Set project allowlist for a team member (admin only)

PUT

/team/members/{userId}/project-access

curl --request PUT \
  --url https://example.com/api/team/members/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/project-access \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "project_ids": [ "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0" ], "projectIds": [ "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0" ], "mode": "all", "billingAccountId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0" }'

• AppHandoff API

mode=all clears restrictions; mode=restricted uses project_ids/projectIds as the complete allowlist, including an empty deny-all list.

Authorizations

• bearerApiKey
• cookieAuth

Parameters

Path Parameters

userId

required

string format: uuid

Request Body ^required

Media type application/json

object

project_ids

Array<string>

projectIds

Array<string>

mode

string

Allowed values: all restricted

billingAccountId

string format: uuid

Responses

200

Success

Media type application/json

object

ok

required

boolean

400

Invalid request

Media type application/json

object

error

required

Human-readable error message

string

code

Stable machine-readable error code for client branching

string

fieldErrors

First validation message per field path

object

key

additional properties

string

issues

Structured validation issues (Zod)

Array<object>

object

path

required

string

message

required

string

retryAfter

Seconds until rate limit resets (429 responses)

number

401

Not authenticated

Media type application/json

object

error

required

Human-readable error message

string

code

Stable machine-readable error code for client branching

string

fieldErrors

First validation message per field path

object

key

additional properties

string

issues

Structured validation issues (Zod)

Array<object>

object

path

required

string

message

required

string

retryAfter

Seconds until rate limit resets (429 responses)

number

reconnect

True if re-linking GitHub may fix the issue

boolean

403

Forbidden

Media type application/json

object

error

required

Human-readable error message

string

code

Stable machine-readable error code for client branching

string

fieldErrors

First validation message per field path

object

key

additional properties

string

issues

Structured validation issues (Zod)

Array<object>

object

path

required

string

message

required

string

retryAfter

Seconds until rate limit resets (429 responses)

number

409

Multiple billing accounts; pass billingAccountId.