---
title: "PATCH /organizations/{organization_id}/users/{user_id}"
method: PATCH
path: "/organizations/{organization_id}/users/{user_id}"
tags: ["svc-org-management_other"]
---

# PATCH /organizations/{organization_id}/users/{user_id}

`PATCH /organizations/{organization_id}/users/{user_id}`

Update user status in an organization

## Path parameters

- `organization_id` string, required — Organization ID or label identifier
- `user_id` string, required — Identifier for API resources. A 26-char nanoid (URL/DNS safe).

## Headers

- `X-Client-Request-ID` string, uuid

## Request body

- OrgManagementUpdateOrganizationUserRequest
  - `status` 'active' | 'disabled' — Status of organization membership
  - `role` 'org_admin' | 'org_member' | 'org_viewer' — User's role in the organization

## Response `200`

User updated successfully

- OrgManagementOrganizationUser
  - `id` string, required — Identifier for API resources. A 26-char nanoid (URL/DNS safe).
  - `email` string, email — User email address
  - `role` 'org_admin' | 'org_member' | 'org_viewer', required — User's role in the organization
  - `source` string, uri, required — Identity provider issuer
  - `status` 'active' | 'disabled', required — Status of organization membership
  - `created_at` string, date-time, required — The time the entity was created in utc
  - `updated_at` string, date-time, required — The time the entity was mostly recently updated in utc
  - `permissions` OrgManagementPermissions — Permissions granted to the authenticated principal for this resource. Only populated when the 'expand[]=permissions' query parameter is provided. Keys are resource types (e.g., "organizations"), values are objects mapping permission names to boolean values indicating if the permission is granted.

## Other responses

- `400` — bad request error response when caller supplied invalid input data
- `401` — unauthorized error response when caller session is not authenticated
- `403` — forbidden error response when caller does not have permissions to a resource
- `404` — not found error response when caller does not have permission to see a resource or the resource does not exist
- `429` — rate limit exceeded error response when caller has exhausted api limits for the given time period
- `500` — internal server error response when server encountered error of its own creation
- `503` — service unavailable error when server you're attempting to reach is not available
- `default` — internal server error response when server encountered error of its own creation

---

[API](https://skmtc.net/keycardai/apis/untitled-api.md) · [All operations](https://skmtc.net/keycardai/apis/untitled-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/keycardai/untitled-api/versions/2f5033ed4491/schema)