curl -X PATCH https://acme.orgo.space/api/v1/users/42 \
-H "Api-Token: $ORGO_API_TOKEN" \
-H "Content-Type: application/merge-patch+json" \
-d '{
"localCenter": "/api/v1/local_centers/7",
"mainRole": "/api/v1/user_roles/233"
}'
const res = await fetch("https://acme.orgo.space/api/v1/users/42", {
method: "PATCH",
headers: {
"Api-Token": process.env.ORGO_API_TOKEN,
"Content-Type": "application/merge-patch+json",
},
body: JSON.stringify({
localCenter: "/api/v1/local_centers/7",
mainRole: "/api/v1/user_roles/233",
}),
});
$response = $client->patch('/api/v1/users/42', [
'headers' => [
'Api-Token' => getenv('ORGO_API_TOKEN'),
'Content-Type' => 'application/merge-patch+json',
],
'body' => json_encode([
'localCenter' => '/api/v1/local_centers/7',
'mainRole' => '/api/v1/user_roles/233',
]),
]);
import requests
url = "https://app.orgo.space/api/v1/users/{id}"
payload = {
"localCenter": "/api/v1/local_centers/7",
"mainRole": "/api/v1/user_roles/233"
}
headers = {
"Api-Token": "<api-key>",
"Content-Type": "application/merge-patch+json"
}
response = requests.patch(url, json=payload, headers=headers)
print(response.text)package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://app.orgo.space/api/v1/users/{id}"
payload := strings.NewReader("{\n \"localCenter\": \"/api/v1/local_centers/7\",\n \"mainRole\": \"/api/v1/user_roles/233\"\n}")
req, _ := http.NewRequest("PATCH", url, payload)
req.Header.Add("Api-Token", "<api-key>")
req.Header.Add("Content-Type", "application/merge-patch+json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.patch("https://app.orgo.space/api/v1/users/{id}")
.header("Api-Token", "<api-key>")
.header("Content-Type", "application/merge-patch+json")
.body("{\n \"localCenter\": \"/api/v1/local_centers/7\",\n \"mainRole\": \"/api/v1/user_roles/233\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://app.orgo.space/api/v1/users/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Patch.new(url)
request["Api-Token"] = '<api-key>'
request["Content-Type"] = 'application/merge-patch+json'
request.body = "{\n \"localCenter\": \"/api/v1/local_centers/7\",\n \"mainRole\": \"/api/v1/user_roles/233\"\n}"
response = http.request(request)
puts response.read_body{
"id": 42,
"firstName": "James",
"lastName": "Patterson",
"email": "james.patterson@example.com",
"status": "ACTIVE",
"localCenter": {
"id": 7,
"name": "Manchester"
},
"dateUpdated": "2026-01-15T10:30:00+00:00"
}Update a user as admin
Updates a user profile with admin-level fields (status, permissions, admin-only attributes). Requires HR_LOCAL permission for the user’s local center or parent-level access. Also persists custom field values submitted in the request payload. Permission validation for customPermissions is enforced via a Doctrine listener.
curl -X PATCH https://acme.orgo.space/api/v1/users/42 \
-H "Api-Token: $ORGO_API_TOKEN" \
-H "Content-Type: application/merge-patch+json" \
-d '{
"localCenter": "/api/v1/local_centers/7",
"mainRole": "/api/v1/user_roles/233"
}'
const res = await fetch("https://acme.orgo.space/api/v1/users/42", {
method: "PATCH",
headers: {
"Api-Token": process.env.ORGO_API_TOKEN,
"Content-Type": "application/merge-patch+json",
},
body: JSON.stringify({
localCenter: "/api/v1/local_centers/7",
mainRole: "/api/v1/user_roles/233",
}),
});
$response = $client->patch('/api/v1/users/42', [
'headers' => [
'Api-Token' => getenv('ORGO_API_TOKEN'),
'Content-Type' => 'application/merge-patch+json',
],
'body' => json_encode([
'localCenter' => '/api/v1/local_centers/7',
'mainRole' => '/api/v1/user_roles/233',
]),
]);
import requests
url = "https://app.orgo.space/api/v1/users/{id}"
payload = {
"localCenter": "/api/v1/local_centers/7",
"mainRole": "/api/v1/user_roles/233"
}
headers = {
"Api-Token": "<api-key>",
"Content-Type": "application/merge-patch+json"
}
response = requests.patch(url, json=payload, headers=headers)
print(response.text)package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://app.orgo.space/api/v1/users/{id}"
payload := strings.NewReader("{\n \"localCenter\": \"/api/v1/local_centers/7\",\n \"mainRole\": \"/api/v1/user_roles/233\"\n}")
req, _ := http.NewRequest("PATCH", url, payload)
req.Header.Add("Api-Token", "<api-key>")
req.Header.Add("Content-Type", "application/merge-patch+json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.patch("https://app.orgo.space/api/v1/users/{id}")
.header("Api-Token", "<api-key>")
.header("Content-Type", "application/merge-patch+json")
.body("{\n \"localCenter\": \"/api/v1/local_centers/7\",\n \"mainRole\": \"/api/v1/user_roles/233\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://app.orgo.space/api/v1/users/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Patch.new(url)
request["Api-Token"] = '<api-key>'
request["Content-Type"] = 'application/merge-patch+json'
request.body = "{\n \"localCenter\": \"/api/v1/local_centers/7\",\n \"mainRole\": \"/api/v1/user_roles/233\"\n}"
response = http.request(request)
puts response.read_body{
"id": 42,
"firstName": "James",
"lastName": "Patterson",
"email": "james.patterson@example.com",
"status": "ACTIVE",
"localCenter": {
"id": 7,
"name": "Manchester"
},
"dateUpdated": "2026-01-15T10:30:00+00:00"
}Authorizations
Server-to-server authentication. Generate a token in the admin UI at
Settings → Developers → API Access. Send the raw token in the
Api-Token header — there is no Bearer prefix.
Tokens can be marked read-only at creation time, in which case the API
rejects any non-GET request with 403 Forbidden.
Path Parameters
User identifier
Body
The updated User resource
255255"/api/v1/local_centers/1"
"/api/v1/towns/1"
"/api/v1/tenants/1"
"/api/v1/towns/1"
"/api/v1/user_roles/1"
"/api/v1/profession_types/1"
"/api/v1/product_prices/1"
"/api/v1/product_prices/1"
"/api/v1/profession_jobs/1"
"/api/v1/profession_jobs/1"
Show child attributes
Show child attributes
Response
User resource updated
255255Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes

