Update administrator permissions
/administrators/{administrator_id}/permissionsReplaces the administrator's role, granular permissions, and product access in a single operation. Permissions not granted in permissions are disabled, and product access is set to exactly the products listed in product_ids. If any part of the request is rejected, no changes are applied.
Permission keys that do not exist in the permission catalog return validation_failed.
The API cannot assign the root or master_admin role, and every permission granted must be part of the selected role's default permissions. Requests that exceed these limits return delegation_limit_exceeded.
To avoid overwriting a newer version, send the ETag returned by the retrieve administrator operation in the If-Match header.
Autonomous mode: the API credential secret, sent as a bearer token. Credential secrets are identified by a fixed prefix.
In: header
Path Parameters
Header Parameters
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
curl -X PUT "https://example.com/administrators/string/permissions" \ -H "Content-Type: application/json" \ -d '{ "permissions": {}, "role": "string" }'{ "data": { "object": "administrator_permissions", "permissions": {}, "product_ids": [ "string" ], "revision": "string", "role": "root" }}