Patch users (merge, key in every record)

PATCH 
/v1/users

Customer portal users. is_active, active_from and active_to keep their value when a POST leaves them out. The email is unique across live users; a deleted user holding it is restored under the new login account. password (login_type 1) is stored hashed and must be changed at the next sign-in; groups [{ external_code }] replace the memberships; send_invite emails a set-password link. Tenant-wide: a key limited to organizations cannot use it.

Keys: id, source_system + source_record_id, login_account. Rights: READ_USER to read, POST_USER to write (and READ_DATA / POST_DATA).

Merge: only the fields sent change; never creates (unknown keys answer not_found). Children are merged by their keys; send "_delete": true on a child to remove it.

Request

Responses

200

Every record succeeded

207

Some records were rejected or not found (see each result)

400

The request itself is invalid (not an array, empty)

401

Missing or invalid API key

403

The key lacks the right, or the record is outside its organizations

404

No record was found

413

More than 1,000 records

422

Every record was rejected, or all_or_none rolled the request back (results inside)