put https://example.com/api/users/
- Any role or authentication source change that would result in the absence of at least one
localuser with theAdministratorrole will receive the HTTP400 Bad Requestresponse. - The
passwordproperty is only recognized when updating a user associated with thelocalauthentication source. It is silently ignored otherwise. - Changes to the following properties are considered security-relevant and will cause all tokens related to the givenuser to be deleted, requiring a new login if they are currently logged in to the UI:
auth_source_uuidpasswordroletoken_lifetimeusername(for users tied to thelocalauth source)
- For service accounts, setting the
token_lifetimeto0will cause a token to effectively never expire; USE WITH CAUTION.