---
title: "Manage custom role users"
method: POST
path: "/manage_permission_group_users"
tags: ["Organization"]
---

# Manage custom role users

`POST /manage_permission_group_users`

This endpoint allows organization administrators to add or remove users from a custom role (formerly "permission group"). Adding a user to a role does not remove them from any other role they belong to.

## Request body

- object
  - `organization_id` string, required — The ID of the organization that the custom role belongs to.
  - `user_id` string, required — Your user id -- you must be an organization admin to manage custom role users.
  - `group_id` string, required — The ID of the custom role to manage users for.
  - `action` 'add' | 'remove', required — The action to perform - either 'add' or 'remove' a user.
  - `user_email` string, required — The email address of the target user to add or remove.

## Response `200`

User successfully added to or removed from the custom role

- object
  - `success` boolean
  - `message` string — A success message describing the action performed.

## Other responses

- `400` — Bad request (missing required parameters or invalid action)
- `401` — Unauthorized (missing or invalid API key)
- `403` — Forbidden (user is not an organization admin or custom role doesn't belong to organization)
- `404` — Organization, custom role, or user not found
- `500` — Internal server error

---

[API](https://skmtc.dev/gumloop/apis/public-api.md) · [All operations](https://skmtc.dev/gumloop/apis/public-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gumloop/public-api/revisions/115f2d6ce387/schema)