Update one person's resource permission rings and actions

PATCH/v1/resource-invitations/resources/{resourceType}/{resourceId}/people/{personId}

Requires resource access-management authority and the resource service write scope. Changes only the selected personal policy; team and organization role policies are unaffected. Pending entries still require acceptance.

How to call this endpoint

Every ACP API request uses bearer authentication. The examples here show the actual request path, auth header, and body shape that the platform expects.

Path, query, and header parameters

These parameters control which ACP object the endpoint acts on and how the request is processed.

Path parameters
NameLocationTypeRequiredDescription
resourceTypepathskill | channel | resource_package | project | environment | agent | prompt | knowledge_library | database | server | security_repository | guardrail | evaluation | fine_tuning | test_plan | assurance_policy | metronome_workflow | batch_job | inference_endpointYes
resourceIdpathstringYes
personIdpathstringYesPersonal access entry ID
Query parameters
None.
Header parameters
NameLocationTypeRequiredDescription
X-Computer-Agents-OrganizationheaderstringYes

Body schema

Content type: application/json · Required

FieldTypeRequiredDescription
permissionSetobjectYesResource-specific policy, not agent runtime permissions. Action identifiers must belong to the named resource type. Missing default access is normalized to no_access.
permissionSet.versionintegerNo
permissionSet.defaultAccessfull_access | ask_for_permission | read_only | no_accessNo
permissionSet.ringsobjectNo
permissionSet.actionsobjectNo

What the API returns

Each response code below includes the documented payload shape for the ACP API.

204Personal policy updated
None.
400Invalid resource
None.
401Authentication required
None.
403Resource access-management permission required
None.
404Resource or personal entry unavailable in this organization
None.
409Project conversations inherit access from their parent project
None.
503PostgreSQL required
None.
Update one person's resource permission rings and actions
Loading...
Response 204
Loading...
See the ACP quickstart and SDK flow