---
title: "Edit the authorization matrix"
method: PUT
path: "/v2/providers/employers/{employerId}/documents/authorizations"
tags: ["Document Management"]
---

# Edit the authorization matrix

`PUT /v2/providers/employers/{employerId}/documents/authorizations`

## Request

- Base URL: `https://api.loket.nl`
- URL: `https://api.loket.nl/v2/providers/employers/{employerId}/documents/authorizations`
- Auth: none required

__Activity name:__ <a href="https://developer.loket.nl/Activities/PutDossierAuthorizationsByEmployerId" target="_blank">PutDossierAuthorizationsByEmployerId</a>

Edit the authorizations. Categories not included in de request will be set to inaccessible for all roles.

## Path parameters

- `employerId` string, uuid, required

## Headers

- `Authorization` string, required
- `Accept` string, required

## Request body

- AuthorizationsObject[]
  - `category` string: The category
  - `isAuthorizaionEditRestricted` boolean: Indicates whether the authorizations of the category can be edited or not.
  - `isTemplate` boolean: Indicates whether the category is a template.
  - `canWrite` object: This object describes the authorization per category for each role.
    - `provider` boolean
    - `employer` boolean
    - `departmentManager` boolean
    - `employee` boolean

## Response `200`

OK

- object: a warning indacateds that the given payload is valide, however take notice of the warning this might ifluence behavour.
  - `version` Version
    - `obsoleteDate` string, date, nullable: The date (can be null) on which the `resourceVersion` is no longer supported/available
    - `resourceVersion` string, date: The resource version of the object in the response
  - `messages` object[]
    - `type` string: Indication of the type of message. See [the general documentation for more information](./#section/Response/Messages)
    - `description` string: Describes the message
    - `id` string, uuid, nullable: In some cases when the message may relate to a specific entity, or specific group of entities, this field provides the identifier of that entity
    - `code` integer: Identifying code for the message
    - `properties` string[]: An array that can contain additional information
  - `content` object

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `500`: Internal Server Error

---

[API](https://skmtc.dev/loket/apis/loket-api.md) - [All operations](https://skmtc.dev/loket/apis/loket-api/llms.txt) - [OpenAPI document](https://skmtc.dev/loket/apis/loket-api/revisions/32170564148f?raw)