---
title: "Bulk Operations on API User Roles"
method: POST
path: "/api-user-roles/bulk/operations/"
tags: ["API Users"]
---

# Bulk Operations on API User Roles

`POST /api-user-roles/bulk/operations/`

Add/update/delete multiple API user roles in one operation.

## Request body

- UserRoleOperationsRequest
  - `create` UserRoleCreateRequest[]
    - `user` ObjectId, required
      - `id` string, required — A unique Base58 value identifying this object.
    - `role` ObjectId, required
      - `id` string, required — A unique Base58 value identifying this object.
    - `scope` DPOScopeRequest, required
      - `tier` 'account' | 'team' | 'target', required — * `account` - account * `team` - team * `target` - target
      - `team` ObjectId
        - `id` string, required — A unique Base58 value identifying this object.
      - `target` ObjectId
        - `id` string, required — A unique Base58 value identifying this object.
  - `update` UserRole[]
    - `id` string, required — A unique Base58 value identifying this object.
    - `user` SimpleUser, required
      - `id` string, required — A unique Base58 value identifying this object.
      - `email` string, email — Email of the user.
      - `name` string, required — Name of the user.
    - `role` Role, required
      - `id` string, required — A unique Base58 value identifying this object.
      - `name` string, required — Role's name.
      - `permissions` HighLevelPermission[]
        - `id` string, required — Textual identifier.
        - `name` string, required — Permission name.
      - `custom` boolean, required
      - `description` string, nullable — Short description.
    - `scope` DPOScopeSchema, required
      - `tier` string, required
      - `target` DPOTargetSchema
        - `id` string, required — A unique Base58 value identifying this object.
        - `name` string, required
        - `url` string, uri, required — Target URL.
      - `team` DPOTeamSchema
        - `id` string, required — A unique Base58 value identifying this object.
        - `name` string, required
  - `delete` UserRoleDestroyRequest[]
    - `id` string, required

## Response `200`

- UserRoleOperationsResponse
  - `create` UserRole[]
    - `id` string, required — A unique Base58 value identifying this object.
    - `user` SimpleUser, required
      - `id` string, required — A unique Base58 value identifying this object.
      - `email` string, email — Email of the user.
      - `name` string, required — Name of the user.
    - `role` Role, required
      - `id` string, required — A unique Base58 value identifying this object.
      - `name` string, required — Role's name.
      - `permissions` HighLevelPermission[]
        - `id` string, required — Textual identifier.
        - `name` string, required — Permission name.
      - `custom` boolean, required
      - `description` string, nullable — Short description.
    - `scope` DPOScopeSchema, required
      - `tier` string, required
      - `target` DPOTargetSchema
        - `id` string, required — A unique Base58 value identifying this object.
        - `name` string, required
        - `url` string, uri, required — Target URL.
      - `team` DPOTeamSchema
        - `id` string, required — A unique Base58 value identifying this object.
        - `name` string, required
  - `update` UserRoleUpdateRequest[]
    - `id` string, required
    - `user` ObjectId, required
      - `id` string, required — A unique Base58 value identifying this object.
    - `role` ObjectId, required
      - `id` string, required — A unique Base58 value identifying this object.
    - `scope` DPOScopeRequest, required
      - `tier` 'account' | 'team' | 'target', required — * `account` - account * `team` - team * `target` - target
      - `team` ObjectId
        - `id` string, required — A unique Base58 value identifying this object.
      - `target` ObjectId
        - `id` string, required — A unique Base58 value identifying this object.
  - `delete` IDList
    - `ids` string[], required — List of object IDs.

## Other responses

- `400`
- `401`
- `500`

---

[API](https://skmtc.net/probely/apis/snyk-api-web-s-api-reference-documentation.md) · [All operations](https://skmtc.net/probely/apis/snyk-api-web-s-api-reference-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/probely/snyk-api-web-s-api-reference-documentation/versions/e29879bff01b/schema)