---
title: "Update"
method: PUT
path: "/admin/roles/{id}"
tags: ["roles"]
---

# Update

`PUT /admin/roles/{id}`

## Request

- Base URL: `https://api.instruxi.dev/api/v1/enforcer`
- URL: `https://api.instruxi.dev/api/v1/enforcer/admin/roles/{id}`
- Auth: one of:
  - API key in header `Authorization`
  - API key in header `X-API-Key`

Updates a custom role's name, description, or permission grant (each field optional; permissions, if present, REPLACES the full set rather than merging individual flags). Built-in roles return 409 immutable. System-admin (platform-only) gated, for the same reason as createRole: only a cross_tenant holder can reach this route.

## Path parameters

- `id` string, required

## Request body

- InternalDeliveryHttpHandlerUpdateRoleRequest
  - `description` string
  - `name` string
  - `permissions` InternalDeliveryHttpHandlerPermissionsBody
    - `admin_managed` boolean
    - `cross_tenant` boolean
    - `mpp_ops` boolean: MPPOps grants the read-only MPP deposit-intent operator views (cross-tenant). It moves no money.
    - `tenant_manage` boolean
    - `tenant_read` boolean
    - `tenant_write` boolean

## Response `200`

OK

- InternalDeliveryHttpHandlerRoleResponse
  - `data` EnforcerV3InternalDomainRoleRole
    - `admin_managed` boolean
    - `created_at` string
    - `cross_tenant` boolean: Capability grants (additive; all false = baseline-only, like "user").
    - `description` string
    - `id` string
    - `mpp_ops` boolean: MPPOps: read-only MPP deposit-intent operator views (migration 000129).
    - `name` string
    - `slug` string
    - `tenant_manage` boolean
    - `tenant_read` boolean
    - `tenant_write` boolean
    - `updated_at` string
  - `success` boolean

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `500`: Internal Server Error

---

[API](https://skmtc.dev/instruxi/apis/enforcer-api.md) · [All operations](https://skmtc.dev/instruxi/apis/enforcer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/instruxi/apis/enforcer-api/revisions/fa82bc1becc0?raw)