Skip to main content
PATCH
Change an Organization member's role

Authorizations

Authorization
string
header
required

Microsoft Entra application token issued by the caller's Organization tenant for this multitenant API. Request the .default scope and assign the application the required GV.APIReader, GV.APIContributor, or GV.APIOwner role.

Headers

If-Match
string
required

Exact strong ETag from the current resource. Weak validators, wildcards, and tag lists are rejected.

Maximum string length: 1024

Path Parameters

memberUuid
string<uuid>
required

The member's memberUuid.

Body

application/json
role
enum<string>
required

Role to grant. A changed role sets roleSource to invited, so the Organization governs it.

Available options:
reader,
contributor,
owner

Response

Member role updated.

createdAt
string
required
displayName
string
required
email
string | null
required

Email from the person's Microsoft Entra account, or null when it has none.

entraRole
enum<string> | null
required

Role from the member's Entra application role assignment at their latest sign-in, if any.

Available options:
reader,
contributor,
owner
externalSubject
string<uuid>
required

The person's Microsoft Entra object ID in the Organization's directory.

memberUuid
string<uuid>
required
revision
integer
required

Version of the membership; each role or status change increases it. The ETag header of GET /api/v1/organization-members/{memberUuid} is built from it.

Required range: x >= 1
role
enum<string>
required

Role the member holds. While roleSource is entra, it follows the Entra assignment. An active member acts with the higher of this role and the Entra application role on their token.

Available options:
reader,
contributor,
owner
roleSource
enum<string>
required

Whether an invitation or Owner edit governs the role, or an Entra application role assignment alone.

Available options:
invited,
entra
status
enum<string>
required

disabled means an Owner removed the member, or the member joined through a Microsoft Entra assignment that is gone. A disabled member cannot call the API.

Available options:
active,
disabled
updatedAt
string
required
userPrincipalName
string
required

The person's Microsoft Entra sign-in name.