---
title: "Change a member's lead or read-all flag"
method: PATCH
path: "/v1/members/{email}"
tags: ["Directory"]
---

# Change a member's lead or read-all flag

`PATCH /v1/members/{email}`

## Request

- Base URL: `https://api.slashy.com`
- URL: `https://api.slashy.com/v1/members/{email}`
- Auth: HTTP bearer

Move a member to a new lead, remove their lead (`reports_to: null`), or set whether they read everyone's mail. Omitted fields are left alone. Members are named by login email. Takes effect on the member's next read in Slashy, and within about 30 seconds for API keys. Made as the key's creator, who must still be an owner or admin.

**Scope:** `directory.write`. **Rate limit class:** `write` (120/minute per key).

## Path parameters

- `email` string, required

## Request body

- ReportingUpdate: Set at least one field. Omitted fields are left alone.
  - `reports_to` string, nullable: The lead's email; `null` removes the lead.
  - `reads_all_mail` boolean

## Response `200`

OK

- OrgChartMember
  - `user_id` string, uuid, required: Slashy user id.
  - `email` string, required: Login email.
  - `name` string, nullable, required
  - `role` 'owner' | 'admin' | 'member', required
  - `reports_to` string, nullable, required: The lead's email. The lead reads this member's mail.
  - `reads_all_mail` boolean, required: Reads every member who doesn't also have `reads_all_mail`.

## Other responses

- `400`: Bad request. `error` is one of: `invalid_request`.
- `401`: Missing, malformed, unknown, revoked or expired API key. `error` is one of: `invalid_api_key`, `api_key_revoked`, `api_key_expired`.
- `403`: The key is valid but may not make this call. `error` is one of: `browser_not_allowed`, `ip_not_allowed`, `not_enterprise`, `key_owner_inactive`, `insufficient_scope`.
- `404`: Not found, or not readable by this key (the two look the same). `error` is one of: `member_not_found`, `lead_not_found`.
- `409`: Conflicts with the team's current state. `error` is one of: `mail_access_follows_roles`.
- `422`: A parameter is missing or invalid. The body lists each problem (not the `Error` shape).
- `429`: Too many requests. Wait `Retry-After` seconds, then retry. `error` is one of: `too_many_auth_failures`, `rate_limited`, `too_many_concurrent_requests`.

---

[API](https://skmtc.dev/slashy/apis/slashy-enterprise-api.md) - [All operations](https://skmtc.dev/slashy/apis/slashy-enterprise-api/llms.txt) - [OpenAPI document](https://skmtc.dev/slashy/apis/slashy-enterprise-api/revisions/49841c75ad9f?raw)