UpdateRoleRequest

Request schema for updating a role

denied_permissionsstring[]

Permissions to explicitly deny for this role. Replaces the existing denial list. Denials win over grants, including wildcards. Pass an empty array to clear denials. Cannot be set on superuser roles.

namestring

The role's display name.

permissionsstring[]

Allow-list of permissions for custom roles only. Built-in roles (superuser, admin, staff) reject updates to this field; their grants are defined by type.

UpdateRoleRequest

{
  "denied_permissions": [
    "appointments.own.cancel",
    "appointments.own.reschedule"
  ]
}