---
title: "Partial Update User"
method: PATCH
path: "/users/{id}/"
tags: ["User Management"]
---

# Partial Update User

`PATCH /users/{id}/`

## Path parameters

- `id` string, required — A unique Base58 value identifying this object.

## Request body

- PatchedUserUpdateRequest — Remove field user_roles if the request users doesn't have user_management high level permission
  - `id` string — A unique Base58 value identifying this object.
  - `email` string, email — Email of the user.
  - `name` string — Name of the user.
  - `title` 'ceo' | 'cto' | 'cso' | 'seceng' | 'dev' | 'devop' | 'manager' | 'other' | '' — Job title: * `ceo` - Chief Executive Officer * `cto` - Chief Technology Officer * `cso` - Chief Security Officer * `seceng` - Security engineer * `dev` - Developer * `devop` - Developer Operations * `manager` - Manager * `other` - Other
  - `is_billing_admin` boolean — If true, the user has permissions to manage billing. Read-only.
  - `changed_by` SimpleUser
    - `id` string, required — A unique Base58 value identifying this object.
    - `email` string, email — Email of the user.
    - `name` string, required — Name of the user.
  - `changed` string, date-time — Date and time of the last change, in ISO 8601 UTC format. For example, "2023-08-09T13:27:43.8208302".
  - `active` boolean — If true, the user can authenticate to Snyk API & Web to interact with apps and the API. If false, the user's access to Snyk API & Web's apps and API is blocked. Defaults to true.
  - `labels` UserLabel[]
    - `id` string, required — A unique Base58 value identifying this object.
    - `name` string, required — Name of the label. The maximum length is 255 characters.
    - `color` string — Color of the label, in RGB hexadecimal format prefixed with "#". For example, "#00FF00" for green.
    - `changed_by` SimpleUser, required
      - `id` string, required — A unique Base58 value identifying this object.
      - `email` string, email — Email of the user.
      - `name` string, required — Name of the user.
    - `changed` string, date-time, required — Date and time of the last change, in ISO 8601 UTC format. For example, "2023-08-09T13:27:43.8208302".
  - `user_roles` SimpleUserRoleResponse[]
    - `role` ObjectIdName, required
      - `id` string, required — A unique Base58 value identifying this object.
      - `name` string, required
    - `scope` DPOScopeResponse, required
      - `tier` 'account' | 'team' | 'scope', required — * `account` - account * `team` - team * `scope` - scope
      - `team` ObjectIdName
        - `id` string, required — A unique Base58 value identifying this object.
        - `name` string, required
      - `target` ObjectIdName
        - `id` string, required — A unique Base58 value identifying this object.
        - `name` string, required
  - `last_login` string, date-time, nullable — Date and time of the last login of the user, in ISO 8601 UTC format. <br>For example, "2023-08-09T13:27:43.8208302"
  - `is_apiuser` boolean — If true, it is an app that interacts with Snyk API & Web through the API. If false, it is a human who interacts with Snyk API & Web through our web interface. Defaults to false."
  - `mfa_enabled` boolean — If true, the user has MFA (Multi-Factor Authentication) enabled at login. Defaults to true.

## Response `200`

- UserResponse — Remove field user_roles if the request users doesn't have user_management high level permission
  - `id` string, required — A unique Base58 value identifying this object.
  - `email` string, email, required — Email of the user.
  - `name` string, required — Name of the user.
  - `title` 'ceo' | 'cto' | 'cso' | 'seceng' | 'dev' | 'devop' | 'manager' | 'other' | '' — Job title: * `ceo` - Chief Executive Officer * `cto` - Chief Technology Officer * `cso` - Chief Security Officer * `seceng` - Security engineer * `dev` - Developer * `devop` - Developer Operations * `manager` - Manager * `other` - Other
  - `is_billing_admin` boolean, required — If true, the user has permissions to manage billing. Read-only.
  - `changed_by` SimpleUser, required
    - `id` string, required — A unique Base58 value identifying this object.
    - `email` string, email — Email of the user.
    - `name` string, required — Name of the user.
  - `changed` string, date-time, required — Date and time of the last change, in ISO 8601 UTC format. For example, "2023-08-09T13:27:43.8208302".
  - `active` boolean — If true, the user can authenticate to Snyk API & Web to interact with apps and the API. If false, the user's access to Snyk API & Web's apps and API is blocked. Defaults to true.
  - `labels` UserLabel[], required
    - `id` string, required — A unique Base58 value identifying this object.
    - `name` string, required — Name of the label. The maximum length is 255 characters.
    - `color` string — Color of the label, in RGB hexadecimal format prefixed with "#". For example, "#00FF00" for green.
    - `changed_by` SimpleUser, required
      - `id` string, required — A unique Base58 value identifying this object.
      - `email` string, email — Email of the user.
      - `name` string, required — Name of the user.
    - `changed` string, date-time, required — Date and time of the last change, in ISO 8601 UTC format. For example, "2023-08-09T13:27:43.8208302".
  - `user_roles` SimpleUserRoleResponse[]
    - `role` ObjectIdName, required
      - `id` string, required — A unique Base58 value identifying this object.
      - `name` string, required
    - `scope` DPOScopeResponse, required
      - `tier` 'account' | 'team' | 'scope', required — * `account` - account * `team` - team * `scope` - scope
      - `team` ObjectIdName
        - `id` string, required — A unique Base58 value identifying this object.
        - `name` string, required
      - `target` ObjectIdName
        - `id` string, required — A unique Base58 value identifying this object.
        - `name` string, required
  - `last_login` string, date-time, nullable, required — Date and time of the last login of the user, in ISO 8601 UTC format. <br>For example, "2023-08-09T13:27:43.8208302"
  - `is_apiuser` boolean, required — If true, it is an app that interacts with Snyk API & Web through the API. If false, it is a human who interacts with Snyk API & Web through our web interface. Defaults to false."
  - `mfa_enabled` boolean, required — If true, the user has MFA (Multi-Factor Authentication) enabled at login. Defaults to true.

## Other responses

- `400`
- `401`
- `404`
- `500`

---

[API](https://skmtc.net/probely/apis/snyk-api-web-s-api-reference-documentation.md) · [All operations](https://skmtc.net/probely/apis/snyk-api-web-s-api-reference-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/probely/snyk-api-web-s-api-reference-documentation/versions/e29879bff01b/schema)