Update a user

Updates instance role assignments and optionally the email. Requires user:write or usermanagement.write. Email changes are not allowed for external SSO users or users with more than one customer domain.

Request

PUT /user/{auth0UserId}

Path Parameters

Parameter	Type	Required	Description
`auth0UserId`	string	Yes	User ID (for example `auth0\|abc123`).

Headers

Header	Value
`Authorization`	`Bearer <token>` (or HMAC headers, see Authentication)
`Content-Type`	`application/json`

Request Body

Field	Type	Required	Description
`email`	string	No	Updated email (lowercased).
`instances`	object	No	Map of instance identifiers to arrays of role IDs. Use `"*"` for all instances.

Example Request

{
  "email": "[email protected]",
  "instances": {
    "*": ["rol_abc"],
    "live": ["rol_abc", "rol_xyz"]
  }
}

Response

Sanitized user object:

{
  "user_id": "auth0|abc123",
  "email": "[email protected]",
  "instances": {
    "*": ["rol_abc"],
    "live": ["rol_abc", "rol_xyz"]
  }
}