Skip to content
Open appSchedule a pilot

Update user role in firm

PUT/api/v1/advisory-firms/{firm_id}/users/{user_id}/role

Update a user's role in an advisory firm.

Only firm owners (or superusers) may grant the owner role or change an existing owner's role, and the firm's last owner cannot be demoted.

Operation ID: update_user_role_in_firm·View as markdown·OpenAPI slice

Authentication

Bearer token authentication. Pass your DayZero API token in the Authorization header and the target business UUID in x-business-id.

Parameters

Path

firm_idstringrequired
user_idstringrequired

Request body

Schema: UserRoleUpdateRequest

rolestringrequired

New role for the user. owner: Full access + billing + user management. admin: Full access + user management (no billing). member: Access to assigned businesses only.

One of: owner, admin, member, client

Responses

200Successful Response

Schema: SuccessEnvelope_UserFirmAssociationResponse_

successboolean
messagestring
codestring
dataUserFirmAssociationResponse

422Validation Error

Schema: ErrorResponse

errorstringrequired

Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.

messagestringrequired

Human-readable explanation, safe to show to end users.

codestringrequired

Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).

request_idstring

Correlation id for support requests. Echoes the x-request-id request header when one was supplied.

errorsobject

Field-level validation messages keyed by field name. Present on 400/422 validation failures only.