# updatePartnershipPermittedUsers

Update which of your organization's users are visible to a partner when they send leads (partnerOrgId). Pass the full permittedUserIds list; an empty array means all users are visible.

- Call: `POST https://server.goliathdata.com/api/v1/call` with `{ "operationId": "updatePartnershipPermittedUsers", "variables": {...} }`
- Scope: `ADMIN`
- Type: mutation
- Idempotency: honors `Idempotency-Key` (24 h)
- Rate-limited: no

## Variables

- `partnerOrgId`: `ID!` (required)
- `permittedUserIds`: `[ID!]!` (required)

## Response (data, an example)

```json
{
  "orgPartnershipMutation": {
    "updatePermittedUsers": {
      "id": "<ID>",
      "permittedUserIds": [
        "<ID>"
      ],
      "updatedAt": "2026-01-01T00:00:00.000Z"
    }
  }
}
```

## Example

```bash
curl https://server.goliathdata.com/api/v1/call \
  -H "Authorization: Bearer $GOLIATH_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
    "operationId": "updatePartnershipPermittedUsers",
    "variables": {
      "partnerOrgId": "<partnerOrgId>",
      "permittedUserIds": [
        "<permittedUserIds>"
      ]
    }
  }'
```