/bff/member/save-permissions

Updates the permissions and roles assigned to a member. For active members this replaces all existing direct permissions and role assignments. For pending invitations the values are stored on the invitation row and applied when the invitee confirms.

MemberpostBffMemberSave-permissions

Parameters

JSON body

Request body

application/json

idstringRequired

Identifier of the member (shop__contact.external_id for active members, pending-<token> for pending invitations).

permissionCodesstring[]Optional

Legacy array of permission codes (no expiry). Ignored if permissionGrants is set.

Permission code.

roleCodesstring[]Optional

Legacy array of role codes (no expiry). Ignored if roleGrants is set.

Role code.

permissionGrantsobject[]Optional

Granular permission grants with optional per-code expiry.

Each array item:

codestringRequired

validTostring | nullOptional

One of 2:

Variant 1

string

ISO timestamp when the grant expires.

Variant 2

null

roleGrantsobject[]Optional

Granular role grants with optional per-code expiry.

Each array item:

codestringRequired

validTostring | nullOptional

One of 2:

Variant 1

string

Variant 2

null

Response schema

1 status code documented

200SuccessPermissions saved successfully.

successbooleanRequired

Default: true

Response example

application/json

{
  "success": true
}

Request example

POST /bff/member/save-permissions

post

curl -X POST "https://api.bizkithub.com/bff/member/save-permissions" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{
  "id": "example_id",
  "permissionCodes": [
    "string"
  ],
  "roleCodes": [
    "string"
  ],
  "permissionGrants": [
    {
      "code": "example_code"
    }
  ],
  "roleGrants": [
    {
      "code": "example_code"
    }
  ]
}'

Need an API key?

All BizKitHub public API endpoints require authentication via API key.

Get API Key