PUT

api

public

teams

{teamId}

permissions

{memberId}

Update Member Permissions

curl --request PUT \
  --url https://spaces.nexudus.com/api/public/teams/{teamId}/permissions/{memberId} \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "IsTeamAdministrator": true,
  "CanMakeBookings": true,
  "CanBookForTeam": true,
  "CanPurchaseProducts": true,
  "CanPurchaseEvents": true,
  "CanAccessCommunity": true
}
'

import requests

url = "https://spaces.nexudus.com/api/public/teams/{teamId}/permissions/{memberId}"

payload = {
    "IsTeamAdministrator": True,
    "CanMakeBookings": True,
    "CanBookForTeam": True,
    "CanPurchaseProducts": True,
    "CanPurchaseEvents": True,
    "CanAccessCommunity": True
}
headers = {
    "Authorization": "Basic <encoded-value>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Basic <encoded-value>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    IsTeamAdministrator: true,
    CanMakeBookings: true,
    CanBookForTeam: true,
    CanPurchaseProducts: true,
    CanPurchaseEvents: true,
    CanAccessCommunity: true
  })
};

fetch('https://spaces.nexudus.com/api/public/teams/{teamId}/permissions/{memberId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "401 Unauthorized": {},
  "403 Forbidden": {},
  "400 Bad Request": {},
  "404 Not Found": {}
}

Update Member Permissions

Updates the permission flags for a single team member, controlling what actions they can perform within the team context — such as making bookings, purchasing products, or accessing community features. Only team administrators can modify permissions. An administrator cannot change their own IsTeamAdministrator flag.

Authentication

Requires a valid customer bearer token. The customer must be a team administrator of the specified team.

Path Parameters

number

required

Numeric identifier of the team. Returned as Id from GET /api/public/teams/my.

number

required

Numeric identifier of the member whose permissions are being updated. Returned as Id in the AllTeamMembers array from GET /api/public/teams/ {teamId}/profile.

Request Body

number

Member ID (mirrors the path parameter).

boolean

required

When true, grants the member full administrative rights. Disabled when editing one’s own permissions.

boolean

required

When true, the member can create bookings.

boolean

required

When true, the member can create bookings on behalf of the team.

boolean

required

When true, the member can purchase products.

boolean

required

When true, the member can purchase event tickets.

boolean

required

When true, the member can access community features (directory, discussion boards).

string

Access card identifier for physical access control. Maximum 15 characters.

Response

Returns HTTP 200 OK with an empty body on success.

Examples

Grant admin rights and booking permissions

PUT /api/public/teams/55/permissions/102
Authorization: Bearer {token}
Content-Type: application/json

{
  "Id": 102,
  "IsTeamAdministrator": false,
  "CanMakeBookings": true,
  "CanBookForTeam": true,
  "CanPurchaseProducts": true,
  "CanPurchaseEvents": false,
  "CanAccessCommunity": true,
  "AccessCardId": "CARD-00102"
}

Status: 200 OK
Body: (empty)

TypeScript Integration

import { endpoints } from '@/api/endpoints'

await httpClient.put(endpoints.teams.permissions(teamId, memberId), {
  IsTeamAdministrator: false,
  CanMakeBookings: true,
  CanBookForTeam: true,
  CanPurchaseProducts: true,
  CanPurchaseEvents: false,
  CanAccessCommunity: true,
})

Usage in Portal

Context	Source file
Team permissions modal (`/team/permissions/{teamId}`)	`src/views/user/team/permissions/components/TeamPermissionModal.tsx`

Error Responses

error

The customer is not authenticated or the session has expired.

error

The customer is not an administrator of the specified team.

error

Invalid request data — for example, AccessCardId exceeding 15 characters.

error

Team or member with the specified ID does not exist.

Method	Endpoint	Description
`GET`	`/api/public/teams/{teamId}/profile`	Full team profile with members
`POST`	`/api/public/teams/{teamId}/members`	Add members to a team
`DELETE`	`/api/public/teams/{teamId}/members/{coworkerId}`	Remove a member from a team
`GET`	`/api/public/teams/my`	List the customer’s teams

List Team ProfilesReturns team profile summaries including member lists, permissions, and recent bookings for the booking flow.

Update Member Permissions

curl --request PUT \
  --url https://spaces.nexudus.com/api/public/teams/{teamId}/permissions/{memberId} \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "IsTeamAdministrator": true,
  "CanMakeBookings": true,
  "CanBookForTeam": true,
  "CanPurchaseProducts": true,
  "CanPurchaseEvents": true,
  "CanAccessCommunity": true
}
'

import requests

url = "https://spaces.nexudus.com/api/public/teams/{teamId}/permissions/{memberId}"

payload = {
    "IsTeamAdministrator": True,
    "CanMakeBookings": True,
    "CanBookForTeam": True,
    "CanPurchaseProducts": True,
    "CanPurchaseEvents": True,
    "CanAccessCommunity": True
}
headers = {
    "Authorization": "Basic <encoded-value>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Basic <encoded-value>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    IsTeamAdministrator: true,
    CanMakeBookings: true,
    CanBookForTeam: true,
    CanPurchaseProducts: true,
    CanPurchaseEvents: true,
    CanAccessCommunity: true
  })
};

fetch('https://spaces.nexudus.com/api/public/teams/{teamId}/permissions/{memberId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "401 Unauthorized": {},
  "403 Forbidden": {},
  "400 Bad Request": {},
  "404 Not Found": {}
}

​Update Member Permissions

​Authentication

​Path Parameters

​Request Body

​Response

​Examples

​Grant admin rights and booking permissions

​TypeScript Integration

​Usage in Portal

​Error Responses

​Related Endpoints

Update Member Permissions

Authentication

Path Parameters

Request Body

Response

Examples

Grant admin rights and booking permissions

TypeScript Integration

Usage in Portal

Error Responses

Related Endpoints