Skip to content

Revoke a system role from a user

DELETE
/api/v1/system-roles/revoke
curl --request DELETE \
--url http://localhost:3000/api/v1/system-roles/revoke \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{ "userId": "example", "role": "SUPERUSER", "reason": "example" }'
x-organization-id
string format: uuid

UUID of the organization (tenant) the request acts in. It selects the tenant and grants nothing: the server checks membership or an open tenant switch. Not needed for global operations. A malformed value returns 400. API keys are fixed to their own organization; another organization returns 403. The x-organization-source header grants nothing.

Media typeapplication/json
object
userId
required

User ID to revoke the role from

string
role
required

Role type to revoke

string
Allowed values: SUPERUSER SUPPORT
reason

Reason for revoking the role

string

Role revoked

Cannot revoke own superuser role or last superuser

Only superusers can revoke roles

User or role not found