Update Account User
Beta/v1/identity/account-users/{id}Idempotent with Idempotency-Key header. Learn more
Partially updates an account user.
Omitted fields are left unchanged. Profile fields (name, email, username) update the underlying user, which is shared across every account the user belongs to, so the change is visible everywhere that person works.
idstringID of the account user to update.
include[]optional arrayenumValues:userroledepartmentSub-objects to expand in the response. When omitted, sub-objects are returned as null.
nameoptional stringUser display name.
emailoptional stringUser email address.
Must not already be in use by another user.
usernameoptional stringUnique username.
3–255 characters; letters, numbers, underscores, and hyphens. Must not already be in use by another user.
role_idoptional stringnullableID of the role to assign to the user.
Set to null to clear the role. Send null to clear.
department_idoptional stringnullableID of the department to assign to the user.
Set to null to clear the department. The department must already exist in the account. Send null to clear.
is_commission_eligibleoptional booleanWhether the user can be assigned as a sales representative on orders, territories, and targets.
Forced true for the sales_rep role type and rejected for scanner and agent roles. Cannot be turned off while the user stays on a sales_rep role.
preferencesoptional array of objectNotification preference toggles to apply.
Only allowed when updating a user in another account you manage (cross-account); rejected otherwise. Notification types omitted from the list are left unchanged.
notification_typestringenumValues:invoiceorder_acknowledgementpurchase_order_submissionNotification type.
enabledbooleanWhether this notification type is enabled for the account user.
idstringAccount user ID.
objectstringenumValues:account_userResource type identifier.
statusstringenumValues:activedisabledremovedThe current state of this user's membership in the account.
active: the user can sign in to the account and occupies one of the plan's seats.disabled: the user is locked out of the account and their sessions have been revoked, but the membership is retained.removed: the membership has been soft-deleted; it is hidden from listings by default and can be restored with the activate action.
The role that determines what this user is permitted to do in the account.
idstringRole ID.
objectstringenumValues:roleResource type identifier.
namestringDisplay name of the role.
Unique within the account.
typestringenumValues:adminuserscannerThe kind of role.
The type gates behavior that individual permissions do not cover, and some actions are reserved for a single role type.
admin: full administrative access. Sensitive areas such as API keys, billing, and third-party integrations are restricted to admins no matter what permissions another role holds.user: a custom role tailored to a specific need, with its permissions defined explicitly. Roles created through the API always have this type.scanner: the role used by shop-floor scanning stations, assigned automatically when a scanning-station user is created.sales_rep: a role for sales representatives. Order analytics are scoped to the rep's own orders.agent: a role assigned to an automated agent rather than a person.
ownerownernullableProvenance of this role.
System-owned roles are platform-provided defaults shared across all accounts and cannot be updated or deleted; account-owned roles are custom to your account.
null in this endpoint.permissionsarray of stringnullablePermissions granted by this role, in {permission}:{action} format, such as customers:read.
created_atstring (date-time)Creation timestamp.
updated_atstring (date-time)Last updated timestamp.
The department this user belongs to within the account.
idstringDepartment ID.
objectstringenumValues:departmentResource type identifier.
namestringDisplay name of the department.
Unique within the account.
notesstringnullableFree-form notes about the department.
locationlocationnullableThe storage location where this department operates.
null in this endpoint.Scanning stations in this department.
null in this endpoint.Machines in this department.
null in this endpoint.labor_rateratenullableHourly labor rate for work done in this department, such as a changeover technician.
Production scheduling costs changeovers with the constraint department's rate when one is set, falling back to the account-wide changeover labor rate setting.
null in this endpoint.created_atstring (date-time)Creation timestamp.
updated_atstring (date-time)Last update timestamp.
useruserExpandablenullableThe underlying user profile, shared across every account this person belongs to.
idstringUser ID.
objectstringenumValues:userResource type identifier.
emailstringnullableEmail address the user signs in with and receives platform email at.
namestringnullableUser's full display name.
usernamestringnullableUsername the user can sign in with instead of their email address.
Usernames are unique across the whole platform, not just within your account.
email_verified_atstring (date-time)nullableWhen the user verified their email address.
image_urlstringnullableLocation of the user's profile image.
For photos uploaded through the API this holds an internal path rather than a fetchable image URL; call Get User Photo URL to obtain a temporary link to the image itself.
created_atstring (date-time)Creation timestamp.
updated_atstring (date-time)Last updated timestamp.
is_commission_eligiblebooleanWhether this user can be assigned as a sales representative on orders, territories, and targets.
Independent of the sales_rep role type, which still scopes analytics and hides cost. Users with the sales_rep role are always eligible.
last_used_atstring (date-time)nullableWhen the user last accessed this account.
created_atstring (date-time)When the account user was created.
updated_atstring (date-time)When the account user was last updated.
Responses
Successful response for Update Account User