{
"id": "wh_evt_67aa128c2f4a",
"event": "user_role.updated",
"api_version": "2024-01",
"created": 1735689600,
"tenant_id": 1,
"request": {
"id": "req_8c2f4a67aa12"
},
"object": {
"@id": "/api/v1/user_roles/199",
"id": 199,
"validityEndDate": "2027-01-15"
},
"previous_attributes": {
"validityEndDate": null
},
"is_update": true,
"entity_type": "user_role",
"operation": "updated"
}Role assignment updated
Fires when a role assignment’s properties change (scope adjustment, validity dates, custom attributes). The role itself is immutable — to “change a role”, delete the old assignment and create a new one.
{
"id": "wh_evt_67aa128c2f4a",
"event": "user_role.updated",
"api_version": "2024-01",
"created": 1735689600,
"tenant_id": 1,
"request": {
"id": "req_8c2f4a67aa12"
},
"object": {
"@id": "/api/v1/user_roles/199",
"id": 199,
"validityEndDate": "2027-01-15"
},
"previous_attributes": {
"validityEndDate": null
},
"is_update": true,
"entity_type": "user_role",
"operation": "updated"
}Authorizations
Server-to-server authentication. Generate a token in the admin UI at
Settings → Developers → API Access. Send the raw token in the
Api-Token header — there is no Bearer prefix.
Tokens can be marked read-only at creation time, in which case the API
rejects any non-GET request with 403 Forbidden.
Body
Unique delivery identifier — log this to correlate with Orgo's delivery dashboard.
"wh_evt_67aa128c2f4a"
The event type — e.g. user.created, product_payment.updated.
user_role.updated "user_role.updated"
Webhook payload schema version.
"2024-01"
Unix timestamp (seconds) of when the delivery was sent.
1735689600
ID of the Orgo tenant the event belongs to. Use this to route deliveries in a multi-tenant receiver.
1
Snapshot of the entity at the moment the event was emitted.
{ "@id": "/api/v1/user_roles/199", "id": 199, "validityEndDate": "2027-01-15" }
Metadata about the API request that triggered the event (when applicable).
Show child attributes
Show child attributes
True for *.updated events, false otherwise.
false
The entity family — e.g. user, product_payment, contact.
"user"
The operation — created, updated, or deleted.
created, updated, deleted Diff against the prior state. Only fields that changed are present. null for created/deleted events.
{ "validityEndDate": null }
Response
Acknowledged. Any 2xx tells Orgo the delivery succeeded.