put https://example.com/api/users/
- Any role or authentication source change that would result in the absence of at least one
local
user with theAdministrator
role will receive the HTTP400 Bad Request
response. - The
password
property is only recognized when updating a user associated with thelocal
authentication source. It is silently ignored otherwise. - Changes to the following properties are considered security-relevant and will cause all tokens related to the givenuser to be deleted, requiring a new login if they are currently logged in to the UI:
auth_source_uuid
password
role
token_lifetime
username
(for users tied to thelocal
auth source)
- For service accounts, setting the
token_lifetime
to0
will cause a token to effectively never expire; USE WITH CAUTION.