---
title: "Manage the employer user authorizations"
method: PATCH
path: "/v2/providers/employers/{employerId}/users/{userId}/authorizations"
tags: ["Employer user authorizations"]
---

# Manage the employer user authorizations

`PATCH /v2/providers/employers/{employerId}/users/{userId}/authorizations`

## Request

- Base URL: `https://api.loket.nl`
- URL: `https://api.loket.nl/v2/providers/employers/{employerId}/users/{userId}/authorizations`
- Auth: none required

__Activity name :__ PatchEmployerUserAuthorizationsByEmployerIdAndUserId

Manage the employer user authorizations and `authorizationSet`.

__Note:__ Currently the `authorizationSet` doesnt do anything in regard to which authorizations are enabled or disabled.  It only functions as a guide to the GUI to visualize and save the authorizations linked to the `authorizationSet`
Only the authorizations with isEnabled set to true are saved all other authorizations will be disabled.

## Path parameters

- `employerId` string, uuid, required
- `userId` string, uuid, required

## Headers

- `Authorization` string, required
- `Accept` string, required

## Request body

- Authorization
  - `authorizationSet` AuthorizationSet2, nullable
    - `id` string, uuid: The unique identifier of an object (GUID/UUID)
    - `description` string
  - `authorizations` object[]
    - `id` string, uuid: The unique identifier of an object (GUID/UUID)
    - `description` string
    - `availableForEmployerUser` boolean
    - `isEnabled` boolean: Enable or disable an authorization

## Response `200`

OK

- object: a warning indacateds that the given payload is valide, however take notice of the warning this might ifluence behavour.
  - `version` Version
    - `obsoleteDate` string, date, nullable: The date (can be null) on which the `resourceVersion` is no longer supported/available
    - `resourceVersion` string, date: The resource version of the object in the response
  - `messages` object[]
    - `type` string: Indication of the type of message. See [the general documentation for more information](./#section/Response/Messages)
    - `description` string: Describes the message
    - `id` string, uuid, nullable: In some cases when the message may relate to a specific entity, or specific group of entities, this field provides the identifier of that entity
    - `code` integer: Identifying code for the message
    - `properties` string[]: An array that can contain additional information
  - `content` object

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `500`: Internal Server Error

---

[API](https://skmtc.dev/loket/apis/loket-api.md) - [All operations](https://skmtc.dev/loket/apis/loket-api/llms.txt) - [OpenAPI document](https://skmtc.dev/loket/apis/loket-api/revisions/32170564148f?raw)