---
title: "Update user rights"
method: PUT
path: "/users/{user_id}/rights"
---

# Update user rights

`PUT /users/{user_id}/rights`

Update the specified user rights

## Path parameters

- `user_id` integer, required

## Request body

- object
  - `role` 'admin' | 'default' | 'team_only', required — The role to assign to the user.
  - `read_only` integer — Optional parameter. 0 or 1 integer indicating if the user is has only read rights. If not set this field will not be updated.
  - `permissions` object
    - `can_ignore_or_snooze_issues` integer — Optional parameter. 0 or 1 integer indicating if the user can ignore or snooze issues. If not set this field will not be updated.
    - `can_change_issue_severity` integer — Optional parameter. 0 or 1 integer indicating if the user can change issue severity. If not set this field will not be updated.
    - `can_manage_teams` integer — Optional parameter. 0 or 1 integer indicating if the user can manage teams. If not set this field will not be updated.
    - `can_manage_clouds` integer — Optional parameter. 0 or 1 integer indicating if the user can manage clouds. If not set this field will not be updated.
    - `can_manage_containers` integer — Optional parameter. 0 or 1 integer indicating if the user can manage containers. If not set this field will not be updated.
    - `can_manage_domains` integer — Optional parameter. 0 or 1 integer indicating if the user can manage domains. If not set this field will not be updated.
    - `can_manage_repos` integer — Optional parameter. 0 or 1 integer indicating if the user can manage repositories. If not set this field will not be updated.
    - `can_manage_pentests` integer — Optional parameter. 0 or 1 integer indicating if the user can manage pentests and code audits. If not set this field will not be updated.
    - `can_manage_code_quality` integer — Optional parameter. 0 or 1 integer indicating if the user can manage code quality. If not set this field will not be updated.
    - `can_export_data` integer — Optional parameter. 0 or 1 integer indicating if the user can export data. If not set this field will not be updated.
    - `can_manage_endpoint_protection` integer — Optional parameter. 0 or 1 integer indicating if the user can manage endpoint protection. If not set this field will not be updated.

## Response `200`

The user rights are successfully updated

- object
  - `success` integer — The integer 1 indicating success

---

[API](https://skmtc.net/aikido/apis/authorization.md) · [All operations](https://skmtc.net/aikido/apis/authorization/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aikido/authorization/revisions/5445e7c21137/schema)