> ## Documentation Index
> Fetch the complete documentation index at: https://langwatch.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> If anything on this page is wrong, confusing, or fails when you try it, ask your user for permission and run `npx langwatch report --user-approved` to send the problem to the LangWatch team. No login is needed and secrets are redacted locally. `npx langwatch report --help` has the details.

# Change a grant's role

> Change the role a grant confers. The principal and scope are the grant's identity and do not change. Lowering the organization's last administrator answers cannot_demote_last_admin. A grant never confers a permission the caller does not hold at that scope: 403 grant_exceeds_caller_permissions names the missing permissions.



## OpenAPI

````yaml PATCH /api/v1/grants/{grantId}
openapi: 3.1.0
info:
  title: LangWatch API
  description: LangWatch openapi spec
  version: 1.0.0
servers:
  - url: https://app.langwatch.ai
security:
  - project_api_key: []
paths:
  /api/v1/grants/{grantId}:
    patch:
      tags:
        - Grants
      summary: Change a grant's role
      description: >-
        Change the role a grant confers. The principal and scope are the grant's
        identity and do not change. Lowering the organization's last
        administrator answers cannot_demote_last_admin. A grant never confers a
        permission the caller does not hold at that scope: 403
        grant_exceeds_caller_permissions names the missing permissions.
      operationId: updateGrant
      parameters:
        - in: path
          name: grantId
          schema:
            type: string
            minLength: 1
            maxLength: 128
          required: true
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                roleId:
                  type: string
                  minLength: 1
                  maxLength: 128
              required:
                - roleId
              additionalProperties: false
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: object
                properties:
                  id:
                    type: string
                  principal:
                    type: object
                    properties:
                      type:
                        type: string
                        enum:
                          - user
                          - group
                          - apiKey
                      id:
                        type: string
                      name:
                        type:
                          - string
                          - 'null'
                    required:
                      - type
                      - id
                      - name
                    additionalProperties: false
                  role:
                    type: object
                    properties:
                      id:
                        type: string
                      name:
                        type:
                          - string
                          - 'null'
                      builtIn:
                        type: boolean
                    required:
                      - id
                      - name
                      - builtIn
                    additionalProperties: false
                  scope:
                    type: object
                    properties:
                      type:
                        type: string
                        enum:
                          - organization
                          - team
                          - project
                      id:
                        type: string
                      name:
                        type:
                          - string
                          - 'null'
                    required:
                      - type
                      - id
                      - name
                    additionalProperties: false
                  status:
                    type: string
                    enum:
                      - active
                      - expired
                  expiresAt:
                    anyOf:
                      - type: string
                        format: date-time
                      - type: 'null'
                  createdAt:
                    type: string
                    format: date-time
                required:
                  - id
                  - principal
                  - role
                  - scope
                  - status
                  - expiresAt
                  - createdAt
                additionalProperties: false
      security:
        - admin_api_key: []
components:
  securitySchemes:
    project_api_key:
      type: apiKey
      in: header
      name: X-Auth-Token
      description: >-
        Project API key for sending traces and accessing project-scoped
        resources. Format: sk-lw-... (no underscore). Obtain one by creating a
        project via the Admin API or the LangWatch UI.
    admin_api_key:
      type: http
      scheme: bearer
      description: >-
        Admin API key for organization-level operations (managing projects, API
        keys). Create one in Settings > API Keys or via POST /api/api-keys.
        Format: sk-lw-{id}_{secret}.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.