Update a User

PATCH 
/docuflow/Users/:id

Supported paths: active, roles — only these produce observable changes. Operations on non-persisted attributes (displayName, externalId) return a silent 200 no-op; an operation changing userName fails the whole request with 400 invalidValue (including any other operations batched in it); unknown or miscased paths (e.g. Roles) fail 400 invalidPath. Send active changes and roles changes as separate PATCH requests — combined in one request, the deactivation wins and the role change is silently discarded (the 200 response echoes the old roles). Email addresses (userName) are immutable post-creation — to change a user's email, delete and re-create. Exactly one role per user is required for Digital Assets Management. Downgrading a non-Visitor user to the Visitor role is not allowed. Setting active to false deactivates Admin/User accounts (INACTIVE — user remains retrievable with active: false) or deletes Visitor accounts permanently. Setting active to true on a deactivated Admin/User reactivates them; PATCHing only roles on an INACTIVE user updates the roles but does not reactivate. Azure AD add operations on the roles path are automatically rewritten to replace for Entra ID compatibility.

Request

Responses

200

User updated

400

Invalid patch (malformed PatchOp, zero roles — exactly one role required, multiple roles assigned, or visitor-downgrade attempt — cannot demote a non-Visitor user to Visitor)

401

Missing or invalid Bearer token

403

Tenant is not configured for this product

404

User not found

500

Internal server error — if this persists, contact your Inspectorio representative.