Update role for organization member

PATCH/organizations/{org_id}/members/{member_id}Update role for organization member

Updates the role of an existing member in the specified organization. The requested role must be valid for the organization. Only organization admins can call this endpoint.

Parameters

org_idstringpathrequired

The Neon organization ID

pattern ^[a-z0-9-]{1,60}$

member_idstring · uuidpathrequired

The Neon organization member ID

Request body

required

application/json

objectOrganizationMemberUpdateRequest

rolestringrequired

Organization member's role. `admin`: full administrative access. `editor` (and its legacy alias `member`): standard access governed by project permissions. `viewer` and `collaborator`: additional scoped project roles. Some values may not be available for all organizations.

one of "admin", "member", "editor", "viewer", "collaborator"

Example request

{
  "role": "member"
}

Responses

objectMember

idstring · uuidrequired

The organization member's ID.

joined_atstring · date-time

Timestamp when the user joined the organization.

org_idstringrequired

The Neon organization ID. Returned as `id` from `GET /users/me/organizations`.

pattern ^[a-z0-9-]{1,60}$

rolestringrequired

one of "admin", "member", "editor", "viewer", "collaborator"

user_idstring · uuidrequired

The Neon user ID.

Example response

{
  "id": "00000000-0000-0000-0000-000000000000",
  "joined_at": "2026-06-09T00:00:00Z",
  "org_id": "org-cool-darkness-12345678",
  "role": "admin",
  "user_id": "00000000-0000-0000-0000-000000000000"
}

defaultGeneral Error. The request may or may not be safe to retry, depending on the HTTP method, response status code, and whether a response was received. - If no response is returned from the API, a network error or timeout likely occurred. - In some cases, the request may have reached the server and been successfully processed, but the response failed to reach the client. As a result, retrying non-idempotent requests can lead to unintended results. The following HTTP methods are considered non-idempotent: `POST`, `PATCH`, `DELETE`, and `PUT`. Retrying these methods is generally **not safe**. The following methods are considered idempotent: `GET`, `HEAD`, and `OPTIONS`. Retrying these methods is **safe** in the event of a network error or timeout. Any request that returns a `503 Service Unavailable` response is always safe to retry. Any request that returns a `423 Locked` response is safe to retry. `423 Locked` indicates that the resource is temporarily locked, for example, due to another operation in progress. application/json

objectGeneralError

codestringrequired

default ""

messagestringrequired

Error message

request_idstring

Unique identifier for the request, useful for debugging. You can set this value manually by including an `X-Request-ID` header in the request. If not provided, the value will be generated automatically.

Example response

{
  "code": "",
  "message": "string",
  "request_id": "string"
}

Examples

org_idrequiredpath parameter

member_idrequiredpath parameter

curl -X PATCH 'https://console.neon.tech/api/v2/organizations/string/members/00000000-0000-0000-0000-000000000000' \
  -H 'Content-Type: application/json' \
  -d '{"role":"admin"}'

const response = await fetch('https://console.neon.tech/api/v2/organizations/string/members/00000000-0000-0000-0000-000000000000', {
  method: 'PATCH',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"role":"admin"}),
});
const data = await response.json();

const response = await fetch('https://console.neon.tech/api/v2/organizations/string/members/00000000-0000-0000-0000-000000000000', { method: 'PATCH', headers: { 'Content-Type': 'application/json' }, body: "{\"role\":\"admin\"}" });
console.log(await response.json());

import requests

response = requests.request(
    "PATCH",
    "https://console.neon.tech/api/v2/organizations/string/members/00000000-0000-0000-0000-000000000000",
    headers={"Content-Type": "application/json"},
    data='{"role":"admin"}',
)
print(response.json())

package main

import (
	"context"
	"net/http"
	"strings"
)

func main() {
	ctx := context.Background()
	body := strings.NewReader(`{"role":"admin"}`)
	req, err := http.NewRequestWithContext(ctx, "PATCH", "https://console.neon.tech/api/v2/organizations/string/members/00000000-0000-0000-0000-000000000000", body)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	resp, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()
}

<?php
$request = curl_init("https://console.neon.tech/api/v2/organizations/string/members/00000000-0000-0000-0000-000000000000");
curl_setopt($request, CURLOPT_CUSTOMREQUEST, "PATCH");
curl_setopt($request, CURLOPT_POSTFIELDS, "{\"role\":\"admin\"}");
curl_setopt($request, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
$response = curl_exec($request);
curl_close($request);

var request = HttpRequest.newBuilder(URI.create("https://console.neon.tech/api/v2/organizations/string/members/00000000-0000-0000-0000-000000000000"))
    .method("PATCH", HttpRequest.BodyPublishers.noBody())
    .header("Content-Type", "application/json")
    .method("PATCH", HttpRequest.BodyPublishers.ofString("{\"role\":\"admin\"}"))
    .build();
var response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());

require 'net/http'

uri = URI("https://console.neon.tech/api/v2/organizations/string/members/00000000-0000-0000-0000-000000000000")
request = Net::HTTPGenericRequest.new("PATCH", true, true, uri)
request['Content-Type'] = 'application/json'
request.body = "{\"role\":\"admin\"}"
response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |http| http.request(request) }

using var client = new HttpClient();
using var request = new HttpRequestMessage(HttpMethod.Patch, "https://console.neon.tech/api/v2/organizations/string/members/00000000-0000-0000-0000-000000000000");
request.Content = new StringContent("{\"role\":\"admin\"}", Encoding.UTF8, "application/json");
using var response = await client.SendAsync(request);

{
  "id": "00000000-0000-0000-0000-000000000000",
  "joined_at": "2026-06-09T00:00:00Z",
  "org_id": "org-cool-darkness-12345678",
  "role": "admin",
  "user_id": "00000000-0000-0000-0000-000000000000"
}

{
  "code": "",
  "message": "string",
  "request_id": "string"
}