Users
Update User Role By ID
Updates the role for the specified user ID.
Admin assignment: Only users with role admin can assign the admin role. Non-admin users receive 403 Forbidden when attempting to assign admin.
Last admin protection: The last remaining admin cannot be demoted. At least one admin must always exist.
PUT
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
User ID (UUID).
Body
application/json
User role. Master merchants use vendor with no parent_vendor_id. Sub-merchants use subvendor with parent_vendor_id set.
admin can only be assigned via PUT /api/v1/auth/user/id/{id}/role by an existing admin.
Available options:
customer, vendor, subvendor, user, admin Example:
"customer"
Response
Role updated