Customize (copy role  private set) or assign an ERP role

PATCH 
/api/v2/users/:id/permissions/customization

customized=true copies the role's permissions into an editable private set and detaches the role; customized=false assigns the role. Anti-escalation: the caller can only assign/copy roles whose permissions they hold themselves.

Request

Responses

401

Missing or invalid JWT (Bearer token).

500

Unexpected server error. Includes legacy WAR failures that are not classified as 502 / 503 / 504.