# Update users role

> 🔒 **Private label — [contact sales](mailto:sales@boyahq.com).** Requires a private-label entitlement on your API client.

Update users role

Endpoint: PATCH /permissions/employees/{employee_id}/role
Version: 2.0.0
Security: oauth2ClientCredentials

## Path parameters:

  - `employee_id` (string, required)

## Header parameters:

  - `business_id` (string, required)
    Business identifier for the request

## Request fields (application/json):

  - `role` (string, required)
    User role
    Enum: "CARD USER", "APPROVER", "ADMIN", "REVIEWER", "SUPER ADMIN", "AUDITOR"

## Response 200 fields (application/json):

  - `status` (number, required)
    HTTP status code
    Example: 200

  - `data` (object)
    Response data containing database name and permissions

  - `data.databaseName` (string)
    Business database identifier
    Example: biz_4badab471100

  - `timestamp` (string, required)
    Response timestamp in ISO format
    Example: 2026-01-09T08:18:46.794Z