---
title: "Switch off one account's own policy"
method: DELETE
path: "/admin/tenant-policies/accounts/{account_id}/active"
tags: ["tenant-policies"]
---

# Switch off one account's own policy

`DELETE /admin/tenant-policies/accounts/{account_id}/active`

## Request

- Base URL: `https://api.instruxi.dev/api/v1/enforcer`
- URL: `https://api.instruxi.dev/api/v1/enforcer/admin/tenant-policies/accounts/{account_id}/active`
- Auth: API key in header `Authorization`

Retires the active policy of an account in the caller's tenant. The account then answers to platform and tenant policy alone — which is where it would be had it never written one, so this can only return an account to access its role and the tenant's policy already allow. The account keeps its version history and can activate a version again; to stop that, change its role or the tenant's policy. An account outside the caller's tenant is not found by construction: the tenant comes from the credential, never the request.

## Path parameters

- `account_id` string, required

## Response `200`

OK

- InternalDeliveryHttpHandlerMessageResponse
  - `message` string
  - `success` boolean

## Other responses

- `400`: Bad Request
- `401`: Unauthorized

---

[API](https://skmtc.dev/instruxi/apis/enforcer-api.md) · [All operations](https://skmtc.dev/instruxi/apis/enforcer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/instruxi/apis/enforcer-api/revisions/fa82bc1becc0?raw)