Update a member
Changes a member's role to member or admin.
The owner's role cannot change here, the last administrator cannot be demoted, and a directory-managed member's role comes from their directory groups. An app limited to reading cannot change roles.
Guide: Members and roles
A project secret key: vh_sk_... for production, vh_sk_test_... for test. Keep it on your servers.
In: header
Path parameters
The organization's id, org_....
The membership's id, member_...; not the person's user_... id.
Request body
application/json
TypeScript definitions
Use the request body type in TypeScript.
The member's new role, member or admin; omit to keep it.
Examples
curl -X PATCH "https://api.voidhash.com/api/v1/organizations/org_w5xk2e7q0lzv3n8b1c4d6f9g/members/member_h1g4f7d0s3a6q9b6n9m2k5j8" \ -H "Authorization: Bearer vh_sk_..." \ -H "Content-Type: application/json" \ -d '{ "role": "admin" }'{ "id": "member_h1g4f7d0s3a6q9b6n9m2k5j8", "organizationId": "org_w5xk2e7q0lzv3n8b1c4d6f9g", "role": "admin", "userId": "user_v9c2x5b7n4w0e8r1k3m8q1z6", "email": "katherine@example.com", "name": "Katherine Johnson", "source": "manual", "createdAt": "2026-03-14T09:35:00.000Z"}{ "error": { "type": "invalid_request", "code": "invalid_body", "message": "The request body is invalid: Expected object" }}{ "error": { "type": "unauthenticated", "code": "invalid_api_key", "message": "This secret key is not valid." }}{ "error": { "type": "permission_denied", "code": "permission_denied", "message": "Insufficient permissions." }}{ "error": { "type": "not_found", "code": "organization_not_found", "message": "There is no organization org_w5xk2e7q0lzv3n8b1c4d6f9g, or this credential cannot use it.", "param": "organizationId" }}{ "error": { "type": "internal", "code": "internal_error", "message": "Something went wrong on our side. Try again, and contact support with the Request-Id header if it keeps failing." }}Response body
application/json
application/json
application/json
application/json
application/json
application/json
Errors
| Status | type | code | When |
|---|---|---|---|
| 403 | permission_denied | permission_denied | For any of these. |
It can also fail with the errors every operation shares, such as unauthenticated; see Errors.
More in Members
- List members
GET - Add a member
POST - Retrieve a member
GET - Remove a member
DELETE
Something wrong or missing on this page? Tell us by email or on Discord.