---
title: "Verify a member role change updates capability and attribution"
description: "Change a fixture member from viewer to editor and confirm a real editing capability plus an independently recorded administrator attribution."
canonical_url: "https://vostride.com/agent-library/organization-membership/member-role-change-audit.md"
md_url: "https://vostride.com/agent-library/organization-membership/member-role-change-audit.md"
content_kind: "recipe"
topic: "organization-membership"
---

# Verify a member role change updates capability and attribution

Change a fixture member from viewer to editor and confirm a real editing capability plus an independently recorded administrator attribution.

## Risk

A role label can update without the permission service or audit record following it. The useful test verifies one concrete newly allowed action and checks who performed the grant, keeping UI behavior separate from administrative evidence.

## Fixtures

- A test organization administrator, a viewer member, and a disposable record the member may read.
- A documented viewer-to-editor role matrix and propagation interval.
- Hooks for membership role, record revision, and organization audit entries scoped to this run.

## Steps

1. As the member, verify the record is readable but editing is unavailable or denied.
2. In an administrator run, change that member role to editor and verify the member list displays the new role.
3. Inspect membership state and wait only for the documented propagation boundary before revisiting the member record.
4. As the member, change the record title to a unique run marker and verify it persists after reload.
5. Inspect the audit hook and verify the role-change event records the administrator actor, member subject, old role, new role, and affected organization.

## Expected results

- The member gains the concrete editing capability associated with the new role.
- The record mutation is persisted under the member identity.
- The administrative audit entry accurately attributes the permission grant.

## False-pass traps

- A changed role badge does not establish that protected write requests are permitted.
- An audit entry for the record edit is different from the required audit entry for the role change.

## Cleanup

- Restore the member viewer role and original record title using fixture cleanup.

## Use with agent-qa

Adapt this test design to your application's acceptance criteria and configured target using the [recipe execution guide](/agent-library/software-factory/turn-a-recipe-into-an-agent-qa-test.md). External fixture setup and non-UI checks require your own supported hooks or test tooling. Validate the authored test, execute it, and inspect the completed evidence; this recipe is not a recorded test result.

## References

- [agent-qa test](/docs/agent-qa/configuration/test.md)
- [agent-qa hooks](/docs/agent-qa/guides/hooks.md)
- [agent-qa auth state](/docs/agent-qa/guides/auth-state.md)

- [Organization membership QA recipes](/agent-library/organization-membership.md)
- [Software factory QA library](/agent-library.md)