---
title: "Change what a builder is, or which suites they may work on"
description: "Restrict updates to admins."
canonical: "https://grid82.com/docs/builder-api/builders/update"
updated: "2026-11-13"
---

# Change what a builder is, or which suites they may work on

`PATCH https://studio.grid82.app/v1/organizations/{organizationId}/builders/{userId}`

Restrict updates to admins.

Admins can do everything and need no suite list; members see only their assigned suites, or every suite in the organisation when `allSuites` is on. Prevent demoting the last admin so the organisation always has someone who can change it.

Requires the `members:write` scope. Operation `builders.update`. MCP tool `builders_update`. CLI: `grid82 builders update` (`npx grid82`).

## Path parameters

| Name             | Type   | Required | Description |
| ---------------- | ------ | -------- | ----------- |
| `organizationId` | string | yes      |             |
| `userId`         | string | yes      |             |

## Headers

| Name              | Type   | Required | Description                                                                                                                                                                                                                                                        |
| ----------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| `Idempotency-Key` | string | no       | Any unique string. Sending the same key with the same request again returns the first response (marked `Idempotency-Replayed: true`) instead of running it twice. Reusing it for a different request is refused with 409. Kept for 24 hours. Up to 255 characters. |

## Request body

| Field             | Type                | Required | Description |
| ----------------- | ------------------- | -------- | ----------- |
| `role`            | "admin" or "member" | no       |             |
| `allSuites`       | boolean             | no       |             |
| `suiteIds`        | string\[]           | no       |             |
| `canCreateSuites` | boolean             | no       |             |

**Authorizations**

- `Authorization` (bearer, in header, required)

## Response

**200**: Success

- `data` (`object`, required)
- `data.userId` (`string`, required)
- `data.role` (`enum<string>`, required, one of: `admin, member`)
- `data.allSuites` (`boolean`, required)
- `data.suiteIds` (`string[]`, required)
- `data.canCreateSuites` (`boolean`, required)

```json
{
  "data": {
    "userId": "<string>",
    "role": "admin",
    "allSuites": true,
    "suiteIds": [
      "<string>"
    ],
    "canCreateSuites": true
  }
}
```

**4XX**: Refused

- `error` (`object`, required)
- `error.code` (`enum<string>`, required, one of: `not_found, forbidden, unauthenticated, validation_failed, conflict, rate_limited, payment_required, not_implemented, internal`)
- `error.message` (`string`, required)
- `error.details` (`Record<string, unknown>`)

```json
{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}
```

**Example request**

```bash
curl --request PATCH \
  --url 'https://studio.grid82.app/v1/organizations/<organizationId>/builders/<userId>' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "role": "admin",
  "allSuites": true,
  "suiteIds": [
    "<string>"
  ],
  "canCreateSuites": true
}'
```