This endpoint is deprecated. Use PATCH /public-api/resources/admins/v1.1/{admin} instead.

Experimental endpoint — not yet a stable contract. This resource ships as experimental / beta. While experimental, its schema and behaviour may change without a version bump — including breaking changes within v1.0 itself. Anyone consuming it does so for evaluation only, or by coordinating adoption with their account manager so changes can be sequenced with them. It graduates to a stable, version-locked contract (where the normal breaking-change rules apply) only when this experimental notice is removed.

Update an administrator of any type. A property left out of the request is unchanged, and null clears an optional property. A request without roleId never changes the administrator's role. The status is changed only through the activate and deactivate actions.

The API token's administrator may update an administrator only when an administrator with the same role, permissions and organization could edit that account in the admin panel, with the same scope and role hierarchy rules. An administrator outside the token's scope returns 404 Not Found; an administrator the token can see but may not edit returns 403 Forbidden. A refused request changes nothing.

An administrator editing their own account may resend their current roleId but may not change it, unless the request uses a Tenant admin API token; any other roleId is refused with a 422 validation error: "The selected roleId is invalid." The resend rule does not apply to installation_and_maintenance administrators: any roleId sent for them is refused with "The roleId field cannot be changed." This behaviour changed in place, without a new API version.

The update writes the same audit log entry as the same edit in the admin panel, attributed to the API token's administrator. Includes are not supported.