---
title: "Creates or updates a permission for a project role."
method: POST
path: "/projectroles/{projectRoleId}/permissions"
tags: ["projectRoles"]
---

# Creates or updates a permission for a project role.

`POST /projectroles/{projectRoleId}/permissions`

<Check title="Required Permissions" icon="key">The user must be an admin or have `project-manage-config:write` permissions.</Check>

## Path parameters

- `projectRoleId` string, uuid, required

## Headers

- `Authorization` string, required

## Request body

- PermissionOfProjectRoleForm
  - `feature` string, nullable — The feature these permissions belong to.
  - `accessLevels` string[], nullable — The access levels applied to this feature.

## Response `200`

OK

- PermissionOfProjectRole
  - `feature` string, nullable — The feature these permissions belong to.
  - `accessLevels` string[], nullable — The access levels applied to this feature.
  - `id` string, uuid — The id of the permission.
  - `createdOn` string, date-time — The date this entity was created.
  - `updatedOn` string, date-time — The date this entity was last modified.

## Other responses

- `400` — Bad Request
- `404` — Not Found

---

[API](https://skmtc.net/awork-io/apis/api-v1-reference.md) · [All operations](https://skmtc.net/awork-io/apis/api-v1-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/awork-io/api-v1-reference/versions/f784a53f60df/schema)