Partial update user app setup

PATCH 
/user-srv/usersetup/:id

Partially updates a User App Setup profile. Only fields present in the request body are merged into the stored profile.

Merge behaviour

• Omitted fields are left unchanged.
• Nested user_setup fields are merged individually when user_setup is present.
• Sending JSON null for a nullable user_setup field clears that field (booleans and arrays become unset; communication_medium_verification becomes empty).
• owner cannot be changed via PATCH.
• Field key validation against Field Setup applies to the merged result.

Ownership: profiles with owner system or core cannot be updated (403 Forbidden).

Requires scope cidaas:usersetup_write or an allowed write role (see Authentication).

Request

Responses

200

Updated successfully

400

Bad Request — invalid payload or validation failure

401

Unauthorized — missing/invalid token, or no matching scope/role

403

Forbidden — ownership protection (PATCH blocks system/core; DELETE blocks admin/system/core)

404

Not Found