Error

A valid request URL is required to generate request examples

Users

Replace a member's permissions in this organization.

The set/added/removed triple replaces what was stored — send the whole picture, not a delta. Two guards apply: a protected member (the bootstrap admin, or an org admin designated with agenteye-orgctl) can never be edited here, and a disabled member is read-only until re-enabled, which is a 409 rather than a 403. When the effective grants actually change the member is emailed about it; that send is best-effort and never fails the request.

PUT

users

{id}

Error

A valid request URL is required to generate request examples

Authorizations

Authorization

string

header

required

A scoped AgentEye API key. Mint one in the dashboard under Settings → API keys, or with POST /v1/keys. Each endpoint names the permission it requires; a key without it gets 403 and a required_permission field naming what was missing.

Path Parameters

string<uuid>

required

The user's id.

Body

application/json

permission_added

string[] | null

permission_removed

string[] | null

permission_set

string | null

permissions

string[] | null

Legacy shape — same backwards-compat semantics as on create.

Response

The member with their new resolved permissions.

Connect your agents

Reference

HTTP API

Replace a member's permissions in this organization.

Authorizations

Path Parameters

Body

Response