---
title: "Update Permission Group"
method: PUT
path: "/v1/permissions/{permissionGroupId}"
tags: ["Permission Groups"]
---

# Update Permission Group

`PUT /v1/permissions/{permissionGroupId}`

## Request

- Base URL: `https://api.configcat.com`
- URL: `https://api.configcat.com/v1/permissions/{permissionGroupId}`
- Auth: HTTP basic
- TypeScript: <https://skmtc.dev/configcat/apis/configcat-public-management-api/docs/v1/permissions/:permissionGroupId/put.ts> (a function with typed inputs; its response is checked against the schema)

This endpoint updates a Permission Group identified by the `permissionGroupId` parameter.

## Path parameters

- `permissionGroupId` integer, required

## Request body

- UpdatePermissionGroupRequest
  - `name` string, nullable: Name of the Permission Group.
  - `canManageMembers` boolean, nullable: Group members can manage team members.
  - `canCreateOrUpdateConfig` boolean, nullable: Group members can create/update Configs.
  - `canDeleteConfig` boolean, nullable: Group members can delete Configs.
  - `canCreateOrUpdateEnvironment` boolean, nullable: Group members can create/update Environments.
  - `canDeleteEnvironment` boolean, nullable: Group members can delete Environments.
  - `canCreateOrUpdateSetting` boolean, nullable: Group members can create/update Feature Flags and Settings.
  - `canTagSetting` boolean, nullable: Group members can attach/detach Tags to Feature Flags and Settings.
  - `canDeleteSetting` boolean, nullable: Group members can delete Feature Flags and Settings.
  - `canCreateOrUpdateTag` boolean, nullable: Group members can create/update Tags.
  - `canDeleteTag` boolean, nullable: Group members can delete Tags.
  - `canManageWebhook` boolean, nullable: Group members can create/update/delete Webhooks.
  - `canUseExportImport` boolean, nullable: Group members can use the export/import feature.
  - `canManageProductPreferences` boolean, nullable: Group members can update Product preferences.
  - `canManageIntegrations` boolean, nullable: Group members can add and configure integrations.
  - `canViewSdkKey` boolean, nullable: Group members has access to SDK keys.
  - `canRotateSdkKey` boolean, nullable: Group members can rotate SDK keys.
  - `canCreateOrUpdateSegments` boolean, nullable: Group members can create/update Segments.
  - `canDeleteSegments` boolean, nullable: Group members can delete Segments.
  - `canViewProductAuditLog` boolean, nullable: Group members has access to audit logs.
  - `canViewProductStatistics` boolean, nullable: Group members has access to product statistics.
  - `canDisable2FA` boolean, nullable: Group members can disable two-factor authentication for other members.
  - `accessType` 'readOnly' | 'full' | 'custom': Represent the Feature Management permission.
  - `newEnvironmentAccessType` 'full' | 'readOnly' | 'none': Represent the environment specific Feature Management permission.
  - `environmentAccesses` CreateOrUpdateEnvironmentAccessModel[], nullable: List of environment specific permissions.
    - `environmentId` string, uuid: Identifier of the Environment.
    - `environmentAccessType` 'full' | 'readOnly' | 'none': Represent the environment specific Feature Management permission.
  - `approvalPermissionType` 'cannotApprove' | 'canApproveOthers' | 'canBypassApproval' | 'custom': Represents the permission group level change request approval permission.
  - `newEnvironmentApprovalPermissionType` 'cannotApprove' | 'canApproveOthers' | 'canBypassApproval': Represents the environment specific change request approval permission.
  - `environmentApprovalPermissions` CreateOrUpdateEnvironmentApprovalPermissionModel[], nullable: List of environment specific change request approval permissions.
    - `environmentId` string, uuid: Identifier of the Environment.
    - `environmentApprovalPermissionType` 'cannotApprove' | 'canApproveOthers' | 'canBypassApproval': Represents the environment specific change request approval permission.

## Response `200`

- PermissionGroupModel
  - `permissionGroupId` integer, required: Identifier of the Permission Group.
  - `name` string, required: Name of the Permission Group.
  - `canManageMembers` boolean, required: Group members can manage team members.
  - `canCreateOrUpdateConfig` boolean, required: Group members can create/update Configs.
  - `canDeleteConfig` boolean, required: Group members can delete Configs.
  - `canCreateOrUpdateEnvironment` boolean, required: Group members can create/update Environments.
  - `canDeleteEnvironment` boolean, required: Group members can delete Environments.
  - `canCreateOrUpdateSetting` boolean, required: Group members can create/update Feature Flags and Settings.
  - `canTagSetting` boolean, required: Group members can attach/detach Tags to Feature Flags and Settings.
  - `canDeleteSetting` boolean, required: Group members can delete Feature Flags and Settings.
  - `canCreateOrUpdateTag` boolean, required: Group members can create/update Tags.
  - `canDeleteTag` boolean, required: Group members can delete Tags.
  - `canManageWebhook` boolean, required: Group members can create/update/delete Webhooks.
  - `canUseExportImport` boolean, required: Group members can use the export/import feature.
  - `canManageProductPreferences` boolean, required: Group members can update Product preferences.
  - `canManageIntegrations` boolean, required: Group members can add and configure integrations.
  - `canViewSdkKey` boolean, required: Group members has access to SDK keys.
  - `canRotateSdkKey` boolean, required: Group members can rotate SDK keys.
  - `canCreateOrUpdateSegments` boolean, required: Group members can create/update Segments.
  - `canDeleteSegments` boolean, required: Group members can delete Segments.
  - `canViewProductAuditLog` boolean, required: Group members has access to audit logs.
  - `canViewProductStatistics` boolean, required: Group members has access to product statistics.
  - `canDisable2FA` boolean, required: Group members can disable two-factor authentication for other members.
  - `accessType` 'readOnly' | 'full' | 'custom', required: Represent the Feature Management permission.
  - `newEnvironmentAccessType` 'full' | 'readOnly' | 'none', required: Represent the environment specific Feature Management permission.
  - `environmentAccesses` PermissionGroupEnvironmentAccessModel[], required: List of environment specific permissions.
    - `environmentId` string, uuid, required: Identifier of the Environment.
    - `name` string, required: Name of the Environment.
    - `color` string, nullable, required: Color of the Environment.
    - `description` string, nullable, required: Description of the Environment.
    - `order` integer, required: The order of the Environment represented on the ConfigCat Dashboard.
    - `reasonRequired` boolean, required: Determines whether a mandatory reason must be given every time when the Feature Flags or Settings in the given Environment are saved.
    - `approveRequired` boolean, required: Determines whether changes must be approved before they are applied in the given Environment.
    - `environmentAccessType` 'full' | 'readOnly' | 'none', required: Represent the environment specific Feature Management permission.
  - `product` ProductModel, required: Details of the Product.
    - `organization` OrganizationModel, required: Details of the Organization.
      - `organizationId` string, uuid, required: Identifier of the Organization.
      - `name` string, required: Name of the Organization.
    - `productId` string, uuid, required: Identifier of the Product.
    - `name` string, required: Name of the Product.
    - `description` string, nullable, required: Description of the Product.
    - `order` integer, required: The order of the Product represented on the ConfigCat Dashboard. Determined from an ascending sequence of integers.
    - `reasonRequired` boolean, required: Determines whether a mandatory reason must be given every time when the Feature Flags or Settings within a Product are saved.
    - `approveRequired` boolean, required: Determines whether changes must be approved before they are applied within a Product.
  - `approvalPermissionType` 'cannotApprove' | 'canApproveOthers' | 'canBypassApproval' | 'custom', required: Represents the permission group level change request approval permission.
  - `newEnvironmentApprovalPermissionType` 'cannotApprove' | 'canApproveOthers' | 'canBypassApproval', required: Represents the environment specific change request approval permission.
  - `environmentApprovalPermissions` PermissionGroupEnvironmentApprovalPermissionModel[], required: List of environment specific approval permissions.
    - `environmentId` string, uuid, required: Identifier of the Environment.
    - `environmentApprovalPermissionType` 'cannotApprove' | 'canApproveOthers' | 'canBypassApproval', required: Represents the environment specific change request approval permission.

## Other responses

- `400`: Bad request.
- `404`: Not found.
- `429`: Too many requests. In case of the request rate exceeds the rate limits.

## Changes

- **2026-08-04** `6b4d53bc1455`: 9 breaking, 3 warning, 12 info
  - removed the enum value `canBypassApproves` of the request property `approvalPermissionType/allOf[#/components/schemas/ApprovalPermissionType]/` (media type: application/json)
  - removed the enum value `canBypassApproves` of the request property `approvalPermissionType/allOf[#/components/schemas/ApprovalPermissionType]/` (media type: text/json)
  - removed the enum value `canBypassApproves` of the request property `approvalPermissionType/allOf[#/components/schemas/ApprovalPermissionType]/` (media type: application/*+json)
  - removed the enum value `canBypassApproves` of the request property `environmentApprovalPermissions/items/environmentApprovalPermissionType` (media type: application/json)
  - …20 more
- **2026-06-08** `fc2e575e2bd3`: 14 info
  - added the new optional request property `approvalPermissionType` (media type: application/json)
  - added the new optional request property `approvalPermissionType` (media type: text/json)
  - added the new optional request property `approvalPermissionType` (media type: application/*+json)
  - added the new optional request property `environmentApprovalPermissions` (media type: application/json)
  - …10 more
- …earlier changes not shown

[Operation history](https://skmtc.dev/configcat/apis/configcat-public-management-api/changes/v1/permissions/:permissionGroupId/put.md)

---

[API](https://skmtc.dev/configcat/apis/configcat-public-management-api.md) - [All operations](https://skmtc.dev/configcat/apis/configcat-public-management-api/llms.txt) - [OpenAPI document](https://skmtc.dev/configcat/apis/configcat-public-management-api/revisions/0f143561d265?raw)
