Change a member's role or state
Change a member's role or state
/api/v1/workspaces/{workspace_id}/members/{member_id}Changes role, state, or both. An omitted field keeps its current
value. state moves between active and suspended; suspending a
member revokes their sessions in this Workspace immediately.
Promotion to owner is permitted.
Demoting, suspending, or otherwise removing the last active owner
is refused 409 last_owner. A caller may not change their own
membership: self-demotion and self-suspension have no legitimate use
and both produce a lockout the caller cannot then undo, so they answer
422 self_membership_mutation.
Path Parameters
Header Parameters
string·min 43·max 43Session-bound CSRF token. It must exactly match the
__Host-assign_csrf cookie sent with the request.
Request Body
application/jsonResponses
stringQuoted decimal optimistic-concurrency version.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
stringviewer reads the Workspace and its work and writes nothing. admin
holds the same capabilities as owner; the only owner-reserved
operation is archiving the Workspace, and a Workspace must always
retain at least one active owner.
owneradminmemberviewerstringA membership that stops being active has its sessions in this
Workspace revoked immediately. removed retains the row and the
member's Actor so past work stays attributable.
invitedactivesuspendedremovedleftstring·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.