update_user_role_permissions

What update_user_role_permissions does on Linode MCP Server

AI agents use update_user_role_permissions to create or update resources in Linode MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Linode MCP Server environment.

Why update_user_role_permissions is rated Medium

This tool modifies user permissions and roles in a Linode account, which affects access control and security posture. While reversible (making it Write rather than Destructive), the blast radius is high because incorrect permission changes could grant unintended access to cloud infrastructure resources, enable privilege escalation, or lock out legitimate users.

From the tool's definition Tool name 'update_user_role_permissions' indicates modification of user access controls and permissions. The description is truncated ('Update a user\') but the name clearly shows this alters user role permissions, which is a reversible write operation on…

The rule that runs update_user_role_permissions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Linode MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_user_role_permissions, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_user_role_permissions": {
      "limits": [
        {
          "counter": "update_user_role_permissions_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_user_role_permissions