Skip to navigation
API referenceOrganizationsIdentity and memberships

Change a member role

Required scopes: membership.update.

Changes an active membership to admin, operator or viewer. Owner roles and ownership transfers are protected (409). Rechecks current explicit service scopes after acquiring the organization lock. Token-management scope alone grants no membership access.

Response headers:

  • ETag (200): Strong validator for this membership representation and row revision. Membership writes require the latest value unchanged.

Authentication

AuthorizationBearer

Organization-owned service token. Issue the initial token in organization credential settings. Scopes are documented per operation via x-required-scopes; they are not OAuth scopes.

Path parameters

organization_idstringRequiredformat: "uuid"
Immutable organization UUID bound to the service token.
member_idstringRequiredformat: "uuid"
Immutable user UUID of an active organization membership. Protocol principals and handles are not accepted.

Headers

If-MatchstringRequiredformat: "^"membership-[a-f0-9]{64}"$"

Strong validator for this membership representation and row revision. Membership writes require the latest value unchanged. Missing:428; stale:412; malformed, weak, wildcard or list:422.

Request

This endpoint expects an object.
roleenumRequired
Allowed values:

Response headers

X-Request-IdstringOptional
ETagstringOptionalformat: "^"membership-[a-f0-9]{64}"$"
Strong validator for this membership representation and row revision. Membership writes require the latest value unchanged.

Response

Successful operation
idstringformat: "uuid"
organization_idstringformat: "uuid"
display_namestring
handlestring
roleenum
Allowed values:

Errors

401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
503
Service Unavailable Error