Update Member Roles using the Snyk API v1

To migrate members of existing organizations to new roles, you must use the Snyk API.

Follow the steps in each section of this document. Snyk recommends running these updates with bounded concurrency in batches so as not to trip any of the rate limiters. Optimally, perform the updates in batches of ten concurrent requests at a time.

Step 1: Get a list of roles in your Group

Request: GET https://snyk.io/api/v1/group/{groupId}/roles

API documentation: https://snyk.docs.apiary.io/#reference/groups/list-all-roles-in-a-group/list-all-roles-in-a-group

This call returns an array of objects, each describing custom and non-custom (for example, default) roles. Default roles are indicated by the customRole: false property. Save thepublicId of each role you want to assign to a user.

Step 2: Get a list of Organization members

Request: GET https://snyk.io/api/v1/org/{orgId}/members

API documentation: https://snyk.docs.apiary.io/#reference/organizations/members-in-organization/list-members

This call returns an array of all non-admin members of the Organization. Save the id of each user who should have a new role.

Listing public IDs

Service accounts are not returned by the list members in an organization endpoint. You must get the public IDs of service accounts from the Service Account Settings page:

• In your Service Accounts Settings, select the name of the service account for which you want to get the public id.

• When the Edit account name window opens, copy the string at the end of the URL; this is the public ID of the service account.

Step 3: Update the role of users

Request: PUT https://snyk.io/api/v1/org/{orgId}/members/update/{userId}

API documentation: https://snyk.docs.apiary.io/#reference/organizations/update-member-roles-in-your-organization/update-a-member's-role-in-the-organization

For each user, call the endpoint Update a member's role in the organization to set the member's new role, using the user id and role id you collected previously.

You pass a rolePublicId in the JSON-formatted body of the request. This is the role publicId you saved in the first step.

For a successful request, the response is 200 OK.

You can verify the change on the Org members page (for humans) or the Service Account Settings page (for robots).