# Update A Direct Share By Email

`PATCH /shares/entity/{entityType}/{entityId}/grants/by-email/{email}`

Finds and updates a direct share under the entity access lock. Only the owner can change Admin access.
## Authentication

Use one of the following authentication alternatives:

- **API token** (`bearerToken`) : Send a named API token in the Authorization header. Send it in the `Authorization: Bearer <token>` header.
- **Better Auth browser session** (`browserSession`) : Use the Better Auth session cookie from a signed-in browser session. Send it in the `better-auth.session_token` cookie.
## Token permissions

API tokens must include `pages:write`.
## Parameters

- `entityType` (path, required): The kind of Metakip entity to share.
- `entityId` (path, required): The UUID of the entity.
- `email` (path, required): The recipient email address.
## Request Body

Required.

### `application/json`

```json
{
  "permission": "view"
}
```
## Responses

### 200

Share permission updated.


### `application/json`

```json
{
  "ok": false,
  "message": "string"
}
```

### 403

The API token is missing a required scope: pages:write.


### `application/json`

```json
{
  "error": {
    "code": "string",
    "message": "string"
  }
}
```