Remove a member's access to an entity

DELETE

/entity-access/{id}

Permanently revokes a granted identity's access to an entity by deleting the corresponding entity-access record. Once removed, the identity that held this access record can no longer act on the entity under the permissions it granted, and this action cannot be undone.

The caller must have the can_remove_entity_member permission (or the wildcard * permission) on the entity to perform this action — this is resolved from the caller's own entity-access record, not the record being removed.

Two records are protected from removal:

The entity owner's access record can never be removed this way (403).

You cannot remove your own access record, even with sufficient permissions (400).

The lookup is scoped by entity_id, so an access record belonging to a different entity is never matched and the endpoint responds as if it does not exist (404).

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Path Params

Query Params

Responses

🟢200

application/json

The entity-access record was found and removed successfully.

Bodyapplication/json

🟠400

🟠401

🟠403

🟠404

Request Example

Shell

JavaScript

Java

Swift

curl --location --request DELETE '/entity-access/01JABC1234567890ABCDEFGHIJ?entity_id=01HZ9ABCD1234EFGH5678IJKL90' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Success

{
    "message": "Entity access removed successfully",
    "status": "success",
    "data": {
        "id": "01JABC1234567890ABCDEFGHIJ",
        "deleted": true
    }
}

Modified at 2026-09-30 00:29:30

Change a team member's role on an entity

List an entity's team members