---
title: "Update an end-user account"
method: PUT
path: "/v2/{tenant_slug}/enduseraccounts/{website_account_id}"
tags: ["End User Accounts"]
---

# Update an end-user account

`PUT /v2/{tenant_slug}/enduseraccounts/{website_account_id}`

Update mutable fields for an end-user account.

## Path parameters

- `tenant_slug` string, required — Tenant DNS slug (lowercase letters, digits, and hyphens; 3-100 characters).
- `website_account_id` string, required — Identifier of the end-user's website account; the literal string `UNKNOWN` addresses accounts whose website identifier could not be resolved.

## Request body

- EndUserAccountPutRequestModel
  - `crm_account_id` string, nullable — Optional identifier linking this account to a record in the tenant's CRM system
  - `is_blocked` boolean, nullable — Pass `true` to block the account from accessing services; omit to leave unchanged
  - `is_quarantined` boolean, nullable — Pass `true` to quarantine the account pending manual review; omit to leave unchanged
  - `is_fraudulent` boolean, nullable — Pass `true` to mark the account as fraudulent; omit to leave unchanged
  - `last_session_updated_on` string, date-time, nullable — Time the most recent session for this account was updated (RFC 3339 / ISO 8601 UTC)

## Response `200`

Successful Response

- APIResponseEndUserAccountSingleResponse
  - `data` EndUserAccountSingleResponse, required
    - `tenant_id` string, uuid, required — Identifier of the tenant that owns this account
    - `website_account_id` string, required — Identifier of the end user's website account
    - `crm_account_id` string, nullable — Optional identifier linking this account to a record in the tenant's CRM system
    - `is_blocked` boolean, required — True when the account is blocked from accessing services
    - `is_quarantined` boolean — True when the account is quarantined pending manual review
    - `is_fraudulent` boolean — True when the account has been confirmed as fraudulent
    - `last_session_updated_on` string, date-time, nullable — Time the most recent session for this account was updated (RFC 3339 / ISO 8601 UTC)

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `422` — Request Validation Failed
- `500` — Internal Server Error

---

[API](https://skmtc.net/urbanfox/apis/urbanfox-customer-api.md) · [All operations](https://skmtc.net/urbanfox/apis/urbanfox-customer-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/urbanfox/urbanfox-customer-api/revisions/e99fd9028c60/schema)