PRprimitive
Roles and members

End break-glass access

Ends a grant early. Person only: a dashboard session, or the person's own OAuth or CLI token with a session step-up of purpose break_glass.write (the person confirms at the step_up_url a 403 step_up_required answer carries, which names this client, then send the token in the Primitive-Step-Up header; the token works only with the client it was confirmed for). Needs access_mode:manage (owners). API keys are refused.

post/break-glass/{id}/end

Request

  • Base URL
    https://api.primitive.dev/v1
  • URL
    https://api.primitive.dev/v1/break-glass/{id}/end
  • Auth
    HTTP bearer

Path parameters

idstring uuid required

The id of the group, role, member, grant or suspension the path names.

Headers

Idempotency-Keystring

Optional client-supplied idempotency key. Retrying a request with the same key returns the original result instead of performing the action a second time; if omitted the server derives one from the canonical payload hash. Safe to retry network failures without duplicating side effects.

Response

End break-glass access

successtrue required

Changes

No operation changes recorded.