Set a member's role
team_update_member_roleReplace a team member’s current role with a new one by providing customer, user, and role UUIDs. Prevents privilege escalation by allowing only roles whose scopes the caller holds. Requires team:write scope.
Instructions
Assign a role (system or customer-owned, never superadmin) to a member of this customer, replacing their current role. The caller must hold every scope the role grants (no privilege escalation). Find user UUIDs via team_list_members and role UUIDs via team_list_roles. Requires the team:write scope.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role_id | Yes | UUID of the role to assign (from team_list_roles); superadmin roles cannot be assigned | |
| user_id | Yes | User UUID of the team member (find it via team_list_members) | |
| customer_id | Yes | Your customer UUID (shown in the WARP portal under Settings) |