---
title: "RotateSelfHostEnrollment"
description: "Rotate a self-host enrollment token"
canonical: "https://pgbeam.com/docs/go-sdk/platform/rotateSelfHostEnrollment"
last-updated: "2026-10-20T17:41:58.000Z"
---

# RotateSelfHostEnrollment

> Rotate a self-host enrollment token

URL: https://pgbeam.com/docs/go-sdk/platform/rotateSelfHostEnrollment

{/* Auto-generated from OpenAPI. Do not edit. Run `pnpm generate:sdk-docs` to regenerate. */}

Mints a new enrollment token in place, keeping the same enrollment id, metadata, and expiry. The swap is atomic: the old token stops authenticating new proxy connections the moment this call returns. An already-connected proxy keeps its existing gRPC streams until it disconnects, then must present the new token to reconnect. The new token is returned once and cannot be retrieved again.

## Usage

```go
result, err := client.Platform.RotateSelfHostEnrollment(ctx, "org_abc123", "she_01h455vb4pex5vsknk084sn02q")
```

## Parameters

| Parameter    | Type              | Required | Description                     |
| ------------ | ----------------- | -------- | ------------------------------- |
| ctx          | `context.Context` | Yes      | Request context                 |
| orgID        | `string`          | Yes      | Unique organization identifier. |
| enrollmentID | `string`          | Yes      | Unique enrollment identifier.   |

## Response

`(*pgbeam.SelfHostEnrollmentSecret, error)`: token rotated. new token shown once.

## Example

```go
import pgbeam "go.pgbeam.com/sdk"

client := pgbeam.NewClient(&pgbeam.ClientOptions{
  APIKey: "pbu_...",
})

result, err := client.Platform.RotateSelfHostEnrollment(ctx, "org_abc123", "she_01h455vb4pex5vsknk084sn02q")
if err != nil {
  log.Fatal(err)
}
fmt.Println(result)
```

## Errors

| Status | Description                                                                                                                                                                                                                                                                                           |
| ------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| 400    | The request was rejected. `code` is `INVALID_INPUT`, and `errors` names the offending fields when the failure was a validation one.                                                                                                                                                                   |
| 401    | Missing or invalid authentication. `code` is `UNAUTHORIZED`.                                                                                                                                                                                                                                          |
| 403    | The caller is authenticated but not allowed to perform this operation. `code` is `FORBIDDEN` when the caller's role is insufficient, and `PLAN_LIMIT_REACHED` when the organization's plan is what stands in the way. The two are answered differently, so branch on the code rather than the status. |
| 404    | The resource does not exist, or the caller is not entitled to know that it does. `code` is `NOT_FOUND`.                                                                                                                                                                                               |
| 409    | The enrollment is revoked and cannot be rotated.                                                                                                                                                                                                                                                      |
| 500    | The request failed for a reason on our side. `code` is `INTERNAL_ERROR`. Quote `request_id` when reporting it.                                                                                                                                                                                        |