---
title: "Revoke a grant"
method: POST
path: "/api/v1/iga/grants/{grant_id}/revoke"
tags: ["accessManagement"]
---

# Revoke a grant

`POST /api/v1/iga/grants/{grant_id}/revoke`

Revoke a grant. By default (skip_deprovisioning=true), marks the grant as REVOKED
immediately without triggering IDP deprovisioning. Set skip_deprovisioning=false to
trigger the full deprovisioning workflow (Azure AD/Okta group removal or service request creation).

## Path parameters

- `grant_id` integer, required

## Headers

- `X-Api-Key` string, required
- `X-Workspace-Id` string

## Request body

- object
  - `reason` string — Optional reason for revoking the grant
  - `skip_deprovisioning` boolean — When true (default), marks the grant as REVOKED immediately without triggering IDP deprovisioning. When false, triggers the full deprovisioning workflow (Azure AD/Okta group removal or service request creation).

## Response `200`

Successful response

- AccessManagementPostapiV1IgaGrantsGrantIdRevokeResponse200 — Empty response body

## Changes

- **2026-08-12** `2ab1cf36239b` — 1 info
  - api operation id `postapi-v-1-iga-grants-grant-id-revoke` removed and replaced with `postapi_v1_iga_grants__grant_id__revoke`

[Change history](https://skmtc.dev/atomicwork/apis/atomicwork-public-api/changes/api/v1/iga/grants/:grant_id/revoke/post.md)

---

[API](https://skmtc.dev/atomicwork/apis/atomicwork-public-api.md) · [All operations](https://skmtc.dev/atomicwork/apis/atomicwork-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/atomicwork/atomicwork-public-api/revisions/6223f7496274/schema)