- [HTTP request](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#body.HTTP_TEMPLATE)
- [Path parameters](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#body.PATH_PARAMETERS)
- [Request body](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#body.request_body)
- [Response body](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#body.response_body)
- [Authorization scopes](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#body.aspect)
- [InstancesRotateEntraIdCertificateRequest](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#InstancesRotateEntraIdCertificateRequest)
  - [JSON representation](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#InstancesRotateEntraIdCertificateRequest.SCHEMA_REPRESENTATION)
- [RotateEntraIdCertificateContext](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#RotateEntraIdCertificateContext)
  - [JSON representation](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#RotateEntraIdCertificateContext.SCHEMA_REPRESENTATION)
- [Examples](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#examples)
- [Try it!](https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#try-it)

Rotates the Entra Id certificate version to one previously added with the addEntraIdCertificate method.

### HTTP request

`POST https://sqladmin.googleapis.com/sql/v1beta4/projects/{project}/instances/{instance}/rotateEntraIdCertificate`

The URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.

### Path parameters

| Parameters ||
|---|---|
| `project` | `string` Required. Project ID of the project that contains the instance. |
| `instance` | `string` Required. Cloud SQL instance ID. This does not include the project ID. |

### Request body

The request body contains an instance of `https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#InstancesRotateEntraIdCertificateRequest`.

### Response body

If successful, the response body contains an instance of `https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/operations#Operation`.

### Authorization scopes

Requires one of the following OAuth scopes:

- `https://www.googleapis.com/auth/cloudsql`
- `
  https://www.googleapis.com/auth/cloud-platform`
- `
  https://www.googleapis.com/auth/sqlservice.admin`

For more information, see the [Authentication Overview](https://docs.cloud.google.com/docs/authentication#authorization-gcp).

## InstancesRotateEntraIdCertificateRequest

Rotate Entra ID Certificate request.

| JSON representation |
|---|
| ``` { "rotateEntraIdCertificateContext": { object (`https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#RotateEntraIdCertificateContext`) } } ``` |

| Fields ||
|---|---|
| `rotateEntraIdCertificateContext` | ``object (`https://docs.cloud.google.com/sql/docs/sqlserver/admin-api/rest/v1beta4/instances/RotateEntraIdCertificate#RotateEntraIdCertificateContext`)`` Optional. Contains details about the rotate Entra ID certificate operation. |

## RotateEntraIdCertificateContext

Instance rotate Entra ID certificate context.

| JSON representation |
|---|
| ``` { "kind": string, "nextVersion": string } ``` |

| Fields ||
|---|---|
| `kind` | `string` Optional. This is always `sql#rotateEntraIdCertificateContext`. |
| `nextVersion` | `string` Optional. The fingerprint of the next version to be rotated to. If left unspecified, will be rotated to the most recently added Entra ID certificate version. |