Requires USERS write access; delegated OAuth tokens remain read-only for USERS. At least one field is required; unknown fields are rejected. Changes are atomic. Omitted settings and the user's permission level are preserved. PERMISSIONS is not accepted here; use the existing change-permissions endpoint for level changes. Owner accounts cannot be edited here. No changes to school entitlements or subscriptions.