### Replace a private plan's manager allow-list

`PUT /api/v1/profiles/{id}/allowed-managers`

Replaces the whole list. Managers omitted from the payload lose access.

- Authentication: manager session (JWT) or API token
- Permission: `prm_profiles_policy_manager` (Manage profile visibility / policy)
- Risk: write
- Rate limit bucket: `t_mutate`

#### Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `id` | path | integer | yes | Plan id. |

#### Note

The allow-list is inert while private is false. Setting it on a public plan stores the rows and changes nothing, which looks exactly like the restriction failing to apply.