UNunkeyed
permissions

Delete permission

Changed on

Remove a permission from your workspace. This also removes the permission from all API keys and roles.

Important: This operation cannot be undone and immediately affects all API keys and roles that had this permission assigned.

Required Permissions

Your root key must have the following permission:

  • rbac.*.delete_permission
post/v2/permissions.deletePermission

Request

  • Base URL
    https://api.unkey.com
  • URL
    https://api.unkey.com/v2/permissions.deletePermission
  • Auth
    HTTP bearer

Request body

permissionstring required

Specifies which permission to permanently delete from your workspace.

This can be a permission ID or a permission slug.

WARNING: Deleting a permission has immediate and irreversible consequences:

  • All API keys with this permission will lose that access immediately
  • All roles containing this permission will have it removed
  • Any verification requests checking for this permission will fail
  • This action cannot be undone

Before deletion, ensure you:

  • Have updated any keys or roles that depend on this permission
  • Have migrated to alternative permissions if needed
  • Have notified affected users about the access changes

Example request

{
  "permission": "perm_1234567890abcdef"
}

Response

Permission deleted successfully

dataEmptyResponse required

Empty response object by design. A successful response indicates this operation was successfully executed.

Example response

{
  "meta": {
    "requestId": "req_123"
  }
}

Changes

  • 59efaed65ec4Revision changes
    • breaking

      the request property's maxLength was decreased to 128

    • warning

      changed the pattern of the request property from ^[a-zA-Z][a-zA-Z0-9._-]*$ to ^[a-zA-Z0-9_:\-\.\*]+$

    • info

      the request property's minLength was decreased from 3 to 1

  • 43ad1ce9a152Revision changes
    • info

      the endpoint scheme security bearer was added to the API

    • info

      the endpoint scheme security rootKey was removed from the API