Set a member's role
team_update_member_roleAssign a new role to a team member, replacing their existing role. Requires team:write scope and prevents privilege escalation.
Instructions
Assign a role (system or customer-owned, never superadmin) to a member of this customer, replacing their current role. The caller must hold every scope the role grants (no privilege escalation). Find user UUIDs via team_list_members and role UUIDs via team_list_roles. Requires the team:write scope.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role_id | Yes | UUID of the role to assign (from team_list_roles); superadmin roles cannot be assigned | |
| user_id | Yes | User UUID of the team member (find it via team_list_members) | |
| customer_id | Yes | Your customer UUID (shown in the WARP portal under Settings) |