Assign a role to a user (admin)

PUT

/auth/users/{ref}/role

• Local development behind nginx (port 8088 by default)

Authorizations

• cookieAuth
• bearerAuth

Parameters

Path Parameters

ref

required

integer format: int64

Request Body ^required

object

role_id

required

string format: uuid

Responses

204

Role assigned

400

Role change refused — would leave the system with zero users holding system.admin (last-admin invariant guard). Grant the capability to another user first.

object

error

required

Human-readable error summary

string

Example

the request could not be completed

401

Authentication required, missing, or invalid

object

error

required

Human-readable error summary

string

Example

the request could not be completed

Example

{
  "error": "authentication required: sign in and retry with a valid session or API token"
}

403

Authenticated but missing required capabilities

object

error

required

Human-readable error summary

string

Example

the request could not be completed

404

Resource not found

object

error

required

Human-readable error summary

string

Example

the request could not be completed