internal

Apply User Role Change

Move a user's role attachments: add company roles, remove (typically global) roles.

DB-only by design — company-scoped archetype roles are never mirrored to SuperTokens (authz reads the DB; only the global kobalt_admin claim is mirrored, and this flow never touches it). Invalidates the user's permission + vendor-access caches so the change takes effect at once across replicas.

post/internal/migration/users/{user_id}/apply

Request

  • Base URL
    https://api.kobaltlabs.com (the document declares no server; this is the origin it was published from)
  • URL
    https://api.kobaltlabs.com/internal/migration/users/{user_id}/apply
  • Auth
    none declared

Path parameters

user_idstring uuid required

Request body

add_role_idsstring[]
remove_role_idsstring[]

Response

Successful Response

user_idstring required
addedstring[] required
removedstring[] required

Changes

No recorded changes to this operation across all 8 revisions of this API.