From a5ff668f5e2a9584796eaf87f569d611f1ff7d5d Mon Sep 17 00:00:00 2001
From: Ryan Crabbe <ryan@berri.ai>
Date: Thu, 26 Mar 2026 14:56:32 -0700
Subject: [PATCH 1/2] fix: add /user/bulk_update to management_routes so proxy
 admins can access it

/user/bulk_update was missing from the management_routes list in _types.py,
causing it to fall through to a 403 in non_proxy_admin_allowed_routes_check
even for proxy admin users. Also added it to the PROXY_ADMIN_VIEW_ONLY
blocked write operations list in route_checks.py to prevent view-only
admins from using it.
---
 litellm/proxy/_types.py            | 1 +
 litellm/proxy/auth/route_checks.py | 1 +
 2 files changed, 2 insertions(+)

diff --git a/litellm/proxy/_types.py b/litellm/proxy/_types.py
index b59fc85d4b8..8faf36df4c6 100644
--- a/litellm/proxy/_types.py
+++ b/litellm/proxy/_types.py
@@ -525,6 +525,7 @@ class LiteLLMRoutes(enum.Enum):
         # user
         "/user/new",
         "/user/update",
+        "/user/bulk_update",
         "/user/delete",
         "/user/info",
         "/user/list",
diff --git a/litellm/proxy/auth/route_checks.py b/litellm/proxy/auth/route_checks.py
index 53cc88e3b11..26bbdef3090 100644
--- a/litellm/proxy/auth/route_checks.py
+++ b/litellm/proxy/auth/route_checks.py
@@ -629,6 +629,7 @@ class RouteChecks:
                 in [
                     "/user/new",
                     "/user/delete",
+                    "/user/bulk_update",
                     "/team/new",
                     "/team/update",
                     "/team/delete",

From 0c67f274e58f5e402c80aa6221d0b3a769f6875f Mon Sep 17 00:00:00 2001
From: Ryan Crabbe <ryan@berri.ai>
Date: Fri, 27 Mar 2026 18:01:08 -0700
Subject: [PATCH 2/2] docs: add /user/bulk_update to internal_user_endpoints
 module docstring

---
 litellm/proxy/management_endpoints/internal_user_endpoints.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/litellm/proxy/management_endpoints/internal_user_endpoints.py b/litellm/proxy/management_endpoints/internal_user_endpoints.py
index ca8c345f46c..db01e817aa3 100644
--- a/litellm/proxy/management_endpoints/internal_user_endpoints.py
+++ b/litellm/proxy/management_endpoints/internal_user_endpoints.py
@@ -6,6 +6,7 @@ These are members of a Team on LiteLLM
 
 /user/new
 /user/update
+/user/bulk_update
 /user/delete
 /user/info
 /user/list