VoidhashDocs
DevelopersHelp centerGuidesAPI reference
Dashboard
Essentials
API overview
Authentication
Event capture
Push device API
Webhooks
Webhook delivery
Webhook events
Projects & keys
Projects
API keys
Audit log
Customers & access
Persons
Products
Perks
Sandbox
Paywalls
Paywalls
Paywall locations
Components
Component registry
Assets
Experiments & flags
Experiments
Feature flags
Analytics & events
Analytics
Analytics alerts
Events
Ingest policy
VoidQL
Tracking domains
Ads
Ads
Ad accounts
Meta measurement
Payments & stores
Payment providers
Payment provider products
Purchase history imports
Payment sources
Webhooks & notifications
Webhooks
Push notifications
Push configurations
Automations
Organization & team
Organizations
Members
Invitations
Billing
Your account
Profile
Session
Notices
Connected apps
Terms of Service
Developer tools
Schema
SDK
List members
Add a member
Retrieve a member
Update a member
Remove a member

Update a member

Changes a member's role to member or admin.

The owner's role cannot change here, the last administrator cannot be demoted, and a directory-managed member's role comes from their directory groups. An app limited to reading cannot change roles.

Guide: Members and roles

PATCH
/api/v1/organizations/{organizationId}/members/{memberId}

Authorization

AuthorizationBearer <token>

A project secret key: vh_sk_... for production, vh_sk_test_... for test. Keep it on your servers.

In: header

Path parameters

organizationId*string

The organization's id, org_....

memberId*string

The membership's id, member_...; not the person's user_... id.

Request body

application/json

TypeScript definitions

Use the request body type in TypeScript.

role?|

The member's new role, member or admin; omit to keep it.

Examples

curl -X PATCH "https://api.voidhash.com/api/v1/organizations/org_w5xk2e7q0lzv3n8b1c4d6f9g/members/member_h1g4f7d0s3a6q9b6n9m2k5j8" \  -H "Authorization: Bearer vh_sk_..." \  -H "Content-Type: application/json" \  -d '{    "role": "admin"  }'
{  "id": "member_h1g4f7d0s3a6q9b6n9m2k5j8",  "organizationId": "org_w5xk2e7q0lzv3n8b1c4d6f9g",  "role": "admin",  "userId": "user_v9c2x5b7n4w0e8r1k3m8q1z6",  "email": "katherine@example.com",  "name": "Katherine Johnson",  "source": "manual",  "createdAt": "2026-03-14T09:35:00.000Z"}
{  "error": {    "type": "invalid_request",    "code": "invalid_body",    "message": "The request body is invalid: Expected object"  }}
{  "error": {    "type": "unauthenticated",    "code": "invalid_api_key",    "message": "This secret key is not valid."  }}
{  "error": {    "type": "permission_denied",    "code": "permission_denied",    "message": "Insufficient permissions."  }}
{  "error": {    "type": "not_found",    "code": "organization_not_found",    "message": "There is no organization org_w5xk2e7q0lzv3n8b1c4d6f9g, or this credential cannot use it.",    "param": "organizationId"  }}
{  "error": {    "type": "internal",    "code": "internal_error",    "message": "Something went wrong on our side. Try again, and contact support with the Request-Id header if it keeps failing."  }}

Response body

application/json

application/json

application/json

application/json

application/json

application/json

Errors

StatustypecodeWhen
403permission_deniedpermission_deniedFor any of these.

It can also fail with the errors every operation shares, such as unauthenticated; see Errors.

More in Members

  • List members GET
  • Add a member POST
  • Retrieve a member GET
  • Remove a member DELETE

Something wrong or missing on this page? Tell us by email or on Discord.

PreviousRetrieve a memberNextRemove a member

On this page

AuthorizationPath parametersRequest bodyExamplesResponse bodyErrorsMore in Members