Change what a builder is, or which suites they may work on

Restrict updates to admins.

PATCH/v1/organizations/{organizationId}/builders/{userId}

Request

curl --request PATCH \
  --url 'https://studio.grid82.app/v1/organizations/<organizationId>/builders/<userId>' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "role": "admin",
  "allSuites": true,
  "suiteIds": [
    "<string>"
  ],
  "canCreateSuites": true
}'

import json
import requests

url = "https://studio.grid82.app/v1/organizations/<organizationId>/builders/<userId>"
headers = {
  "Authorization": "Bearer <token>",
  "Content-Type": "application/json"
}
payload = json.loads("{\"role\":\"admin\",\"allSuites\":true,\"suiteIds\":[\"<string>\"],\"canCreateSuites\":true}")

response = requests.request("PATCH", url, headers=headers, json=payload)
print(response.json())

const response = await fetch("https://studio.grid82.app/v1/organizations/<organizationId>/builders/<userId>", {
  method: "PATCH",
  headers: {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "role": "admin",
    "allSuites": true,
    "suiteIds": [
      "<string>"
    ],
    "canCreateSuites": true
  }),
});

const data = await response.json();
console.log(data);

<?php
$client = curl_init();

curl_setopt($client, CURLOPT_URL, "https://studio.grid82.app/v1/organizations/<organizationId>/builders/<userId>");
curl_setopt($client, CURLOPT_CUSTOMREQUEST, "PATCH");
curl_setopt($client, CURLOPT_HTTPHEADER, [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
]);
curl_setopt($client, CURLOPT_POSTFIELDS, "{\"role\":\"admin\",\"allSuites\":true,\"suiteIds\":[\"<string>\"],\"canCreateSuites\":true}");
curl_setopt($client, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($client);
curl_close($client);
echo $response;

package main

import (
  "bytes"
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("PATCH", "https://studio.grid82.app/v1/organizations/<organizationId>/builders/<userId>", bytes.NewBuffer([]byte("{\"role\":\"admin\",\"allSuites\":true,\"suiteIds\":[\"<string>\"],\"canCreateSuites\":true}")))
  req.Header.Set("Authorization", "Bearer <token>")
  req.Header.Set("Content-Type", "application/json")
  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  data, _ := io.ReadAll(res.Body)
  fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

var request = HttpRequest.newBuilder(URI.create("https://studio.grid82.app/v1/organizations/<organizationId>/builders/<userId>"))
    .header("Authorization", "Bearer <token>")
    .header("Content-Type", "application/json")
    .method("PATCH", HttpRequest.BodyPublishers.ofString("{\"role\":\"admin\",\"allSuites\":true,\"suiteIds\":[\"<string>\"],\"canCreateSuites\":true}"))
    .build();

var response = HttpClient.newHttpClient().send(
    request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

require 'net/http'
require 'json'

uri = URI("https://studio.grid82.app/v1/organizations/<organizationId>/builders/<userId>")
request = Net::HTTP::Patch.new(uri)
request["Authorization"] = "Bearer <token>"
request["Content-Type"] = "application/json"
request.body = "{\"role\":\"admin\",\"allSuites\":true,\"suiteIds\":[\"<string>\"],\"canCreateSuites\":true}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts response.body

application/json

{
  "data": {
    "userId": "<string>",
    "role": "admin",
    "allSuites": true,
    "suiteIds": [
      "<string>"
    ],
    "canCreateSuites": true
  }
}

{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}

Admins can do everything and need no suite list; members see only their assigned suites, or every suite in the organisation when allSuites is on. Prevent demoting the last admin so the organisation always has someone who can change it.

Requires the members:write scope. Operation builders.update. MCP tool builders_update. CLI: grid82 builders update (npx grid82).

Path parameters

Name	Type	Required	Description
`organizationId`	string	yes
`userId`	string	yes

Headers

Name	Type	Required	Description
`Idempotency-Key`	string	no	Any unique string. Sending the same key with the same request again returns the first response (marked `Idempotency-Replayed: true`) instead of running it twice. Reusing it for a different request is refused with 409. Kept for 24 hours. Up to 255 characters.

Request body

Field	Type	Required
`role`	“admin” or “member”	no
`allSuites`	boolean	no
`suiteIds`	string[]	no
`canCreateSuites`	boolean	no

Response

application/json

Success

dataobjectrequired

Show child attributes

data.userIdstringrequired

data.roleenum<string>requiredone of: admin, member

data.allSuitesbooleanrequired

data.suiteIdsstring[]required

data.canCreateSuitesbooleanrequired

curl --request PATCH \ --url 'https://studio.grid82.app/v1/organizations/<organizationId>/builders/<userId>' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "role": "admin", "allSuites": true, "suiteIds": [ "<string>" ], "canCreateSuites": true }'

Change what a builder is, or which suites they may work on

Path parameters

Headers

Request body

Response

Use these docs with your AI tools

Query these docs via MCP

Query these docs over HTTP

Read these docs as Markdown