Update a user
PUT/panel/users/:user
Updates a user's name and email. The password is changed only when a non-empty password is supplied; omit it to leave the password unchanged.
is_admin is ignored when the target user is yourself — you cannot add or remove your own platform administrator access through this endpoint. For any other user, admin access is granted or revoked to match is_admin.
Request
Responses
- 200
- 401
- 403
- 404
- 422
success reflects only the name/email/password update, and can be false when those values did not change. The is_admin change is applied separately and is not reflected in success — re-fetch the user to confirm it.
The bearer token is missing, malformed, unknown, or expired.
The token is valid, but the user it belongs to may not perform this action:
- they are not a member of the
{workspace}in the path; or - their workspace role is too low for this endpoint (write routes require Admin or Member); or
- for
/panelendpoints, they are not a platform administrator.
The host application that Mixpost is installed into can also deny access to Mixpost as a whole, which produces the same response.
The requested record does not exist. The message names the missing record — for example Post not found., Tag not found., Media not found., Account not found. or User not found.
The request body failed validation.