---
title: "Replace room ABAC attributes"
slug: "replace-room-abac-attributes"
updated: 2026-09-03T14:50:33Z
published: 2026-09-03T14:50:33Z
canonical: "developer.rocket.chat/replace-room-abac-attributes"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://developer.rocket.chat/llms.txt
> Use this file to discover all available pages before exploring further.

# Replace room ABAC attributes

Post/api/v1/abac/rooms/:rid/attributes![Defense](https://raw.githubusercontent.com/RocketChat/Rocket.Chat-Open-API/main/images/Defense.svg)

- Replaces the full ABAC attribute set for a room.
- Sets the complete set of ABAC attributes on the specified room by providing an attributes object that maps attribute keys to arrays of allowed values; any previously assigned attributes not included in the request are removed.
- Requires the ABAC license, the `abac-management` and `manage-abac-admin-rooms` permissions, and the global setting `ABAC_Enabled` to be turned on.

### Changelog

| Version | Description |
| --- | --- |
| 8.0.0 | Added |
| 8.5.0 | Added the `manage-abac-admin-rooms` granular permission requirement. |

Header parametersX-Auth-TokenstringRequired

The `authToken` of the authenticated user.

ExampleRScctEHSmLGZGywfIhWyRpyofhKOiMoUIpimhvheU3f
X-User-IdstringRequired

The `userId` of the authenticated user.

ExamplerbAXPnMktTFbNpwtJ

Body parameters<select class='api-response-data' aria-label='Media type'><option value='6580191b-7905-45d0-9cbb-84a677764876'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='7c17684c-8494-4c3e-a11d-8b4752219bf8'>Example 1</option>
</select>Example 1

```json
{
  "attributes": {
    "department": [
      "it",
      "sales"
    ],
    "region": [
      "asia",
      "europa"
    ]
  }
}
```

object  

Responses200

OK

<select class='api-response-data' aria-label='Media type'><option value='67a1d94d-ca4f-43f8-9679-748b2d92b88b'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='3161b416-70a3-4998-ae15-21a162c93734'>Success</option>
</select>Success

```json
{
  "success": true
}
```

object  successboolean    

400

Bad Request

<select class='api-response-data' aria-label='Media type'><option value='fc44ce7f-1f36-4120-93a1-de756bded202'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='a20e73ea-8b9a-4f00-861c-b0ee48d875cd'>ABAC not enabled</option>
<option value='2ab97ae9-6be4-4301-bbdf-1204154a367a'>Attribute definition missing</option>
<option value='80b15765-03f2-420b-8647-60e0aa77cebb'>Invalid attribute values</option>
</select>ABAC not enabled

```json
{
  "success": false,
  "error": "error-abac-not-enabled"
}
```

Attribute definition missing

```json
{
  "success": false,
  "error": "error-attribute-definition-not-found"
}
```

Invalid attribute values

```json
{
  "success": false,
  "error": "error-invalid-attribute-values"
}
```

object  successboolean    
errorstring    

401

Unauthorized

<select class='api-response-data' aria-label='Media type'><option value='0ac7feea-6b48-4884-a572-5c76ad1245b2'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='1f3b63d5-e1cf-4ce6-8292-9b4b4959bf06'>Authorization Error</option>
</select>Authorization Error

```json
{
  "status": "error",
  "message": "You must be logged in to do this."
}
```

object  statusstring    
messagestring    

403

Forbidden

<select class='api-response-data' aria-label='Media type'><option value='999ec36a-dc9c-4257-97a3-db577baf55f4'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='25eace3b-3f3a-4419-8870-8cde6f86a8d5'>Missing required ABAC permissions</option>
</select>Missing required ABAC permissions

```json
{
  "success": false,
  "error": "error-not-authorized"
}
```

object  successboolean    
errorstring