---
title: "Update Multiple Permissions"
method: PATCH
path: "/permissions"
tags: ["Permissions"]
---

# Update Multiple Permissions

`PATCH /permissions`

Update multiple permissions at the same time.

## Query parameters

- `fields` string[]
- `limit` integer
- `meta` string
- `offset` integer
- `sort` string[]
- `search` string

## Request body

- object
  - `keys` string[]
  - `data` object
    - `collection` string — What collection this permission applies to.
    - `comment` 'none' | 'create' | 'update' | 'full' — If the user can post comments.
    - `create` 'none' | 'full' — If the user can create items.
    - `delete` 'none' | 'mine' | 'role' | 'full' — If the user can update items.
    - `explain` 'none' | 'create' | 'update' | 'always' — If the user is required to leave a comment explaining what was changed.
    - `read` 'none' | 'mine' | 'role' | 'full' — If the user can read items.
    - `role` integer — Unique identifier of the role this permission applies to.
    - `read_field_blacklist` string[] — Explicitly denies read access for specific fields.
    - `status` string — What status this permission applies to.
    - `status_blacklist` string[] — Explicitly denies specific statuses to be used.
    - `update` 'none' | 'mine' | 'role' | 'full' — If the user can update items.
    - `write_field_blacklist` string[] — Explicitly denies write access for specific fields.

## Response `200`

Successful request

- object
  - `data` Permissions[]
    - `id` integer — Unique identifier for the permission.
    - `collection` string — What collection this permission applies to.
    - `action` 'create' | 'read' | 'update' | 'delete' — What action this permission applies to.
    - `permissions` object, nullable — JSON structure containing the permissions checks for this permission.
    - `validation` object, nullable — JSON structure containing the validation checks for this permission.
    - `presets` object, nullable — JSON structure containing the preset value for created/updated items.
    - `fields` string[], nullable — CSV of fields that the user is allowed to interact with.
    - `policy` unknown
  - `meta` XMetadata
    - `total_count` integer — Returns the total item count of the collection you're querying.
    - `filter_count` integer — Returns the item count of the collection you're querying, taking the current filter/search parameters into account.

## Other responses

- `401` — Error: Unauthorized request

---

[API](https://skmtc.dev/utomic-media/apis/dynamic-api-specification.md) · [All operations](https://skmtc.dev/utomic-media/apis/dynamic-api-specification/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/utomic-media/dynamic-api-specification/revisions/4a0ccd34700e/schema)