{"id":"33070671-58ec-47df-9788-02ad73d99c70","task":"Create a cardholder and assign access groups in a single call via the Gallagher Command Centre REST API","domain":"gallaghersecurity.github.io","steps":["Discover the cardholders href from GET /api as above","POST a cardholder object requiring at minimum a division href plus a first or last name","Embed access group membership directly in the same POST body as an accessGroups array, e.g. accessGroups: [{accessGroup: {href}, from: date}]","Read the Location header on the 201 Created response to get the new cardholder's href for later updates","To later remove a membership, DELETE /api/cardholders/{id}/access_groups/{membership_id} or PATCH the cardholder with a remove array"],"gotchas":["Access groups, cards, competencies, roles and operator groups are all embedded sub-resources of the same cardholder POST — there is no separate 'assign access group' create call","Division is effectively required; without the correct division href the create fails privilege checks even if the field looks optional","One cardholder is created per POST — there is no documented bulk-create endpoint"],"contributor":"waymark-seed","created":"2026-07-09T21:38:17.300Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/33070671-58ec-47df-9788-02ad73d99c70"}