---
title: "Revoke role from group"
method: DELETE
path: "/zones/{zoneId}/groups/{groupId}/roles/{roleId}"
tags: ["Groups"]
---

# Revoke role from group

`DELETE /zones/{zoneId}/groups/{groupId}/roles/{roleId}`

## Request

- Base URL: `https://docs.keycard.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://docs.keycard.ai/zones/{zoneId}/groups/{groupId}/roles/{roleId}`
- Auth: one of:
  - HTTP bearer
  - OAuth 2
    - Client credentials
    - Token URL: `/service-account-token`

Revokes a role from the group. Provide the same (scope_type, scope_id) pair the grant was created with, or omit both to revoke the unscoped grant.

## Path parameters

- `zoneId` string, required
- `groupId` string, required
- `roleId` string, required

## Query parameters

- `scope_type` string
- `scope_id` string

## Response `204`

Default Response

## Other responses

- `400`: Error response
- `404`: Error response
- `default`: Error response

## Changes

- **2026-08-26** `d65d51379d93`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/keycardai/apis/untitled-api/changes/zones/:zoneId/groups/:groupId/roles/:roleId/delete.md)

---

[API](https://skmtc.dev/keycardai/apis/untitled-api.md) - [All operations](https://skmtc.dev/keycardai/apis/untitled-api/llms.txt) - [OpenAPI document](https://skmtc.dev/keycardai/apis/untitled-api/revisions/0dee67e0a73a?raw)