts - emergency broadcasts, recipients and groups - name: Notifications description: Notifications - the linked user's in-app notifications - name: Standards description: >- Standards - technology standards catalog, service plans, applicability, deployment statuses, compliance rollups, white space and costs - name: Customer Success description: >- Customer success - client health scores, trends, benchmarks and Traffic Light Reviews - name: Tasks description: Tasks - the linked user's personal task list - name: Tenant Setup description: Tenant setup - profile, branding and portal settings (never secrets) - name: Roles description: Roles - staff and client roles and their permission grants - name: Ticket Templates description: Ticket templates - reusable ticket definitions - name: Readiness description: Client readiness - account readiness assessments - name: Projects description: >- Projects - PSA projects with health overlays (deliverables, milestones, client actions, weekly updates), phases, tickets, time entries, PSA status/owner/priority write-through, ticket notes, task controls, display settings and the document library paths: /api/public/v1/surveys/csat-reviews/{id}/decision: post: tags: - Surveys summary: Decide a CSAT review description: >- Explain (record what happened and close), correct (change a mis-submitted rating; the original is kept), revert_correction, dismiss, reopen or reassign. Only the assigned reviewer or a survey manager can decide. Staff only; requires the csat_review_queue feature (403 otherwise). Scope surveys.write; permission view_csat. parameters: - schema: type: string format: uuid description: Review ID required: true description: Review ID name: id in: path requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/CsatReviewDecisionRequest' responses: '200': description: Review after the decision content: application/json: schema: type: object properties: data: $ref: '#/components/schemas/CsatReview' required: - data '400': description: Validation error content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '403': description: >- Forbidden - missing scope (surveys.write) or the linked user lacks the surveys permission content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '404': description: Review not found content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '409': description: The review changed since expectedUpdatedAt; reload and decide again content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' security: - BearerAuth: [] components: schemas: CsatReviewDecisionRequest: type: object properties: action: type: string enum: - explain - correct - revert_correction - dismiss - reopen - reassign explanation: type: string maxLength: 4000 description: Required for explain; optional with correct correctedRating: type: integer minimum: 1 maximum: 10 description: Required for correct; within the rating's scale reason: type: string maxLength: 1000 description: Required for correct assigneeUserId: type: string format: uuid description: Required for reassign note: type: string maxLength: 1000 description: Optional for dismiss, reopen, revert_correction, reassign expectedUpdatedAt: type: string description: The review's last read updatedAt; 409 when it changed required: - action CsatReview: type: object properties: reviewId: type: string format: uuid status: type: string enum: - open - explained - corrected - dismissed assigneeName: type: string nullable: true originalRating: type: integer correctedRating: type: integer nullable: true rating: type: integer scale: type: integer correctionReason: type: string nullable: true correctedBy: type: string nullable: true correctedAt: type: string nullable: true explanation: type: string nullable: true closedBy: type: string nullable: true closedAt: type: string nullable: true updatedAt: type: string description: Version token to send as expectedUpdatedAt on the decision endpoint response: type: object properties: responseId: type: string format: uuid companyId: type: string nullable: true format: uuid companyName: type: string nullable: true respondentName: type: string nullable: true ticketNumber: type: string nullable: true source: type: string enum: - halo - autotask - simplesat - native comment: type: string nullable: true technicianName: type: string nullable: true submittedAt: type: string required: - responseId - companyId - companyName - respondentName - ticketNumber - source - comment - technicianName - submittedAt history: type: array items: type: object properties: action: type: string actorName: type: string nullable: true fromRating: type: integer nullable: true toRating: type: integer nullable: true note: type: string nullable: true at: type: string required: - action - actorName - fromRating - toRating - note - at canAct: type: boolean description: Whether the linked user may decide this review required: - reviewId - status - assigneeName - originalRating - correctedRating - rating - scale - correctionReason - correctedBy - correctedAt - explanation - closedBy - closedAt - updatedAt - response - history - canAct ErrorResponse: type: object properties: error: type: string description: Error message requestId: type: string description: Request correlation ID details: nullable: true description: Additional error details code: type: string description: Error code required: - error securitySchemes: BearerAuth: type: http scheme: bearer bearerFormat: API Key description: >- Use your API key as a Bearer token. API keys can be generated in Settings → Integrations → API Access. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.