Update user Client Access permissions (internal/domain)
Users
Update Client Access Permissions
Syteca ACB REST API endpoint to update which Syteca Clients a user can see and access — defines monitoring scope by Client, Client group, or rule pattern.
PUT
Update user Client Access permissions (internal/domain)
Updates the user’s Client access rules — defining which Syteca Clients (monitored endpoints) the user can see sessions for and manage. Rules can target individual Clients, Client groups, or pattern-based selections. Replacement semantics: the supplied rules become the user’s full Client access ruleset.
For ACB deployments updated from a version prior to 1.2, switch to the
https://{hostname}/EkranACB server in the Playground.Permissions required
The Access Token must be issued to a user with the administrative User Management permission.Replacement semantics
This endpoint replaces the user’s Client access ruleset. To add or remove individual rules, first call Get user details to read the current ruleset, then PUT the desired modified set.Common use cases
- Team-based Client scoping — When a user joins a team, automatically grant access to that team’s Clients via API rather than manual admin UI work.
- Compliance segmentation — Programmatically enforce that PCI scope users can only see PCI-tagged Clients.
- MSSP tenant scoping — In multi-tenant deployments, automatically restrict each customer’s analysts to their tenant’s Clients.
Errors
See Status codes. Common errors:- 400 Bad Request — invalid rule structure or reference to a non-existent Client / Client group.
- 403 Forbidden — caller lacks User Management permission.
- 404 Not Found — user doesn’t exist.
Related
Client permissions
UI equivalent and full rule semantics.
Get user details
Read current ruleset before updating.
Update user access
Manage User-to-User access instead.
Update admin permissions
Manage global admin capabilities.
Authorizations
Access token for authentication
Path Parameters
ID of the user to update Client Access permissions
Body
application/json
List of direct Client Access rules
Response
User Access permissions for a user updated successfully