Update connection properties including credentials. Credentials are encrypted at rest and never returned in API responses.
This endpoint supports credential rotation for infrastructure-as-code workflows. Depending on the connection type, you can update:
passwordUnencrypted to update the passwordpasswordUnencrypted to update the service account JSONprivateKey to update the RSA private key (PEM format, minimum 2048 bits)At least one field must be provided in the request body.
Can be either an Organization API Key or Personal Access Token (PAT).
Include in the Authorization header as: Bearer YOUR_TOKEN
Connection ID
Password or service account JSON for credential rotation.
"new-password-here"
Only applicable to Snowflake connections. RSA private key in PEM format for Snowflake connections. Must be at least 2048 bits.
"-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBg..."
The default role for users accessing the connection. Available roles include:
VIEWER - Can view the modelQUERIER - Can view and query the modelQUERY_TOPICS - Can query specific topics. Equivalent to Restricted Querier.MODELER - Can edit and model the dataCONNECTION_ADMIN - Full administrative access to the connectionNO_ACCESS - No access to the modelConfiguration for environment user attributes. Set to null to remove environment user attribute settings.