Skip to Content
InvyteDocs
Organization & access

Undo a role change

Undo a role's latest change: an edit or restore puts the role back as it was, a delete brings the role back with the assignments that still apply, and a create deletes a role nobody holds yet. An undo can't itself be undone, and it can take access away, so it waits for a go-ahead. Admins only.

POST
/operations/access.undoRoleChange

Authorization

bearer
headerAuthorizationBearer <API key or OAuth token>

An organization API key (ink_live_…, ADR-0124), or the OAuth access token a person's AI client gets from the Recruiter MCP sign-in. Only the Authorization header is accepted.

Header Parameters

Idempotency-Key?string

Makes a write safe to repeat: the same key and input return the first result. Required for agents' writes and for anything a person confirms.

Match^[A-Za-z0-9._:-]+$
Length8 <= length <= 128

Request Body

application/json
  1. body
input*
confirmation?string

The id from a confirm or awaiting_approval Outcome, sent with the same input and key to go ahead.

Response Body

Done. A replay of the same key and input omits output.

application/json
  1. response
status*unknown
output?
actionId*string
Example Request
curl -X POST 'https://www.invyte.ai/api/recruiter/v1/operations/access.undoRoleChange' \  -H 'Content-Type: application/json' \  -d '{  "input": {    "changeId": "string"  }}'
Example Response
{  "status": "done",  "output": {    "changeId": "string",    "roleId": "string"  },  "actionId": "string"}

Remove a role POST

Take a role away from someone where they hold it. They lose what it grants there unless another role gives it. Shows what they lose before it is done.

Edit a role POST

Rename a role, change its description, or set what it grants. Everyone holding it gains or loses those capabilities wherever they hold it; its review says who loses what, and it waits for a go-ahead. Can be undone (access.undoRoleChange). Admins only.