Bulk Operations API

The bulk operations API enables performing status changes on multiple entities in a single request. Designed for admin UI batch operations.

Endpoints

Method	Path	Permission	Description
POST	/api/admin/bulk/organizations/status	org:update	Bulk organization status change
POST	/api/admin/bulk/users/status	user:suspend	Bulk user status change

Bulk Organization Status Change

POST /api/admin/bulk/organizations/status
Authorization: Bearer <token>
Content-Type: application/json

Request Body

{
  "ids": ["uuid-1", "uuid-2", "uuid-3"],
  "action": "suspend",
  "reason": "Policy review"
}

Field	Type	Required	Description
ids	UUID[]	Yes	Organization IDs (1-100)
action	string	Yes	One of: activate, suspend, archive
reason	string	No	Reason for the status change (max 500 chars)

Valid Organization Transitions

Action	From Status	To Status
activate	suspended	active
suspend	active	suspended
archive	active, suspended	archived

Bulk User Status Change

POST /api/admin/bulk/users/status
Authorization: Bearer <token>
Content-Type: application/json

Request Body

{
  "ids": ["uuid-1", "uuid-2"],
  "action": "suspend",
  "reason": "Suspicious activity",
  "organizationId": "org-uuid"
}

Field	Type	Required	Description
ids	UUID[]	Yes	User IDs (1-100)
action	string	Yes	One of: activate, deactivate, suspend, lock, unlock
reason	string	No	Reason for suspend/lock (max 500 chars)
organizationId	UUID	Yes	Organization scope

Valid User Transitions

Action	From Status	To Status
activate	inactive, suspended	active
deactivate	active	inactive
suspend	active	suspended
lock	active	locked
unlock	locked	active

Response Format

Both endpoints return the same response format with per-item results:

{
  "total": 3,
  "succeeded": 2,
  "failed": 1,
  "results": [
    {
      "id": "uuid-1",
      "success": true,
      "previousStatus": "active",
      "newStatus": "suspended"
    },
    {
      "id": "uuid-2",
      "success": true,
      "previousStatus": "active",
      "newStatus": "suspended"
    },
    {
      "id": "uuid-3",
      "success": false,
      "error": "Cannot suspend from status 'archived'",
      "previousStatus": "archived"
    }
  ]
}

Limits

• Maximum 100 items per bulk operation
• Items are processed individually, so partial success is possible
• Each item uses SELECT ... FOR UPDATE to prevent concurrent modification
• All queries are parameterized (SQL injection safe)