admin-identities

Set Platform Privileges

Grant or revoke platform privilege tiers (TOS-3571).

Replaces the SQL-only promote path: before this route the flag had no application-code writer at all, and the only zero-admin check that ever ran was inside migration 093 at apply time.

require_admin is Tier-1-only (role derives from is_platform_admin), which is what makes Tier 2 non-self-service: a read-only holder cannot reach this route, and neither can an agent's owner.

put/api/admin/identities/{identity_id}/platform-privileges

Request

  • Base URL: https://app.thinqos.com (the document declares no server; this is the origin it was published from)
  • URL: https://app.thinqos.com/api/admin/identities/{identity_id}/platform-privileges
  • Auth: none declared

Path parameters

identity_idstring uuid required

Request body

is_platform_adminboolean nullable
is_platform_admin_readonlyboolean nullable

Response

Successful Response

identity_idstring uuid required
kindstring required
is_activeboolean required
is_platform_adminboolean required
is_platform_admin_readonlyboolean required
is_last_full_adminboolean required

Changes

No recorded changes to this operation across all 4 revisions of this API.