---
title: "Update a member permission"
method: POST
path: "/identity/members/{individual_id}/rbac"
tags: ["identity", "members", "business", "customer-session"]
---

# Update a member permission

`POST /identity/members/{individual_id}/rbac`

## Request

- Base URL: `https://api.stablesea.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.stablesea.com/identity/members/{individual_id}/rbac`
- Auth: none declared

Sets one permission for a member of your current business and returns the updated permission matrix. Supply rbac_type and enabled. Requires `permissions_manage` in legacy mode; existing member and grant safeguards still apply. In enforced mode, admission requires `roles_manage`, then this permission-row write is refused with 409 `authorization_mode_enforced`.

## Path parameters

- `individual_id` string, required

## Request body

- MembersSetMemberRBACPolicyInput
  - `enabled` boolean
  - `rbac_type` string, required

## Response `200`

OK

- MembersGetMemberRBACPoliciesOutput
  - `api_keys_manage` boolean
  - `assets_buy` boolean
  - `assets_sell` boolean
  - `bank_account_add` boolean
  - `bank_account_remove` boolean
  - `funds_deposit` boolean
  - `funds_withdraw` boolean
  - `members_invite` boolean
  - `permissions_manage` boolean
  - `transfers_approve` boolean

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `default`: Error response.

## Changes

- **2026-10-30** `92972ac10612`: 5 info
  - added the non-success response with the status `400`
  - added the non-success response with the status `401`
  - added the non-success response with the status `403`
  - added the non-success response with the status `404`
  - …1 more
- **2026-10-29** `e003c8a67b62`: 1 info
  - added the optional property `error/authorization` to the response with the `default` status
- **2026-10-15** `33870379032d`: 1 info
  - api tag `customer-session` added
- **2026-09-08** `24358bd7b74f`: 1 info
  - added the optional property `api_keys_manage` to the response with the `200` status
- **2026-09-01** `f2d9f80610d9`: 1 info
  - added the optional property `error/api_client_id` to the response with the `default` status

[Operation history](https://skmtc.dev/stablesea/apis/stable-sea-backend/changes/identity/members/:individual_id/rbac/post.md)

---

[API](https://skmtc.dev/stablesea/apis/stable-sea-backend.md) - [All operations](https://skmtc.dev/stablesea/apis/stable-sea-backend/llms.txt) - [OpenAPI document](https://skmtc.dev/stablesea/apis/stable-sea-backend/revisions/772c80d83658?raw)