> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.cloudraker.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.cloudraker.com/_mcp/server. # Revoke a role grant on a resource from a subject DELETE https://api.cloudraker.com/authorization/grants Content-Type: application/json Revokes an existing role grant (unshares). Authorization: same as createGrant — org admin, or the caller holds the resource’s share permission on the target (`space:share`/`spacetype:share`; `settings` is admin-only); otherwise 403 `forbidden`. Body is the SAME shape as createGrant: `subject` (exactly one of `organizationMembershipId`/`groupId`), `role`, `resourceType`, `resourceExternalId`. Returns 204 No Content on success. Reference: https://docs.cloudraker.com/api/cloud-raker-api/workspace/authorization/delete-grant ## OpenAPI Specification ```yaml openapi: 3.1.0 info: title: CloudRaker API version: 1.0.0 paths: /authorization/grants: delete: operationId: delete-grant summary: Revoke a role grant on a resource from a subject description: >- Revokes an existing role grant (unshares). Authorization: same as createGrant — org admin, or the caller holds the resource’s share permission on the target (`space:share`/`spacetype:share`; `settings` is admin-only); otherwise 403 `forbidden`. Body is the SAME shape as createGrant: `subject` (exactly one of `organizationMembershipId`/`groupId`), `role`, `resourceType`, `resourceExternalId`. Returns 204 No Content on success. tags: - authorization parameters: - name: Authorization in: header description: Bearer authentication required: true schema: type: string responses: '204': description: The role grant was revoked content: application/json: schema: type: object properties: {} '403': description: Caller is not an admin and lacks the resource’s share permission content: application/json: schema: description: Any type requestBody: content: application/json: schema: type: object properties: subject: $ref: >- #/components/schemas/AuthorizationGrantsDeleteRequestBodyContentApplicationJsonSchemaSubject role: type: string resourceType: $ref: >- #/components/schemas/AuthorizationGrantsDeleteRequestBodyContentApplicationJsonSchemaResourceType resourceExternalId: type: string required: - subject - role - resourceType - resourceExternalId servers: - url: https://api.cloudraker.com description: Production - url: https://api.staging.raker.one description: Staging - url: https://api.dev.raker.one description: Development components: schemas: AuthorizationGrantsDeleteRequestBodyContentApplicationJsonSchemaSubject: type: object properties: organizationMembershipId: type: string groupId: type: string title: AuthorizationGrantsDeleteRequestBodyContentApplicationJsonSchemaSubject AuthorizationGrantsDeleteRequestBodyContentApplicationJsonSchemaResourceType: type: string enum: - space - spacetype - settings title: >- AuthorizationGrantsDeleteRequestBodyContentApplicationJsonSchemaResourceType securitySchemes: bearerAuth: type: http scheme: bearer ``` ## Examples **Request** ```json { "subject": { "organizationMembershipId": "orgmem-7a8b9c0d1e2f3g4h" }, "role": "editor", "resourceType": "space", "resourceExternalId": "space-12345abcde" } ``` **Response** ```json {} ``` **SDK Code** ```python import requests url = "https://api.cloudraker.com/authorization/grants" payload = { "subject": { "organizationMembershipId": "orgmem-7a8b9c0d1e2f3g4h" }, "role": "editor", "resourceType": "space", "resourceExternalId": "space-12345abcde" } headers = { "Authorization": "Bearer ", "Content-Type": "application/json" } response = requests.delete(url, json=payload, headers=headers) print(response.json()) ``` ```javascript const url = 'https://api.cloudraker.com/authorization/grants'; const options = { method: 'DELETE', headers: {Authorization: 'Bearer ', 'Content-Type': 'application/json'}, body: '{"subject":{"organizationMembershipId":"orgmem-7a8b9c0d1e2f3g4h"},"role":"editor","resourceType":"space","resourceExternalId":"space-12345abcde"}' }; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "https://api.cloudraker.com/authorization/grants" payload := strings.NewReader("{\n \"subject\": {\n \"organizationMembershipId\": \"orgmem-7a8b9c0d1e2f3g4h\"\n },\n \"role\": \"editor\",\n \"resourceType\": \"space\",\n \"resourceExternalId\": \"space-12345abcde\"\n}") req, _ := http.NewRequest("DELETE", url, payload) req.Header.Add("Authorization", "Bearer ") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("https://api.cloudraker.com/authorization/grants") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Delete.new(url) request["Authorization"] = 'Bearer ' request["Content-Type"] = 'application/json' request.body = "{\n \"subject\": {\n \"organizationMembershipId\": \"orgmem-7a8b9c0d1e2f3g4h\"\n },\n \"role\": \"editor\",\n \"resourceType\": \"space\",\n \"resourceExternalId\": \"space-12345abcde\"\n}" response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.delete("https://api.cloudraker.com/authorization/grants") .header("Authorization", "Bearer ") .header("Content-Type", "application/json") .body("{\n \"subject\": {\n \"organizationMembershipId\": \"orgmem-7a8b9c0d1e2f3g4h\"\n },\n \"role\": \"editor\",\n \"resourceType\": \"space\",\n \"resourceExternalId\": \"space-12345abcde\"\n}") .asString(); ``` ```php request('DELETE', 'https://api.cloudraker.com/authorization/grants', [ 'body' => '{ "subject": { "organizationMembershipId": "orgmem-7a8b9c0d1e2f3g4h" }, "role": "editor", "resourceType": "space", "resourceExternalId": "space-12345abcde" }', 'headers' => [ 'Authorization' => 'Bearer ', 'Content-Type' => 'application/json', ], ]); echo $response->getBody(); ``` ```csharp using RestSharp; var client = new RestClient("https://api.cloudraker.com/authorization/grants"); var request = new RestRequest(Method.DELETE); request.AddHeader("Authorization", "Bearer "); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{\n \"subject\": {\n \"organizationMembershipId\": \"orgmem-7a8b9c0d1e2f3g4h\"\n },\n \"role\": \"editor\",\n \"resourceType\": \"space\",\n \"resourceExternalId\": \"space-12345abcde\"\n}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift import Foundation let headers = [ "Authorization": "Bearer ", "Content-Type": "application/json" ] let parameters = [ "subject": ["organizationMembershipId": "orgmem-7a8b9c0d1e2f3g4h"], "role": "editor", "resourceType": "space", "resourceExternalId": "space-12345abcde" ] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://api.cloudraker.com/authorization/grants")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "DELETE" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```