Operation
Remove Role Assignment
DELETE
/user-accounts/{id}Remove a specific role from a user's account access.
This revokes the permissions associated with that role immediately. If it's
the user's only role for the account, they lose access to the account
entirely.
Use this to downgrade permissions or revoke access from someone leaving.
When to use this
- Revoking access when someone leaves a team
- Downgrading permissions after a project ends
- Removing temporary elevated access
Path parameters
idstringRequired- Role assignment ID
Headers
Idempotency-KeystringOptional- Makes the write safe to retry. The first request with a key does the work and its response is stored for 24 hours; a repeat with the same key and the same request (method, path, query, X-Ticketlayer-Channel, TL-Version and body) gets that stored status and body back, marked `Idempotent-Replay: true`, without running again. The key is scoped to your organisation and your credential. The same key with a different request is 422 IDEMPOTENCY_KEY_REUSED; a repeat while the first is still running waits for it, then answers 409 IDEMPOTENT_REQUEST_IN_PROGRESS if it has not finished. Only a 2xx is stored: after an error the key is free again. Omit the header and the request behaves as it always has.
Returns
Role assignment removed
Errors
- 400
- Bad Request - Invalid input
- 401
- Unauthorized - Authentication required
- 403
- Forbidden - Insufficient permissions
- 404
- Not Found - Resource not found
- 500
- Internal Server Error
Every error names its code and links to it. All error codes
Notes
Important
If this is the user's only role for the account, they lose all access immediately.
Tip
To completely remove someone from an account, remove all their role assignments.
Related
import { BackstageClient } from '@ticketlayer/backstage';const client = new BackstageClient({ organisationSlug: 'your-org',});client.setAccessToken('YOUR_ACCESS_TOKEN');// Remove Role Assignmentconst result = await client.roleassignment.removeRoleAssignment('{{ID}}');console.log('Operation completed:', result);Response 200
{
"success": true
}