Update properties on a User.

Modifies an existing user resource with the given {id}.
The failed_logins property may be set to 0 to unlock a user account that has too many failed logins.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
int32
required
1 to 2147483647

Unique identifier for the resource.

Body Params

A user object with modified properties.

string
length between 1 and 64

The username the user last used to log in. This attribute is read-only for non-local users.

password
length ≤ 256

The local user's password. This attribute is write-only for local users. It cannot be set in non-local user PATCH requests. It is not returned in GET requests. The minimum length is configured in Management -> Security -> Passwords

string
required
length between 1 and 64

The user's public display name. This attribute is read-only for users who belong to a security provider that synchronizes display names.

date-time | null

The date and time at which the local user's password will expire as an RFC3339 date-time string. This attribute is only returned for local users and can only be updated on local users. If not set or set to a null or empty value, then the local user's password never expires.

string
length between 3 and 255

The user's email address. This attribute is read-only for users who belong to a security provider that synchronizes email addresses.

string
length between 2 and 10
Defaults to en-us

Must be the locale code for one of the locales listed on the Localization → Languages page.

string
enum
Defaults to optional

Controls whether multi-factor authentication is required for this user. 'require_totp' forces the user to set up a TOTP application. 'require_fido2' forces the user to register a FIDO2 security key. 'optional' allows the user to opt-in to two-factor authentication. This attribute is only available for local and LDAP users.

Allowed:
boolean
Defaults to true

True if this user is allowed to log in.

int32
Defaults to 0

The number of times this local user has failed to authenticate. This attribute is only returned for local users and can only be updated on local users. It is always 0 for new local users, so it is ignored in POST requests. You may set it to 0 in PATCH requests to unlock an account that has too many failed logins.

boolean
Defaults to false

If true, this local user's password must be reset on their next login. This attribute is only returned for local users and can only be set on local users.

Responses

Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json

©2003-2026 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.