As per the reference doc : https://developer.box.com/reference
For Update user API : https://api.box.com/2.0/users/:user_id, we can pass the "tracking_codes" as An array of key/value pairs set by the user’s admin.
I tried using the same in my payload as below but it does not work giving error as "invalid request parameter"
{
"tracking_codes": [
{
"status": "cannot_delete_edit"
}
]
}