team_role_set
Changes an admitted team member's access role (owner, admin, member, or reader) without re-wrapping key material, recording the update as a teamRoleChanged event.
Instructions
Change an admitted team member's access role (owner | admin | member | reader) without re-wrapping key material. Requires the caller to hold at least admin role; assigning admin or owner requires owner. The change is recorded as a teamRoleChanged event and converges identically on every peer.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role | Yes | New access role. Assigning admin or owner requires the caller to hold owner role. | |
| principalUid | Yes | ULID of the admitted team member whose role is being changed. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role | Yes | New effective role. | |
| status | Yes | Always "role_set" on success. | |
| eventUid | Yes | UID of the appended teamRoleChanged event. | |
| subjectPrincipalUid | Yes | Principal whose role was changed. |