---
search:
  tags:
    - Business controls
    - PUT
seo:
  description: >-
    Owner administration or the explicitly assigned business permission is
    required.… Reference for the PUT /api/v1/security/roles endpoint in the
    PharmaFlow API.
sidebar:
  label: PUT /roles
  badge: PUT
title: PUT /roles
type: openapi-operation
---
Owner administration or the explicitly assigned business permission is required. Actions are scoped to the signed-in branch. A request cannot be approved by its creator. Locked sessions return 423.

`PUT /api/v1/security/roles`

**Request body** (`application/json`, required)

- `id` (string, required)
- `name` (string, required)
- `permissions` (string[], required)
- `active` (boolean, required)

Request body example:

```json
{
  "id": "string",
  "name": "string",
  "permissions": [
    "sales.prepare"
  ],
  "active": true
}
```

**Responses**

- `200` — Operation completed
- `201` — Record created
- `400` — Invalid request
- `401` — Session expired or revoked
- `403` — Permission denied or self-approval
- `409` — Record changed or no longer actionable
- `423` — Register locked