Skip to main content
PUT
Update User Access permissions (internal/domain)
Updates the user’s User-to-User access rules — defining which other Syteca users this user can see and manage. Distinct from Client access (which targets monitored endpoints): this controls administrative visibility, used when delegated admins or team leads need to manage their own teams without seeing the rest of the organization.
For ACB deployments updated from a version prior to 1.2, switch to the https://{hostname}/EkranACB server in the Playground.

Permissions required

The Access Token must be issued to a user with the administrative User Management permission.

Replacement semantics

This endpoint replaces the user’s User-to-User access ruleset. To add or remove individual rules, first call Get user details to read the current ruleset, then PUT the desired modified set.

Common use cases

  • Delegated team management — Team leads can view and modify only their own team members’ Syteca accounts.
  • MSSP partition — Each MSSP customer’s senior analyst can manage only their own tenant’s users.
  • Org-chart automation — Sync User-to-User access rules from your HRIS / org chart so management hierarchies in Syteca mirror reporting lines.

Errors

See Status codes. Common errors:
  • 400 Bad Request — invalid rule structure or reference to a non-existent user.
  • 403 Forbidden — caller lacks User Management permission.
  • 404 Not Found — user doesn’t exist.

Update client access

Update endpoint-visibility rules instead.

Update admin permissions

Manage global admin capabilities.

Get user details

Read current ruleset before updating.

Add to user group

Modify group membership instead.

Authorizations

Authorization
string
header
required

Access token for authentication

Path Parameters

userId
integer<int32>
required

ID of the user to update User Access permissions

Body

application/json
user_access_rules
object[] | null

Direct User Access rules for the user

Response

User Access permissions for a user updated successfully