---
title: "POST /v23/customers/{customersId}/customerUserAccesses:mutate"
method: POST
path: "/v23/customers/{customersId}/customerUserAccesses:mutate"
tags: ["customers"]
---

# POST /v23/customers/{customersId}/customerUserAccesses:mutate

`POST /v23/customers/{customersId}/customerUserAccesses:mutate`

## Request

- Base URL: `https://searchads360.googleapis.com`
- URL: `https://searchads360.googleapis.com/v23/customers/{customersId}/customerUserAccesses:mutate`
- Auth: OAuth 2 and OAuth 2
  - Implicit: `https://accounts.google.com/o/oauth2/auth`
  - Scopes: `https://www.googleapis.com/auth/doubleclicksearch`
  - Authorization code: `https://accounts.google.com/o/oauth2/auth`
  - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/doubleclicksearch`
- TypeScript: <https://skmtc.dev/google/apis/searchads360/docs/v23/customers/:customersId/customerUserAccesses:mutate/post.ts> (a function with typed inputs; its response is checked against the schema)

Updates, removes permission of a user on a given customer. Operation statuses are returned. List of thrown errors: [AuthenticationError]() [AuthorizationError]() [CustomerUserAccessError]() [FieldMaskError]() [HeaderError]() [InternalError]() [MutateError]() [QuotaError]() [RequestError]()

## Path parameters

- `customersId` string, required

## Request body

- GoogleAdsSearchads360V23ServicesMutateCustomerUserAccessRequest: Mutate Request for CustomerUserAccessService.MutateCustomerUserAccess.
  - `operation` GoogleAdsSearchads360V23ServicesCustomerUserAccessOperation: A single operation (update, remove) on customer user access.
    - `remove` string: Remove operation: A resource name for the removed access is expected, in this format: `customers/{customer_id}/customerUserAccesses/{CustomerUserAccess.user_id}`
    - `update` GoogleAdsSearchads360V23ResourcesCustomerUserAccess: Represents the permission of a single user onto a single customer.
      - `accessCreationDateTime` string: Output only. The customer user access creation time. Read only field The format is "YYYY-MM-DD HH:MM:SS". Examples: "2018-03-05 09:15:00" or "2018-02-01 14:34:30"
      - `accessRole` 'UNSPECIFIED' | 'UNKNOWN' | 'ADMIN' | 'STANDARD' | 'READ_ONLY' | 'EMAIL_ONLY': Access role of the user.
      - `emailAddress` string: Output only. Email address of the user. Read only field
      - `inviterUserEmailAddress` string: Output only. The email address of the inviter user. Read only field
      - `resourceName` string: Immutable. Name of the resource. Resource names have the form: `customers/{customer_id}/customerUserAccesses/{user_id}`
      - `userId` string, int64: Output only. User id of the user with the customer access. Read only field
    - `updateMask` string, google-fieldmask: FieldMask that determines which resource fields are modified in an update.

## Response `200`

Successful response

- GoogleAdsSearchads360V23ServicesMutateCustomerUserAccessResponse: Response message for customer user access mutate.
  - `result` GoogleAdsSearchads360V23ServicesMutateCustomerUserAccessResult: The result for the customer user access mutate.
    - `resourceName` string: Returned for successful operations.

---

[API](https://skmtc.dev/google/apis/searchads360.md) - [All operations](https://skmtc.dev/google/apis/searchads360/llms.txt) - [OpenAPI document](https://skmtc.dev/google/apis/searchads360/revisions/4a4511f84b18?raw)