---
title: "Edit the details of an employer user user"
method: PUT
path: "/v2/providers/employers/users/{userId}"
tags: ["Employer user"]
---

# Edit the details of an employer user user

`PUT /v2/providers/employers/users/{userId}`

## Request

- Base URL: `https://api.loket.nl`
- URL: `https://api.loket.nl/v2/providers/employers/users/{userId}`
- Auth: none required

__Activity name :__ PutEmployerUserByUserId

__Metadata :__  Possible options for fields of the type 'metadata' can be acquired (GET) by adding `/metadata` to the PUT URL.

Edit the details of an employer user

## Path parameters

- `userId` string, uuid, required

## Headers

- `Authorization` string, required
- `Accept` string, required

## Request body

- UserGetAndPut2
  - `id` string, uuid: The unique identifier of an object (GUID/UUID)
  - `loginMethod` LoginMethod: The allowedlogin method for the user
    - `key` integer
    - `value` string
  - `personalDetails` object
    - `firstName` string, nullable: The first name of the user
    - `initials` string: The initials of the user
    - `prefix` string, nullable: The prefix of the user
    - `lastName` string: The last name of the user
  - `contactInformation` ContactInformation4
    - `placeOfEmployment` string, nullable: The place of employment (standplaats) for the user.
    - `phoneNumber` string, nullable: The phone number of the user.
    - `emailAddress` string: The e-mail address of the user.
  - `userSpecifiedRole` UserSpecifiedRole, nullable: The Role which the user has specified.
    - `key` integer
    - `value` string
  - `userCustomSpecifiedRole` string, nullable: Further specification of the user role.
  - `hasAccessToPayrollingTestData` boolean: Indicates if the user has access to data for payrolling test years
  - `accessStatus` AccessStatus: indicates the access status of the user.
    - `key` integer
    - `value` string
  - `hasMultiFactorAuthentication` boolean: Indicates if the user has multi factor authentication enabled Can only be changed from true to false.
  - `twoFactorAuthenticationRequired` boolean: Indicates whether two factor authentication is required for the user. This setting is only available for login method: Via website en SSO
  - `azureActiveDirectory` AzureActiveDirectory2, nullable
    - `tenant` object: The Azure AD tennant
      - `id` string, uuid: Id for the tennant
      - `description` string
      - `tenantRegistrationLevel` 'provider' | 'employer'
    - `userId` string: The userId as known in the Azure AD of the selected tennant
  - `userName` string, nullable: The username
  - `isDepartmentManager` boolean: Indicates if the user is a department manager
  - `isLinkedToMultipleEmployers` boolean: Indicates if the user has access to multiple employer.
  - `hasIntegrations` boolean: Indicates if the user has integrations with clients other that Loket. This means that another application can call the loket API using this user.
  - `hasConnectedApplications` boolean: Indicates if the user has connected applications.In this case a conection was made where loket can call the external softwares api to read and/or write data for that system.
  - `dateTimeLastLogin` string, date-time, nullable: The date on which the user loged in for the last time
  - `dateTimeCreation` string, date-time: The date on which the user was created

## Response `200`

OK

- object: a warning indacateds that the given payload is valide, however take notice of the warning this might ifluence behavour.
  - `version` Version
    - `obsoleteDate` string, date, nullable: The date (can be null) on which the `resourceVersion` is no longer supported/available
    - `resourceVersion` string, date: The resource version of the object in the response
  - `messages` object[]
    - `type` string: Indication of the type of message. See [the general documentation for more information](./#section/Response/Messages)
    - `description` string: Describes the message
    - `id` string, uuid, nullable: In some cases when the message may relate to a specific entity, or specific group of entities, this field provides the identifier of that entity
    - `code` integer: Identifying code for the message
    - `properties` string[]: An array that can contain additional information
  - `content` UserGetAndPut2
    - `id` string, uuid: The unique identifier of an object (GUID/UUID)
    - `loginMethod` LoginMethod: The allowedlogin method for the user
      - `key` integer
      - `value` string
    - `personalDetails` object
      - `firstName` string, nullable: The first name of the user
      - `initials` string: The initials of the user
      - `prefix` string, nullable: The prefix of the user
      - `lastName` string: The last name of the user
    - `contactInformation` ContactInformation4
      - `placeOfEmployment` string, nullable: The place of employment (standplaats) for the user.
      - `phoneNumber` string, nullable: The phone number of the user.
      - `emailAddress` string: The e-mail address of the user.
    - `userSpecifiedRole` UserSpecifiedRole, nullable: The Role which the user has specified.
      - `key` integer
      - `value` string
    - `userCustomSpecifiedRole` string, nullable: Further specification of the user role.
    - `hasAccessToPayrollingTestData` boolean: Indicates if the user has access to data for payrolling test years
    - `accessStatus` AccessStatus: indicates the access status of the user.
      - `key` integer
      - `value` string
    - `hasMultiFactorAuthentication` boolean: Indicates if the user has multi factor authentication enabled Can only be changed from true to false.
    - `twoFactorAuthenticationRequired` boolean: Indicates whether two factor authentication is required for the user. This setting is only available for login method: Via website en SSO
    - `azureActiveDirectory` AzureActiveDirectory2, nullable
      - `tenant` object: The Azure AD tennant
        - `id` string, uuid: Id for the tennant
        - `description` string
        - `tenantRegistrationLevel` 'provider' | 'employer'
      - `userId` string: The userId as known in the Azure AD of the selected tennant
    - `userName` string, nullable: The username
    - `isDepartmentManager` boolean: Indicates if the user is a department manager
    - `isLinkedToMultipleEmployers` boolean: Indicates if the user has access to multiple employer.
    - `hasIntegrations` boolean: Indicates if the user has integrations with clients other that Loket. This means that another application can call the loket API using this user.
    - `hasConnectedApplications` boolean: Indicates if the user has connected applications.In this case a conection was made where loket can call the external softwares api to read and/or write data for that system.
    - `dateTimeLastLogin` string, date-time, nullable: The date on which the user loged in for the last time
    - `dateTimeCreation` string, date-time: The date on which the user was created

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `500`: Internal Server Error

---

[API](https://skmtc.dev/loket/apis/loket-api.md) - [All operations](https://skmtc.dev/loket/apis/loket-api/llms.txt) - [OpenAPI document](https://skmtc.dev/loket/apis/loket-api/revisions/32170564148f?raw)