---
title: "Update a role binding"
method: PATCH
path: "/v2/role-bindings/{binding_id}"
tags: ["Role Bindings"]
---

# Update a role binding

`PATCH /v2/role-bindings/{binding_id}`

Update an existing role binding by changing its assigned role.

**Payload Requirements**
- `role_id` is required and replaces the currently assigned role.
- Only `role_id` is mutable. The binding identity, principal, resource,
  and timestamps stay the same.
- System-managed fields (`id`, `user_id`, `resource_type`,
  `resource_id`, `created_at`, `updated_at`) are not accepted in the
  request body.

**Valid example**
```json
{
  "role_id": "Um9sZToyOmRLMjQ="
}
```

**Invalid example**
```json
{
  "role_id": "Um9sZToyOmRLMjQ=",
  "user_id": "VXNlcjoxOmxQZzI="
}
```
This fails because only `role_id` can be updated on an existing binding.

<Note>This endpoint is in beta, read more [here](https://arize.com/docs/ax/rest-reference#api-version-stages).</Note>

## Path parameters

- `binding_id` string, required — A universally unique identifier (base64-encoded opaque string).

## Request body

- UpdateRoleBindingRequest
  - `role_id` string, required — A universally unique identifier (base64-encoded opaque string).

## Response `200`

A role binding object.

- RoleBinding
  - `id` string, required — Unique identifier for the role binding.
  - `role_id` string, required — A universally unique identifier (base64-encoded opaque string).
  - `user_id` string, required — A universally unique identifier (base64-encoded opaque string).
  - `resource_type` 'SPACE' | 'PROJECT', required — Resource type for the binding. Only `SPACE` and `PROJECT` are supported for single-binding CRUD. `resource_id` must encode the same resource type.
  - `resource_id` string, required — A universally unique identifier (base64-encoded opaque string).
  - `created_at` string, date-time, required — Timestamp when the binding was created.
  - `updated_at` string, date-time, required — Timestamp when the binding was last updated.

## Other responses

- `400` — Invalid request
- `401` — Authentication is required
- `404` — Not found
- `409` — Resource conflict
- `422` — Unprocessable entity
- `429` — Rate limit exceeded

---

[API](https://skmtc.net/arize-ai/apis/arize-rest-api.md) · [All operations](https://skmtc.net/arize-ai/apis/arize-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/arize-ai/arize-rest-api/versions/1e87d8a4cf69/schema)