Update Authorized user

Update Authorized User

This endpoint allows you to update the profile details of an authorized user (subProfile) associated with a business customer account. You can modify fields such as the authorized user's name, email address, and department assignment. Submitting updated values ensures that authorized user records remain current and accurate within the platform.

Endpoint

POST /api/subProfiles/update

Authentication

Bearer token required. Obtain via:

POST https://api.banking.netevia.dev/api/auth/v2

Include in header: Authorization: Bearer {token}
Token lifetime: 10 minutes. Refresh via POST /api/auth/refresh.

When to use

Use this endpoint when a business customer needs to correct or update the details of an authorized user on their account — for example, after a name change, an email address update, or a department reassignment. Only business customers can have authorized users (subProfiles); this endpoint is not applicable for personal customer accounts. Ensure that only authenticated and authorized business customers initiate updates to their authorized users' profiles.

Request Body

{
  "subProfileId": 4821,
  "givenName": "Maria",
  "familyName": "Gonzalez",
  "email": "[email protected]",
  "departmentId": 12
}

Response

200 OK

A 200 response confirms that the authorized user's profile has been successfully updated. The response body confirms the operation outcome.

{
  "success": true,
  "message": "Authorized user profile updated successfully."
}

Error Codes

Common Mistakes

• Omitting subProfileId — without it, the platform cannot identify which authorized user to update; always include the correct subProfile identifier
• Sending an invalid email format for the email field — the value must conform to standard email format (e.g., [email protected])
• Using the deprecated department string field instead of departmentId — migrate to departmentId to ensure forward compatibility
• Exceeding field length limits — givenName and familyName max 255 characters, email and department max 128 characters
• Attempting to update a subProfile that belongs to a different business customer — each authorized user is scoped to the business account that created it

Related Endpoints

• POST /api/subProfiles/create — Create a new authorized user for a business customer account
• GET /api/subProfiles — Retrieve a list of authorized users associated with the authenticated business customer
• POST /api/subProfiles/delete — Remove an authorized user from a business customer account
• POST /api/auth/v2 — Obtain a Bearer token for authentication

Example

curl -X POST https://api.banking.netevia.dev/api/subProfiles/update \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "subProfileId": 4821,
    "givenName": "Maria",
    "familyName": "Gonzalez",
    "email": "[email protected]",
    "departmentId": 12
  }'