---
title: "UpdateOrgMemberRole"
description: "Change a member's role"
canonical: "https://pgbeam.com/docs/go-sdk/account/updateOrgMemberRole"
last-updated: "2026-10-22T11:48:14.000Z"
---

# UpdateOrgMemberRole

> Change a member's role

URL: https://pgbeam.com/docs/go-sdk/account/updateOrgMemberRole

{/* Auto-generated from OpenAPI. Do not edit. Run `pnpm generate:sdk-docs` to regenerate. */}

Changes what a member is allowed to do. An organization must keep at least one owner, so the last owner cannot be demoted, and `owner` cannot be assigned here: ownership transfer is a separate, higher-privilege flow.

## Usage

```go
result, err := client.Account.UpdateOrgMemberRole(ctx, "org_abc123", "...", pgbeam.UpdateOrgMemberRoleRequest{
    Role: "...",
  })
```

## Parameters

| Parameter | Type                                | Required | Description                                                                                                                                                                                                                                            |
| --------- | ----------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| ctx       | `context.Context`                   | Yes      | Request context                                                                                                                                                                                                                                        |
| orgID     | `string`                            | Yes      | Unique organization identifier.                                                                                                                                                                                                                        |
| memberID  | `string`                            | Yes      | Unique organization membership identifier. Unlike the resources PgBeam mints itself, memberships carry no type prefix: the id is opaque and is assigned when the membership row is created. Read it from `listOrgMembers` rather than constructing it. |
| body      | `pgbeam.UpdateOrgMemberRoleRequest` | Yes      | Request body                                                                                                                                                                                                                                           |
| body.Role | `pgbeam.AssignableOrgRole`          | Yes      | A role that can be assigned through the member API. This is `OrgRole` without `owner`: ownership is transferred through a separate flow, so requesting it here is rejected with a 400.                                                                 |

## Response

`(*pgbeam.OrgMember, error)`: the updated membership.

## Example

```go
import pgbeam "go.pgbeam.com/sdk"

client := pgbeam.NewClient(&pgbeam.ClientOptions{
  APIKey: "pbu_...",
})

result, err := client.Account.UpdateOrgMemberRole(ctx, "org_abc123", "...", pgbeam.UpdateOrgMemberRoleRequest{
    Role: "...",
  })
if err != nil {
  log.Fatal(err)
}
fmt.Println(result)
```

## Errors

| Status | Description                                                                                                                                                                                                                                                                                                                           |
| ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| 400    | The request was rejected. `code` is `INVALID_INPUT`, and `errors` names the offending fields when the failure was a validation one.                                                                                                                                                                                                   |
| 401    | Missing or invalid authentication. `code` is `UNAUTHORIZED`.                                                                                                                                                                                                                                                                          |
| 403    | The caller is authenticated but not allowed to perform this operation. `code` is `FORBIDDEN` when the caller's role is insufficient, and `PLAN_LIMIT_REACHED` when the organization's plan is what stands in the way. The two are answered differently, so branch on the code rather than the status.                                 |
| 404    | The resource does not exist, or the caller is not entitled to know that it does. `code` is `NOT_FOUND`.                                                                                                                                                                                                                               |
| 409    | The request conflicts with the current state. `code` distinguishes the cases: `RESOURCE_EXISTS` for a name or value already in use, `INVALID_STATE` for a resource that is no longer in a state that allows the operation, and `IDEMPOTENCY_KEY_REUSED` for a retry whose body does not match the request the key was first used for. |
| 429    | Rate limited. `code` is `RATE_LIMITED`.                                                                                                                                                                                                                                                                                               |