POST
Set member extra permissions
Organization space User accounts only For: Administrator · Permission: organization_members.update Conditions
  • permissions must be present (an empty list is allowed) with at most 5 entries.
  • Each id must be the group identifier of a permission that exists for the organization space, without duplicates; otherwise the call is refused.
  • expires_at, when sent, must be a date later than now.
What else happens
  • The call replaces the whole set of direct permissions the user holds in the organization space: permissions not listed are removed, and an empty list removes them all.
  • The member’s profile assignments and active state are not changed.
  • Each permission applies until its expires_at when given.
Part of Grant individual extra permissions.

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

member
string
required

Identifier of the organization member, meaning the membership record of the person in the organization, not the user identifier (27-character KSUID string).

Body

application/json
permissions
object[]
required

Complete list of extra permissions to set. Required but may be empty, with at most 5 entries. It replaces the extra permissions held until now.

Maximum array length: 5

Response

OrganizationMemberResource

organization_id

Identifier of the organization the record belongs to.

id

Identifier of the organization membership record (27-character KSUID string); this is what the {member} path parameters expect.

user_id

Identifier of the user account behind the member (27-character KSUID string).

pseudo

Display name of the member in this space; unique within it, ignoring case. May be null when none was set.

phone_number

Phone number of the underlying account; null when the account has none.

email

Email address of the underlying account; null when the account has none.

is_active
boolean

Whether the member can act in this space. Deactivated members keep their record.

created_at

Date and time the record was created (ISO 8601, UTC).

updated_at

Date and time the record was last changed (ISO 8601, UTC).