---
title: "Replace the workspace's role overrides"
method: POST
path: "/w/{workspace}/workspaces/role_overrides"
tags: ["workspace"]
---

# Replace the workspace's role overrides

`POST /w/{workspace}/workspaces/role_overrides`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/w/{workspace}/workspaces/role_overrides`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `token`

Replaces the workspace's overrides of instance roles, and its workspace-only roles (EE). Refuses removing a workspace-only role still held or referenced, and a change exceeding an offline license's seat cap. Requires workspace admin privileges.

## Path parameters

- `workspace` string, required

## Request body

- RoleOverrides: A workspace's overrides keyed by role name; a name the instance does not define adds a workspace-only role (EE).

## Response `200`

role overrides updated

## Changes

- **2026-10-21** `6ecbaacc13b1`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/windmill/apis/windmill-api/changes/w/:workspace/workspaces/role_overrides/post.md)

---

[API](https://skmtc.dev/windmill/apis/windmill-api.md) · [All operations](https://skmtc.dev/windmill/apis/windmill-api/llms.txt) · [OpenAPI document](https://skmtc.dev/windmill/apis/windmill-api/revisions/c210165aa3db?raw)