---
updatedAt: 2026-05-27T12:53:27.000Z
agentTools:
  projectIndex: https://developer.onetrust.com/onetrust/llms.txt
---

# Unlink Risks

Use this API to disassociate one or more risks from a target entity.

> 🗒 Things to Know
>
> - This operation removes the association between the specified risks and the target entity.
> - The risks themselves are not deleted, only the linkage is removed.
> - Multiple risks can be unlinked in a single request.

# OpenAPI definition

```json
{
  "openapi": "3.1.0",
  "info": {
    "title": "Tech Risk & Compliance - IT Risk Management",
    "description": "The IT Risk Management API provides comprehensive REST endpoints for managing enterprise security controls, threats, vulnerabilities, and their implementations with OAuth2 security and extensive customization capabilities.",
    "version": "1.0",
    "contact": {
      "name": "OneTrust Support",
      "url": "https://my.onetrust.com/s/contactsupport"
    },
    "license": {
      "name": "Apache 2.0",
      "url": "https://www.apache.org/licenses/LICENSE-2.0"
    }
  },
  "servers": [
    {
      "url": "https://{hostname}",
      "variables": {
        "hostname": {
          "default": "hostname",
          "description": "The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com."
        }
      }
    }
  ],
  "tags": [
    {
      "name": "Risks",
      "description": "APIs to manage the complete risk lifecycle including creation, updates, deletion, search, and retrieval of risk details and attributes.",
      "externalDocs": {
        "description": "OpenAPI 3.1.0 - Download Definition",
        "url": "https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"
      },
      "x-displayName": "Risks"
    }
  ],
  "paths": {
    "/api/risk/v2/entities/risks/unlink": {
      "post": {
        "operationId": "unlinkRisksFromEntityUsingPost",
        "summary": "Unlink Risks",
        "description": "Use this API to disassociate one or more risks from a target entity.\n\n> 🗒 Things to Know\n>\n> - This operation removes the association between the specified risks and the target entity.\n> - The risks themselves are not deleted, only the linkage is removed.\n> - Multiple risks can be unlinked in a single request.",
        "tags": [
          "Risks"
        ],
        "x-onetrust": {
          "spec-label": "https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskLinkRequest"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Risks unlinked successfully"
          },
          "400": {
            "description": "Bad Request"
          },
          "401": {
            "description": "Unauthorized"
          },
          "403": {
            "description": "Forbidden"
          },
          "429": {
            "description": "Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).",
            "headers": {
              "Retry-After": {
                "schema": {
                  "description": "The number of seconds after which requests will be allowed again.",
                  "format": "int32"
                }
              },
              "ot-period": {
                "schema": {
                  "description": "The unit of time for which the rate limit applies",
                  "enum": [
                    "HOUR",
                    "MINUTE"
                  ]
                }
              },
              "ot-ratelimit-event-id": {
                "schema": {
                  "description": "The unique identifier for the rate-limiting event.",
                  "format": "uuid"
                }
              },
              "ot-request-made": {
                "schema": {
                  "description": "The number of requests made within the specified period.",
                  "format": "int32"
                }
              },
              "ot-requests-allowed": {
                "schema": {
                  "description": "The number of requests allowed within the specified period.",
                  "format": "int32"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error"
          }
        },
        "security": [
          {
            "TechRiskCompliance-Risk_OAUTH2": [
              "INTEGRATION",
              "RISK"
            ]
          }
        ]
      }
    }
  },
  "components": {
    "schemas": {
      "TechRiskCompliance-Risk_EntityTypeInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Entity Type ID. This can be Assets, Entities, PIA, Engagement, Custom Object GUID in form of String.",
            "type": "string",
            "example": "3f99b4ac-7c66-45b6-8ff4-63a67a3ec7be"
          },
          "label": {
            "description": "Entity Type Name",
            "type": "string",
            "example": "Inventory",
            "maxLength": 512
          },
          "translationKey": {
            "description": "Translation Key of Entity Type ID",
            "type": "string",
            "example": "OBJ.Objective",
            "maxLength": 255
          },
          "seeded": {
            "description": "For Base Entity Type Seeded is true and false for Custom Object/Entity Types by default.",
            "type": "boolean",
            "example": false
          },
          "sourceType": {
            "description": "Indicates whether this type can be source type or not in Risk",
            "type": "boolean",
            "example": false
          },
          "riskType": {
            "description": "Indicates whether this type can be risk type or not in Risk",
            "type": "boolean",
            "example": true
          },
          "eligibleForEntityLink": {
            "description": "Indicates whether entity type is eligible for linking/relating with risk or not",
            "type": "boolean",
            "example": false
          },
          "enabled": {
            "description": "Indicates whether the entity type is enabled or not.",
            "type": "boolean",
            "example": false
          },
          "moduleName": {
            "description": "Name of the module",
            "type": "string",
            "example": "Objective",
            "maxLength": 255
          }
        },
        "required": [
          "id"
        ]
      },
      "TechRiskCompliance-Risk_RiskSourceInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Source Entity Id",
            "type": "string",
            "format": "uuid",
            "example": "d974c78a-c2f0-480a-aa27-4d40c44bb890"
          },
          "type": {
            "description": "Source Type for the risk",
            "type": "string",
            "example": "PIA",
            "enum": [
              "PIA",
              "GRA",
              "INVENTORY",
              "INCIDENT",
              "ENGAGEMENT",
              "GENERIC"
            ],
            "deprecated": true
          },
          "sourceType": {
            "description": "Source type information of the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_EntityTypeInformation"
          },
          "name": {
            "description": "Source Entity Name",
            "type": "string",
            "example": "Raw Materials and Sales Inventory"
          },
          "additionalAttributes": {
            "description": "Additional information about the Source Entity. This will be a Map of String Key and Object value. 'inventoryType' key is mandatory to be passed when sourceType is 'Inventory', and it can have one of the following values, 20 - Assets, 30 - Processing Activities, 50 - Vendors, 60 - Entities",
            "type": "object",
            "additionalProperties": {
              "type": "object"
            }
          }
        },
        "required": [
          "id",
          "name"
        ]
      },
      "TechRiskCompliance-Risk_RiskLinkRequest": {
        "type": "object",
        "properties": {
          "riskIds": {
            "description": "List of risk Ids that will be linked to or unlinked from the target entity. Must contain at least one valid risk ID",
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid",
              "description": "List of risk Ids that will be linked to or unlinked from the target entity. Must contain at least one valid risk ID"
            },
            "format": "uuid",
            "example": [
              "123e4567-e89b-12d3-a456-426614174001",
              "987fcdeb-51a2-43d7-9abc-123456789013"
            ],
            "maxItems": 2147483647,
            "minItems": 1
          },
          "riskSourceInformation": {
            "description": "source information",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskSourceInformation"
          },
          "origin": {
            "description": "origin of the risk",
            "type": "string",
            "example": "RISK",
            "enum": [
              "ASSESSMENT",
              "RISK"
            ]
          }
        },
        "required": [
          "riskIds",
          "riskSourceInformation"
        ]
      }
    },
    "securitySchemes": {
      "TechRiskCompliance-Risk_OAUTH2": {
        "type": "oauth2",
        "flows": {
          "clientCredentials": {
            "tokenUrl": "https://{hostname}/api/access/v1/oauth/token",
            "scopes": {
              "RISK": "Risk Scope",
              "RISK_READ": "Risk read scope",
              "INTEGRATION": "Integration scope"
            }
          }
        }
      }
    }
  },
  "x-readme": {
    "explorer-enabled": false,
    "proxy-enabled": false,
    "metrics-enabled": false
  },
  "x-onetrust": {
    "spec-label": "OpenAPI 3.1.0"
  }
}
```

# Sibling pages

* [Get List of Risk Categories](https://developer.onetrust.com/onetrust/reference/getactivecategoriesusingget.md)
* [Get Risk Matrix Configuration](https://developer.onetrust.com/onetrust/reference/getmatrixscoresettingusingget.md)
* [Get Standard Risk Configuration](https://developer.onetrust.com/onetrust/reference/getstandardscoresettingusingget.md)
* [Create Risk](https://developer.onetrust.com/onetrust/reference/createriskusingpost.md)
* [Get List of Risks](https://developer.onetrust.com/onetrust/reference/getriskpageviewusingpost.md)
* [Get List of Linked Risks](https://developer.onetrust.com/onetrust/reference/getlinkedrisksinformationusingpost.md)
* [Get Risk](https://developer.onetrust.com/onetrust/reference/getriskusingget.md)
* [Create Risk](https://developer.onetrust.com/onetrust/reference/createstandaloneriskusingpost.md)