---
title: "Update a profile. Practitioners may edit only their own profile and notification preferences. Deactivating someone with future bookings returns requires_staff_action unless force_reassign is given"
method: PATCH
path: "/api/v1/team/{id}"
---

# Update a profile. Practitioners may edit only their own profile and notification preferences. Deactivating someone with future bookings returns requires_staff_action unless force_reassign is given

`PATCH /api/v1/team/{id}`

## Request

- Base URL: `http://127.0.0.1:4310`
- URL: `http://127.0.0.1:4310/api/v1/team/{id}`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `sfb_session`

## Path parameters

- `id` string, required

## Request body

- object
  - `name` string
  - `display_name` string
  - `title` string
  - `bio` string
  - `email` string
  - `colour` string
  - `photo_url` string: https only; needs photo_licence
  - `photo_licence` string
  - `location_id` string, uuid
  - `active` boolean
  - `sort` integer
  - `expected_version` integer
  - `notification_prefs` object: Events booking_created, booking_rescheduled, booking_cancelled, daily_schedule, leave_changes, client_message; channels email, sms
  - `force_reassign` object: { to_staff_id } or { assignments: [{ booking_id, staff_id }] } when deactivating someone with future bookings

## Response `200`

OK

- object

## Other responses

- `400`: Validation error
- `401`: Unauthenticated
- `403`: Forbidden
- `404`: Not found
- `409`: Conflict or invalid state

---

[API](https://skmtc.dev/scalingfirm/apis/tsf-booking-api.md) · [All operations](https://skmtc.dev/scalingfirm/apis/tsf-booking-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scalingfirm/apis/tsf-booking-api/revisions/81704199cd37?raw)