> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nekt.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Permission

> Change the level of a single existing grant.

`permission_level` is the only writable field. Everything else on the object — the recipient, the resource, `granted_by` — is fixed at assignment time. To move a grant to a different resource or recipient, revoke it and assign a new one.

```bash theme={null}
curl --request PATCH \
  --url https://api.nekt.ai/api/v1/permissions/6f2a9c4b-2a10-4e7f-9c54-d2a9b1d28b0e/ \
  --header "x-api-key: YOUR_API_KEY" \
  --header "Content-Type: application/json" \
  --data '{"permission_level": "editor"}'
```

<Note>
  [Assign Permissions](/platform-api/permissions/catalog/assign) can do the same thing in bulk and without knowing the grant id — it matches on recipient and resource. Use this endpoint when you already hold the id, for example from [List Permissions](/platform-api/permissions/catalog/list).
</Note>

## Who can call it

An API key created by an Owner or Admin can change any grant. A key created by a Member can only move a grant between `viewer` and `editor`, and only on a resource where that Member holds `manager`. Anything else returns `403`.

## Related

* [Revoke Permission](/platform-api/permissions/catalog/revoke) — remove the grant instead of changing it.
* [Permissions flow](/platform-api/permissions/overview) — the ceiling rules in full.


## OpenAPI

````yaml PATCH /api/v1/permissions/{id}/
openapi: 3.0.3
info:
  title: Nekt API
  version: v1
  description: Nekt API Documentation
  contact:
    email: support@nekt.ai
servers:
  - url: https://api.nekt.ai
security: []
paths:
  /api/v1/permissions/{id}/:
    patch:
      tags:
        - v1
      operationId: v1_permissions_partial_update
      parameters:
        - in: path
          name: id
          schema:
            type: string
            format: uuid
          description: A UUID string identifying this Lakehouse permission.
          required: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PatchedLakehousePermission'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/PatchedLakehousePermission'
          multipart/form-data:
            schema:
              $ref: '#/components/schemas/PatchedLakehousePermission'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LakehousePermission'
          description: ''
      security:
        - ApiKeyAuth: []
components:
  schemas:
    PatchedLakehousePermission:
      type: object
      properties:
        id:
          type: string
          format: uuid
          readOnly: true
        permission_level:
          $ref: '#/components/schemas/PermissionLevelEnum'
        created_at:
          type: string
          format: date-time
          readOnly: true
        updated_at:
          type: string
          format: date-time
          readOnly: true
        user:
          type: string
          readOnly: true
          description: User (Expandable)
        group:
          type: string
          readOnly: true
          description: Group (Expandable)
        layer:
          type: string
          readOnly: true
          description: Layer (Expandable)
        folder:
          type: string
          readOnly: true
          description: Folder (Expandable)
        table:
          type: string
          readOnly: true
          description: Table (Expandable)
        volume:
          type: string
          readOnly: true
          description: Volume (Expandable)
        granted_by:
          type: string
          readOnly: true
          description: Granted by (Expandable)
    LakehousePermission:
      type: object
      properties:
        id:
          type: string
          format: uuid
          readOnly: true
        permission_level:
          $ref: '#/components/schemas/PermissionLevelEnum'
        created_at:
          type: string
          format: date-time
          readOnly: true
        updated_at:
          type: string
          format: date-time
          readOnly: true
        user:
          type: string
          readOnly: true
          description: User (Expandable)
        group:
          type: string
          readOnly: true
          description: Group (Expandable)
        layer:
          type: string
          readOnly: true
          description: Layer (Expandable)
        folder:
          type: string
          readOnly: true
          description: Folder (Expandable)
        table:
          type: string
          readOnly: true
          description: Table (Expandable)
        volume:
          type: string
          readOnly: true
          description: Volume (Expandable)
        granted_by:
          type: string
          readOnly: true
          description: Granted by (Expandable)
      required:
        - created_at
        - folder
        - granted_by
        - group
        - id
        - layer
        - permission_level
        - table
        - updated_at
        - user
        - volume
    PermissionLevelEnum:
      enum:
        - manager
        - editor
        - viewer
      type: string
      description: |-
        * `manager` - Manager
        * `editor` - Editor
        * `viewer` - Viewer
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: x-api-key
      description: 'API Key authentication. Format: ''x-api-key: api_key'''

````