PUT /api/v1/users/:id
Requires users:write; role and access-grant changes are constrained by the caller's authority.
users:write
User updated.