### Update a NAS

`PATCH /api/v1/admin/nas/{id}`

Partial update; an omitted field is left alone. The shared secret is not editable here — rotating it has its own endpoint, because it must be pushed to the device in step with the change.

- Authentication: manager session (JWT) or API token
- Permission: `prm_nas_update` (Edit NAS)
- Risk: write
- Rate limit bucket: `t_mutate`

#### Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `id` | path | integer | yes | NAS id. |

#### Errors

| Code | Status | When |
| --- | --- | --- |
| `ERR_CONFLICT` | 409 | an identity field would clash with another device, anywhere on the platform |