---
title: "Revoke config object access"
method: DELETE
path: "/v1/config-objects/{configObjectId}/access/{grantId}"
tags: ["Config Objects"]
---

# Revoke config object access

`DELETE /v1/config-objects/{configObjectId}/access/{grantId}`

Soft-revokes one config object access grant.

## Path parameters

- `configObjectId` string, typeid, required
- `grantId` string, typeid, required

## Response `204`

Config object access revoked successfully.

## Other responses

- `400` — The access grant path parameters were invalid.
- `401` — The caller must be signed in to manage config object access.
- `403` — The caller lacks permission to manage config object access.
- `404` — The access grant could not be found.

## Changes

- **2026-08-20** `93df40e2efd5` — 2 info
  - removed the pattern `^coa_.*` from the `path` request parameter `grantId`
  - removed the pattern `^cob_.*` from the `path` request parameter `configObjectId`

[Change history](https://skmtc.dev/openworklabs/apis/den-api/changes/v1/config-objects/:configObjectId/access/:grantId/delete.md)

---

[API](https://skmtc.dev/openworklabs/apis/den-api.md) · [All operations](https://skmtc.dev/openworklabs/apis/den-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/openworklabs/den-api/revisions/fcbb34aa1702/schema)