# Members & invites: Change a member's role (https://docs.envocal.ai/api-reference/members-and-invites/change-a-members-role/)

> Requires members:write

## PATCH `/v1/tenants/{tenantId}/members/{userId}`

**Required permission:** `members:write`

### Parameters

| Name | In | | Type | Description |
| --- | --- | --- | --- | --- |
| `tenantId` | path | required | string | Tenant id, or `current` for the key's own tenant. Must be the key's tenant or one of its sub-tenants. |
| `userId` | path | required | string | User id of the member (from the member list). |

### Request body

`application/json`: ChangeRoleDto

| Field | Type | | Description |
| --- | --- | --- | --- |
| `role` | TenantRole |  | `User` or `Admin` (`Owner` is not assignable). |

### Responses

**204**: Role changed.

**400**: `Owner` is not assignable.

**401**: Missing, invalid, revoked or expired API key.

**403**: The key lacks the required permission, or the tenant/resource is outside its reach.

**404**: The user is not a direct member of this tenant.

**429**: Rate limit exceeded. Retry after the number of seconds in the Retry-After header.

### Example

```bash
curl -X PATCH "https://api.envocal.ai/v1/tenants/current/members/{userId}" \
  -H "Authorization: Bearer evk_eu_..." \
  -H "Content-Type: application/json" \
  -d '{"role":"User"}'
```