Update Role Assignment for a User
Update an existing role assignment for a user. This replaces the current role with a new role.
Restrictions:
- Organization admins cannot demote themselves (change their own role from account_admin to a non-admin role)
- The last organization admin in an account cannot be demoted
Authorizations
JWT Bearer token authentication
Path Parameters
The account identifier (external account ID)
"my-company-account"
The new role identifier to assign
"project_admin"
The assignee identifier (external user ID)
"john.doe"
Query Parameters
Project identifier for project-scoped role assignments
"project-alpha"
Body
The type of assignee
USER, IAMGROUP The current role identifier being replaced
"project_reader"
Project identifier (for project-scoped roles)
"project-beta"
The status of the role assignment
ACTIVE, INACTIVE Response
Role assignment successfully updated
Assignee identifier (external user/group ID)
"jane.smith"
The type of assignee
USER, IAMGROUP Role identifier
"account_admin"
The status of the role assignment
ACTIVE, INACTIVE 