NFnforgeio
access_control
enterprise

Remove a user role assignment.

Revoke a role from a user. For bulk updates consider Set user role assignments.

You need to have a permission with action users.roles:remove and scope permissions:type:delegate. permissions:type:delegate scope ensures that users can only unassign roles which have same, or a subset of permissions which the user has. For example, if a user does not have required permissions for creating users, they won’t be able to unassign a role which will allow to do that. This is done to prevent escalation of privileges.

delete/access-control/users/{userId}/roles/{roleUID}

Request

  • Base URL
    /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /api/access-control/users/{userId}/roles/{roleUID}
  • Auth
    • HTTP basic
    • or API key in header Authorization

Path parameters

roleUIDstring required
userIdinteger required

Query parameters

globalboolean

A flag indicating if the assignment is global or not. If set to false, the default org ID of the authenticated user will be used from the request to remove assignment.

Response

An OKResponse is returned if the request was successful.

messagestring

Changes

No recorded changes to this operation across all 2 revisions of this API.