Skip to content

Partial update of membership role

PATCH
/memberships/{membershipId}

Partial update — send only the fields to change. Changes the role (viewer, author, reviewer, admin) for an existing membership. Requires admin role on the parent project. Cannot demote the last admin on a project.

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type
HTTP (token)

Request Body

application/json
JSON
{
  
"membership": {
  
  
"role": "reviewer"
  
}
}

Responses

Membership updated

application/json
JSON
{
  
"toast": {
  
  
"title": "Role updated.",
  
  
"message": [
  
  
  
"Jane Doe is now a reviewer."
  
  
],
  
  
"variant": "success"
  
}
}

Playground

Server
Authorization
Body

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)