---
title: "PATCH /api/v1/organization/roles/{roleId}"
method: PATCH
path: "/api/v1/organization/roles/{roleId}"
tags: ["Organization Roles"]
---

# PATCH /api/v1/organization/roles/{roleId}

`PATCH /api/v1/organization/roles/{roleId}`

Update an organization role

## Path parameters

- `roleId` string, required

## Request body

- object
  - `slug` string — The slug of the role.
  - `name` string — The name of the role.
  - `description` string, nullable — The description for the role.
  - `permissions` union[] — The permissions assigned to the role.
    - union
      - object
        - `subject` 'workspace', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'create'
          - string[]
      - object
        - `subject` 'project', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'create' | 'request-access'
          - string[]
      - object
        - `subject` 'role', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'sub-organization', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'create' | 'edit' | 'delete' | 'direct-access' | 'link-group'
          - string[]
      - object
        - `subject` 'member', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'settings', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'incident-contact', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'sso', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete' | 'bypass-sso-enforcement'
          - string[]
      - object
        - `subject` 'scim', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'github-org-sync', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'github-org-sync-manual', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'ldap', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'groups', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete' | 'grant-privileges' | 'add-identities' | 'add-members' | 'remove-members' | 'remove-identities'
          - string[]
      - object
        - `subject` 'secret-scanning', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'billing', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'manage-billing'
          - string[]
      - object
        - `subject` 'identity', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete' | 'grant-privileges' | 'revoke-auth' | 'create-token' | 'get-token' | 'delete-token'
          - string[]
      - object
        - `subject` 'kms', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'audit-logs', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read'
          - string[]
      - object
        - `subject` 'project-templates', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]
      - object
        - `subject` 'app-connections', required — The entity this permission pertains to.
        - `inverted` boolean — Whether rule allows or forbids.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete' | 'connect' | 'rotate-credentials'
          - string[]
        - `conditions` object — When specified, only matching conditions will be allowed to access given resource.
          - `connectionId` union
            - string
            - object
              - …
      - object
        - `subject` 'organization-admin-console', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'access-all-projects'
          - string[]
      - object
        - `subject` 'secret-share', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'manage-settings'
          - string[]
      - object
        - `subject` 'kmip', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'proxy'
          - string[]
      - object
        - `subject` 'machine-identity-auth-template', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'list-templates' | 'edit-templates' | 'create-templates' | 'delete-templates' | 'unlink-templates' | 'attach-templates'
          - string[]
      - object
        - `subject` 'gateway', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'create-gateways' | 'list-gateways' | 'edit-gateways' | 'delete-gateways' | 'attach-gateways' | 'revoke-gateway-access'
          - string[]
      - object
        - `subject` 'gateway-pool', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'create-gateway-pools' | 'list-gateway-pools' | 'edit-gateway-pools' | 'delete-gateway-pools' | 'attach-gateway-pools'
          - string[]
      - object
        - `subject` 'relay', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'create-relays' | 'list-relays' | 'edit-relays' | 'delete-relays' | 'revoke-relay-access'
          - string[]
      - object
        - `subject` 'kmip-server', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'create-kmip-servers' | 'list-kmip-servers' | 'edit-kmip-servers' | 'delete-kmip-servers' | 'revoke-kmip-server-access'
          - string[]
      - object
        - `subject` 'email-domains', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'verify-domain' | 'delete'
          - string[]
      - object
        - `subject` 'certificate-manager', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'manage-instance' | 'manage-settings'
          - string[]
      - object
        - `subject` 'honey-tokens', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'setup'
          - string[]
      - object
        - `subject` 'oauth-clients', required — The entity this permission pertains to.
        - `action` union, required — Describe what action an entity can take.
          - 'read' | 'create' | 'edit' | 'delete'
          - string[]

## Response `200`

Default Response

- object
  - `role` object, required
    - `id` string, uuid, required
    - `name` string, required
    - `description` string, nullable
    - `slug` string, required
    - `permissions` object[], required
      - `subject` union
        - string
        - string[]
      - `action` union, required
        - string
        - string[]
      - `conditions` unknown
      - `inverted` boolean
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `orgId` string, uuid, required

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/885aef3e6c11/schema)