Remove one Permission from a User

Revokes one direct grant. {id} is the PERSON and {permId} is the PERMISSION — the order of the two matters, and swapping them revokes a grant nobody asked to revoke.

The batch form, POST /v1/users/{id}/permissions/remove, does the same for a list.

Only the DIRECT grant goes: if the permission also reaches the person through a role or group they keep it, and the call still answers 204. Revoking a permission the person does not hold directly is not an error. On success the response has no body (204).

Failures:

• 503 IDE-0066 — the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.

DELETE /v1/users/{id}/permissions/{permId}

Remove one Permission from a User

cURL

curl --request DELETE \
  --url https://identity.sandbox.lerian.net/v1/users/{id}/permissions/{permId} \
  --header 'Authorization: Bearer <token>'

400

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

Authorizations

Authorization · string · header · required

JWT bearer token issued by the identity provider.

Path Parameters

id · string · required

User ID.

Example:

"00000000-0000-0000-0000-000000000000"

permId · string · required

Permission ID.

Example:

"midaz-editor-permission"

Response

204

No Content