---
title: "Remove User Auth0 Roles"
method: DELETE
path: "/api/platform/users/{user_id}/auth0-roles"
tags: ["platform"]
---

# Remove User Auth0 Roles

`DELETE /api/platform/users/{user_id}/auth0-roles`

Remove one or more Auth0 roles from a user and return the refreshed state.

Removes the tenant-wide (user-level) grant when ``organizationId`` is
omitted, or the organization-scoped grant when supplied. Requires ``owner``
on the ``members-users`` module instance.

## Path parameters

- `user_id` string, required — Auth0 user id to remove roles from

## Request body

- AssignAuth0RolesRequest — Role ids to add to (or remove from) a user via the Management API. ``organization_id`` selects the grant scope: when omitted (or blank) the roles are granted tenant-wide (user-level); when set, the roles are granted to the user as a member of that organization.
  - `roleIds` string[]
  - `organizationId` string, nullable

## Response `200`

Successful Response

- UserAuth0Roles — Auth0 roles for a single user across the user and organization scopes. ``assigned`` lists every current grant — tenant-wide (user-level) grants plus the roles granted to the user within each organization they belong to, each annotated with its scope. ``catalog`` is the full tenant role catalog the UI offers in the "add role" picker, and ``organizations`` are the orgs the user is a member of (the scopes at which roles can additionally be granted). The UI computes which catalog roles are still assignable per scope from ``assigned``.
  - `userId` string, required
  - `assigned` Auth0RoleAssignment[]
    - `id` string, required
    - `name` string, required
    - `description` string, nullable
    - `organizationId` string, nullable
    - `organizationName` string, nullable
  - `catalog` Auth0Role[]
    - `id` string, required
    - `name` string, required
    - `description` string, nullable
  - `organizations` Auth0RoleOrganization[]
    - `id` string, required
    - `name` string, nullable
    - `displayName` string, nullable

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/gocrisp/apis/crisp-app-dock.md) · [All operations](https://skmtc.dev/gocrisp/apis/crisp-app-dock/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gocrisp/crisp-app-dock/revisions/e56bd3c1a9db/schema)