Only the attributes present in the body are updated, so you can send a single field:

{
    "team_uuid": "5290728d-b3c4-4330-918d-d8f153e9500d"
}

Sending roles replaces the user's roles entirely. You may resend a privileged role the user already holds, but the API never grants a new one (see Create a user). Setting active to false deactivates the user (see Deactivate a user); setting it back to true reactivates them.

A few workspace-level rules still apply: you cannot remove the last active super admin, you cannot leave your workspace without a single active paying license, and you cannot change a user's email while SSO is enforced for your company or when the user is a super admin.

📘

Requires the write_users permission scope on the API key.