Remove a member

Removes a member from the organization, after transferring what they own (POST /members/{id}/transfer). Only an owner removes an owner; nobody removes someone whose access is wider than their own, or themselves. What they still own is then flagged or suspended for a decision (GET /access-suspensions). When the identity provider no longer has the membership, the local membership is ended here with the same cleanup; a retry while the removal is still finishing completes it. Person only: a dashboard session, or the person's own OAuth or CLI token with a session step-up of purpose members.remove (the person confirms at the step_up_url a 403 step_up_required answer carries, which names this client and the member, then send the token in the Primitive-Step-Up header; the token works only with the client it was confirmed for and only for the member it was confirmed for). Needs members:manage. API keys are refused.