admin_user.set_role

Change an operator’s role. Revokes their live sessions so the next login carries the new scopes.

• Scope: iam.roles.write
• System: no
• Reachable from: POST /v1/commands/admin_user.set_role (tenant credential) · MCP tool admin_user.set_role · SDK client.call('admin_user.set_role', …)
• Events: admin_user.role_changed

Input (JSON Schema)

{
  "properties": {
    "admin_user_id": {
      "minLength": 1,
      "type": "string"
    },
    "role": {
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "admin_user_id",
    "role"
  ],
  "type": "object"
}

Result (200)

{
  "additionalProperties": false,
  "properties": {
    "admin_user_id": {
      "type": "string"
    },
    "role": {
      "type": "string"
    }
  },
  "required": [
    "admin_user_id",
    "role"
  ],
  "type": "object"
}

Errors

validation_failed (400) · unauthorized (401) · forbidden (403) · conflict (409) · internal (500)