---
title: "Bulk Update Role Permissions"
method: PATCH
path: "/roles/{roleId}/permissions/bulk"
tags: ["Role"]
---

# Bulk Update Role Permissions

`PATCH /roles/{roleId}/permissions/bulk`

Adds and/or removes permissions from a role in a single operation. Returns all permissions with details.

## Path parameters

- `roleId` string, required

## Headers

- `tenant-id` string

## Request body

- RolePermissionBulkUpdateRequest
  - `add` string[]
  - `remove` string[]

## Response `200`

Permissions updated successfully

- PermissionResponseDto[]
  - `id` string — Permission ID
  - `resource` string — Resource name
  - `action` string — Action name
  - `description` string — Permission description
  - `createdAt` string, date-time
  - `updatedAt` string, date-time

## Other responses

- `400` — Bad request - Invalid request data or missing required fields
- `401` — Authentication required - Valid authentication token is missing or invalid
- `403` — Forbidden - User does not have the required permissions to update role permissions
- `404` — Role not found - The specified role ID does not exist
- `500` — Internal server error - An unexpected error occurred while processing the request

---

[API](https://skmtc.net/certifyos/apis/certify-api-layer.md) · [All operations](https://skmtc.net/certifyos/apis/certify-api-layer/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/certifyos/certify-api-layer/revisions/3d27e9019c7b/schema)