Update an entity by ID.

The ID can be either an internal ID or an external (STIX) ID.

Note, that an unified entity (an entity with is_unified_entity flag set to True in meta) cannot be modified by user. An attempt to modify it will result in an error.

Required permissions

• modify entities

Optional permissions

• read extracts Required to access the observables attached with an entity

• read taxonomies Required to access the taxonomies associated with an entity

• read attack Required to access the MITRE ATT&CKs associated with an entity

• read intel-sets Required to access the datasets associated with an entity

• read incoming-feeds Required to access the incoming feeds associated with an entity

• read outgoing-feeds Required to access the outgoing feeds associated with an entity