---
title: "POST /update-permission"
method: POST
path: "/update-permission"
tags: ["Permission API"]
---

# POST /update-permission

`POST /update-permission`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/update-permission`
- Auth: none declared

update permission

## Query parameters

- `id` string, required

## Request body

- ObjectPermission
  - `actions` string[]
  - `assetTags` string[]
  - `assets` string[]
  - `clientIps` string[]
  - `createdTime` string
  - `description` string
  - `displayName` string
  - `endTime` string
  - `groups` string[]
  - `isEnabled` boolean
  - `name` string
  - `owner` string
  - `startTime` string
  - `updatedTime` string
  - `users` string[]

## Response `200`

The Response object

- ControllersResponse
  - `data` unknown
  - `data2` unknown
  - `msg` string
  - `status` string

## Changes

- **2026-10-21** `a58052c53ec0`: 1 info
  - endpoint added
- **2026-10-21** `104d8d920b38`: 1 breaking
  - api path removed without deprecation

[Operation history](https://skmtc.dev/casvisor/apis/casvisor-api/changes/update-permission/post.md)

---

[API](https://skmtc.dev/casvisor/apis/casvisor-api.md) - [All operations](https://skmtc.dev/casvisor/apis/casvisor-api/llms.txt) - [OpenAPI document](https://skmtc.dev/casvisor/apis/casvisor-api/revisions/9c4dc1ebadbe?raw)