Update user Administrative permissions (internal/domain)
Users
Update Admin Permissions
Syteca ACB REST API endpoint to update a user’s administrative permissions — User Management, Privileged Accounts Management, Tenant Management, and other admin capabilities.
PUT
Update user Administrative permissions (internal/domain)
Updates a user’s administrative permissions — the global capabilities a user holds (e.g. User Management, Privileged Accounts Management, Tenant Management, System Configuration). This is replacement semantics: the supplied set of permissions becomes the user’s full set.
For ACB deployments updated from a version prior to 1.2, switch to the
https://{hostname}/EkranACB server in the Playground.Permissions required
The Access Token must be issued to a user with the administrative User Management permission.Replacement semantics — read before write
This endpoint replaces the user’s administrative permissions with the supplied set. To add or remove individual permissions, first call Get user details to read the current set, then PUT the desired modified set.Common use cases
- Role promotion — A user moves into an admin role; grant administrative permissions programmatically.
- Periodic permission audit — Quarterly automation reads, validates, and corrects each user’s permissions against an external policy source of truth.
- Compliance remediation — Bulk-remove a permission from all users who shouldn’t have it after a policy change.
Errors
See Status codes. Common errors:- 400 Bad Request — invalid permission identifier.
- 403 Forbidden — caller lacks User Management permission.
- 404 Not Found — user doesn’t exist.
- 409 Conflict — attempting to remove User Management from the last holder.
Related
Get user details
Read current permissions before updating.
Update client access
Modify per-Client access rules.
Update user access
Modify User-to-User access rules.
Administrative permissions
List of all admin permissions.
Authorizations
Access token for authentication
Path Parameters
ID of the user to update Administrative permissions
Body
application/json
List of administrative permission identifiers to assign directly to the user
Administrative permission identifier
Response
Administrative permissions for a user updated successfully