---
title: "Update workspace permissions."
method: POST
path: "/api/workspaces/{workspaceId}/permissions"
tags: ["Workspaces"]
---

# Update workspace permissions.

`POST /api/workspaces/{workspaceId}/permissions`

## Request

- Base URL: `https://app.airfocus.com`
- URL: `https://app.airfocus.com/api/workspaces/{workspaceId}/permissions`
- Auth: HTTP bearer

Returns effective permission for the current user.<br/>Requirements:<br/>- auth-client scopes: "workspace"<br/>- user permission: "write" or higher

## Path parameters

- `workspaceId` string, uuid, required

## Query parameters

- `actAsAdmin` boolean

## Request body

- WorkspacePermissionsUpdateRequest
  - `defaultPermission` 'comment' | 'full' | 'read' | 'write'
  - `permissions` object, required: Explicit permissions for specific users in the team.
  - `userGroupPermissions` object, required: Explicit permissions for specific teams.

## Response `200`

- 'comment' | 'full' | 'read' | 'write'

## Other responses

- `400`: If path parameters are invalid or payload is invalid or resource does not exist.
- `401`: If missing authentication token.
- `403`: If user does not have the required permission, or authenticated client does not have the required access scopes.
- `default`: If any other error happens.

---

[API](https://skmtc.dev/airfocus/apis/airfocus-api.md) · [All operations](https://skmtc.dev/airfocus/apis/airfocus-api/llms.txt) · [OpenAPI document](https://skmtc.dev/airfocus/apis/airfocus-api/revisions/fc9ccaa2ec6d?raw)