Update iTwin group - Access Control

Access Control

Download API definition:

patch https://dev-api.bentley.com/accesscontrol/itwins/{id}/groups/{groupId}

Update the specified iTwin group. The members and imsGroups properties are both capped at 50 each.

Authentication

Requires Authorization header with valid Bearer token for scope itwin-platform.

For more documentation on authorization and how to get access token visit OAUTH2 Authorization page.

A user can update a Group by being assigned the administration_manage_groups on the iTwin level. If the user is adding members or IMS groups they must also have the administration_invite_member permission assigned at the iTwin level. If the user is removing members or IMS groups they must also have the administration_remove_member permission assigned at the iTwin level.

A user also can update a Group on an iTwin by either being an Organization Administrator for the Organization that owns the given iTwin, or an owner of the iTwin.

To update a Group on the Account iTwin, the user must be an Organization Administrator for the Organization.

An Organization Administrator must have at least one of the following roles assigned in User Management: Account Administrator, Co-Administrator, or CONNECT Services Administrator. For more information about User Management please visit our Bentley Communities Licensing, Cloud, and Web Services wiki page

Request

Request parameters

Yes

groupId

Yes

Request headers

Authorization

Yes

OAuth access token with itwin-platform scope

Yes

Setting to application/vnd.bentley.itwin-platform.v2+json is recommended.

Request body

Group (update)

name

String

The name of your Group.

members

String[]

List of users assigned to the Group. Max size of 50.

imsGroups

String[]

List of IMS Group assigned to the Group. Max size of 50.

description

String

A description of your Group.

Example

json

{
    "name": "A new group name",
    "description": "A new group description",
    "members": ["John.Johnson@example.com"],
    "imsGroups": ["Sample IMS Group"]
}

Response

Response 200 OK

json

{
    "group": {
        "id": "149d0860-39e9-4ae9-9b05-0b5dcedd2d4b",
        "name": "Sample Group",
        "description": "This is a group for a sample",
        "members": [{
            "userId": "99cf5e21-735c-4598-99eb-fe3940f96353",
            "email": "John.Johnson@example.com",
            "givenName": "John",
            "surname": "Johnson",
            "organization": "Organization Corp."
        }],
        "imsGroups": ["Sample IMS Group"],
        "invitations": [{
            "id": "09d3d183-ffe0-4df1-95b5-c4421520b375",
            "email": "Simon.Simonson@example.com",
            "invitedByEmail": "Maria.Miller@example.com",
            "status": "Pending",
            "createdDate": "2025-08-11T14:16:38.4034516+00:00",
            "expirationDate": "2025-08-25T14:16:38.4034516+00:00"
        }]
    }
}

Response 401 Unauthorized

This response indicates that request lacks valid authentication credentials. Access token might not been provided, issued by the wrong issuer, does not have required scopes or request headers were malformed.

json

{
    "error": {
        "code": "HeaderNotFound",
        "message": "Header Authorization was not found in the request. Access denied."
    }
}

Response 403 Forbidden

The user has insufficient permissions for the requested operation.

json

{
    "error": {
        "code": "InsufficientPermissions",
        "message": "The user has insufficient permissions for the requested operation."
    }
}

Response 404 Not Found

This response indicates that iTwin, group, member, or IMS group with specified ID was not found.

json

{
    "error": {
        "code": "ItwinNotFound",
        "message": "Requested iTwin is not available."
    }
}

Response 409 Conflict

Invalid request to update iTwin group. User or IMS Group already exists in iTwin group.

json

{
    "error": {
        "code": "UserExists",
        "message": "Requested user already exists in iTwin group.",
        "target": "members[1]"
    }
}

Response 422 Unprocessable Entity

Invalid request to update iTwin group. Make sure request had required properties, does not pass in readonly properties, and does not exceed maximum size

json

{
    "error": {
        "code": "InvalidiTwinsGroupRequest",
        "message": "Cannot create/update group.",
        "details": [{
            "code": "MissingRequiredProperty",
            "message": "Required property is missing.",
            "target": "Name"
        }, {
            "code": "MissingRequiredProperty",
            "message": "Required property is missing.",
            "target": "Description"
        }, {
            "code": "InvalidProperty",
            "message": "Collection size exceeds maximum size.",
            "target": "members"
        }, {
            "code": "InvalidProperty",
            "message": "Collection size exceeds maximum size.",
            "target": "imsGroups"
        }, {
            "code": "MissingRequiredProperty",
            "message": "Required property is missing.",
            "target": "members[0]"
        }, {
            "code": "MissingRequiredProperty",
            "message": "Required property is missing.",
            "target": "imsGroups[0]"
        }, {
            "code": "InvalidRequestBody",
            "message": "Failed to parse request body or collection is empty."
        }]
    }
}

Response 429 Too many requests

This response indicates that the client sent more requests than allowed by this API for the current tier of the client.

json

{
    "error": {
        "code": "RateLimitExceeded",
        "message": "The client sent more requests than allowed by this API for the current tier of the client."
    }
}

Response headers

retry-after

Number of seconds to wait until client is allowed to make more requests.

Definitions

Error

Contains error information.

code

String

One of a server-defined set of error codes.

target

String, null

The target of the error.

message

String

A human-readable representation of the error.

json

{
    "type": "object",
    "required": [
        "code",
        "message"
    ],
    "properties": {
        "code": {
            "type": "string",
            "description": "One of a server-defined set of error codes."
        },
        "target": {
            "type": "string",
            "nullable": true,
            "description": "The target of the error."
        },
        "message": {
            "type": "string",
            "description": "A human-readable representation of the error."
        }
    },
    "description": "Contains error information.",
    "additionalProperties": true
}

GroupUser

String

User email.

userId

String

The user Id in Identity Management System.

surname

String

User surname.

givenName

String

User given name.

organization

String

Organization user is member of in Identity Management System.

json

{
    "type": "object",
    "properties": {
        "email": {
            "type": "string",
            "description": "User email."
        },
        "userId": {
            "type": "string",
            "description": "The user Id in Identity Management System."
        },
        "surname": {
            "type": "string",
            "description": "User surname."
        },
        "givenName": {
            "type": "string",
            "description": "User given name."
        },
        "organization": {
            "type": "string",
            "description": "Organization user is member of in Identity Management System."
        }
    },
    "additionalProperties": false
}

UpdateGroup

String

The Group id.

name

String

The name of your Group.

members

GroupUser[]

List of members assigned to the Group. Max size of 50.

imsGroups

String[]

List of IMS Groups assigned to the Group. Max size of 50.

description

String

A description of your Group.

invitations

GroupMemberInvitation[]

List of invitations sent to users to join the Group.

json

{
    "type": "object",
    "properties": {
        "id": {
            "type": "string",
            "description": "The Group id."
        },
        "name": {
            "type": "string",
            "description": "The  name of your Group."
        },
        "members": {
            "type": "array",
            "items": {
                "$ref": "#/components/schemas/GroupUser"
            },
            "description": "List of members assigned to the Group. Max size of 50."
        },
        "imsGroups": {
            "type": "array",
            "items": {
                "type": "string"
            },
            "description": "List of IMS Groups assigned to the Group. Max size of 50."
        },
        "description": {
            "type": "string",
            "description": "A description of your Group."
        },
        "invitations": {
            "type": "array",
            "items": {
                "$ref": "#/components/schemas/GroupMemberInvitation"
            },
            "description": "List of invitations sent to users to join the Group."
        }
    },
    "additionalProperties": false
}

Error Response

Gives details for an error that occurred while handling the request. Note that clients MUST NOT assume that every failed request will produce an object of this schema, or that all of the properties in the response will be non-null, as the error may have prevented this response from being constructed.

error

Error

Error information.

json

{
    "type": "object",
    "title": "Error Response",
    "required": [
        "error"
    ],
    "properties": {
        "error": {
            "$ref": "#/components/schemas/Error",
            "description": "Error information."
        }
    },
    "description": "Gives details for an error that occurred while handling the request. Note that clients MUST NOT assume that every failed request will produce an object of this schema, or that all of the properties in the response will be non-null, as the error may have prevented this response from being constructed.",
    "additionalProperties": false
}

Group (update)

name

String

The name of your Group.

members

String[]

List of users assigned to the Group. Max size of 50.

imsGroups

String[]

List of IMS Group assigned to the Group. Max size of 50.

description

String

A description of your Group.

json

{
    "type": "object",
    "title": "Group (update)",
    "properties": {
        "name": {
            "type": "string",
            "description": "The name of your Group."
        },
        "members": {
            "type": "array",
            "items": {
                "type": "string"
            },
            "description": "List of users assigned to the Group. Max size of 50."
        },
        "imsGroups": {
            "type": "array",
            "items": {
                "type": "string"
            },
            "description": "List of IMS Group assigned to the Group. Max size of 50."
        },
        "description": {
            "type": "string",
            "description": "A description of your Group."
        }
    },
    "additionalProperties": false
}

UpdateGroupResponse

group

UpdateGroup

json

{
    "type": "object",
    "required": [
        "group"
    ],
    "properties": {
        "group": {
            "$ref": "#/components/schemas/UpdateGroup"
        }
    },
    "additionalProperties": false
}

iTwin Group Members Invitation status

The status of the invitation.

Pending

String

Accepted

String

json

{
    "enum": [
        "Pending",
        "Accepted"
    ],
    "type": "string",
    "description": "The status of the invitation.",
    "title": "iTwin Group Members Invitation status"
}

iTwin Group Members Invitation

String

The user Id in Identity Management System.

String

User that was invited.

iTwin Group Members Invitation status

GroupMemberInvitation-status

The status of the invitation.

createdDate

Date-time

Datetime when the invitation was created.

expirationDate

Date-time

DateTime when the invitation will expire.

invitedByEmail

String

User that sent the invitation.

json

{
    "type": "object",
    "title": "iTwin Group Members Invitation",
    "nullable": true,
    "properties": {
        "id": {
            "type": "string",
            "description": "The user Id in Identity Management System."
        },
        "email": {
            "type": "string",
            "description": "User that was invited."
        },
        "status": {
            "enum": [
                "Pending",
                "Accepted"
            ],
            "type": "string",
            "description": "The status of the invitation.",
            "title": "iTwin Group Members Invitation status",
            "$ref": "#/components/schemas/GroupMemberInvitation-status"
        },
        "createdDate": {
            "type": "string",
            "format": "date-time",
            "example": "0000-00-00T00:00:00.000000",
            "description": "Datetime when the invitation was created."
        },
        "expirationDate": {
            "type": "string",
            "format": "date-time",
            "example": "0000-00-00T00:00:00.000000",
            "description": "DateTime when the invitation will expire."
        },
        "invitedByEmail": {
            "type": "string",
            "description": "User that sent the invitation."
        }
    },
    "additionalProperties": false
}

Was this page helpful?