Update User Role
Update another user’s WorkOS membership role.
Two-phase write: the WorkOS membership is updated first (authoritative
source). On success, the local users.role display cache is mirrored.
On DB-mirror failure, structured logs flag the drift; the hourly
reconciliation worker will heal it on its next run.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Body
Payload for changing a user's role.
One of: admin, office-admin, office-employee, crew-member
Response
Successful Response
User info for admin view — hides technical fields.
role is the cached WorkOS membership role, used purely to render the
crew table. Never read it for authorization.