Revoke a role grant on a resource from a subject

DELETE

/authorization/grants

Revokes an existing role grant (unshares). Authorization: same as createGrant — org admin, or the caller holds the resource’s share permission on the target (space:share/spacetype:share; settings is admin-only); otherwise 403 forbidden. Body is the SAME shape as createGrant: subject (exactly one of organizationMembershipId/groupId), role, resourceType, resourceExternalId. Returns 204 No Content on success.

Revokes an existing role grant (unshares). Authorization: same as createGrant — org admin, or the caller holds the resource’s share permission on the target (`space:share`/`spacetype:share`; `settings` is admin-only); otherwise 403 `forbidden`. Body is the SAME shape as createGrant: `subject` (exactly one of `organizationMembershipId`/`groupId`), `role`, `resourceType`, `resourceExternalId`. Returns 204 No Content on success.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Request

This endpoint expects an object.

subjectobjectRequired

rolestringRequired>=1 character

resourceTypeenumRequired

Allowed values:

resourceExternalIdstringRequired>=1 character

Response

The role grant was revoked

Errors

403

Forbidden Error

$	curl -X DELETE https://api.cloudraker.com/authorization/grants \
>	-H "Authorization: Bearer <token>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"subject": {
>	"organizationMembershipId": "orgmem-7a8b9c0d1e2f3g4h"
>	},
>	"role": "editor",
>	"resourceType": "space",
>	"resourceExternalId": "space-12345abcde"
>	}'