Revoke a Role from one User

Takes a role away from one person. {id} is the ROLE and {userId} is the PERSON — the order of the two matters, and swapping them revokes a grant nobody asked to revoke.

The batch form, POST /v1/roles/{id}/users/remove, does the same for a list.

Only the DIRECT grant is revoked: if the person also holds this role through a group they keep it, and the call still answers 204. Revoking from somebody who does not hold the role is not an error. On success the response has no body (204).

Failures:

• 404 — no such role in your organization.
• 503 IDE-0066 — the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.

DELETE /v1/roles/{id}/users/{userId}

Revoke a Role from one User

cURL

curl --request DELETE \
  --url https://identity.sandbox.lerian.net/v1/roles/{id}/users/{userId} \
  --header 'Authorization: Bearer <token>'

400

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

Authorizations

Authorization · string · header · required

JWT bearer token issued by the identity provider.

Path Parameters

id · string · required

Role ID.

Example:

"midaz-editor"

userId · string · required

User ID.

Example:

"00000000-0000-0000-0000-000000000000"

Response

204

No Content