PUT responses should have a 401 unauthorized HTTP status code, communicating that consumers do not have access
OpenAPI Response Put 401 Status Code Error
Message: PUT Responses MUST 401 Status Codes
Policies
Response 4xx
Client error responses are where developer experience lives or dies. Consistent 400, 401, 403, 404, and 429 responses with shared schema references make error handling predictable.