Change settings with your role's rights. Returns what changed (old → new) and what was refused
and why. Risky changes run only with confirmed: true; without it nothing runs and
needsConfirmation says what to confirm.
Bearer <token>.The person said yes to the risky changes listed in needsConfirmation (SSO, identity verification, deleting …).
Ok
Risky changes not run: the person says yes first (confirmed: true, or the card in Kai Copilot).