Update Workspace Member Role
Update a workspace member’s role.
Required scope | workspace_members:write
role and defaultSiteRole together decide what the member can do and what role the dashboard shows for them. Submit only one of the combinations below — the dashboard’s own role picker never produces any other pairing.
Authentication
Bearer authentication of the form Bearer <token>, where token is your auth token.
Path parameters
Unique identifier for a Workspace. Find it with List Workspaces (workspace API tokens and Data Client apps), or with authorization.authorizedTo.workspaceIds from Get Authorization Info. With a site token, read workspaceId from Get Site.
Request
role: reviewer only pairs with defaultSiteRole: reviewer; any other pairing fails with invalid_workspace_role. On a Workspace not enrolled in Workspace Seats, moving a Member to or from reviewer fails with cannot_update_user_role regardless of defaultSiteRole.
The Member’s default Site Role. Required on every request — unlike the dashboard’s own role editor, this endpoint never derives it from the Member’s current role.
ID of the custom Site Role named by defaultSiteRole. Requires defaultSiteRole to be custom, and rejected with any other defaultSiteRole. Rejected if the id doesn’t name a custom Site Role belonging to this workspace.
Response
When the Member most recently joined the Workspace. Not “member since”: removing and re-adding a Member (including a support restore) reports the re-add, and a role change does not update it. For a Member who joined by invite, this is when they accepted, not when the invite was sent. null when unknown.