Requires the training feature and authenticated API-key or OAuth access. API keys need TRAININGS, COURSES and STUDENTS read permissions; generation also requires TRAININGS write permission. OAuth generation requires edusign:api.write and an administrator role. Native School OAuth can use these routes without OPTION_API. School is derived from authentication. Only archived courses are eligible for a PDF; courses are never locked automatically. Maximum 1000 courses and 100000 learner-course cells. Generates a fresh PDF directly with the group-sheet renderer and returns a short-lived signed download URL and filename. The file is stored privately. No background job is created. Every supplied course must belong to this training and be archived. Optional logos selects up to five HTTPS logo URLs (2048 characters each) from the authenticated school’s saved logo catalog. Generation is bounded to 25 seconds; failures are returned to the caller without automatic retry.