API documentation | API docs for agents | OpenAPI 3.1

permissions

ark.update_user_permissions

Replaces enabled public ARK permissions for an organization user. Requires tenant-admin access and admin:write.

Availability: Expanded preview
Scopes: admin:write
ARK permissions: None
Team visibility: Not entity-scoped
Idempotency-Key: Required for this write
Approval: No MCP approval on REST API-token calls
Rate limit: API credential and organization budgets

Parameters

userIdpathstringrequired: format: uuid
Idempotency-Keyheaderstringrequired: Required for external write operations. Reuse the same key only for exact retries of the same request body.; min length: 1; max length: 200

Request body

enabledPermissionIdsarray<string>required

Full replacement list of enabled public ARK permission IDs. Category view permissions are added automatically when required.

max items: 500

Example request

Shell

curl -X PUT 'https://arktms.com/api/v1/users/<userId>/permissions' \
  -H "Authorization: Bearer $ARK_API_TOKEN" \
  -H "Idempotency-Key: <unique-key>" \
  -H "Content-Type: application/json" \
  -d '{
  "enabledPermissionIds": [
    "<enabledPermissionIds>"
  ]
}'

Success response

Updated user permissions

objectstringrequired

one of: api_response

okbooleanrequired

one of: true

api_versionstringrequired

one of: 2026-05-31

request_idstringrequired

dataobjectrequired

data.userobjectrequired

data.enabledPermissionIdsarray<string>required

data.permissionsarray<object>required

data.categoriesarray<object>required

data.grantedPermissionIdsarray<string>required

data.revokedPermissionIdsarray<string>required

data.messagestringrequired

Errors

HTTP 400: Invalid request
HTTP 401: Authentication required
HTTP 403: Permission, scope, team, or entitlement denied
HTTP 404: Resource not found
HTTP 409: Idempotency conflict or in-progress retry