Remove one Permission from a Role

curl --request DELETE \
  --url https://identity.sandbox.lerian.net/v1/roles/{id}/permissions/{permId} \
  --header 'Authorization: Bearer <token>'

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://identity.sandbox.lerian.net/v1/roles/{id}/permissions/{permId}"

	req, _ := http.NewRequest("DELETE", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

const options = {method: 'DELETE', headers: {Authorization: 'Bearer <token>'}};

fetch('https://identity.sandbox.lerian.net/v1/roles/{id}/permissions/{permId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://identity.sandbox.lerian.net/v1/roles/{id}/permissions/{permId}"

headers = {"Authorization": "Bearer <token>"}

response = requests.delete(url, headers=headers)

print(response.text)

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

Remove one Permission from a Role

Takes one permission out of one role. {id} is the ROLE and {permId} is the PERMISSION — both are slugs, so the order of the two is what tells them apart, and swapping them narrows something nobody asked to narrow.

The batch form, POST /v1/roles/{id}/permissions/remove, does the same for a list.

Removing an existing permission the role does not carry is not an error. On success the response has no body (204).

Failures:

404 — the permission does not exist.
422 IDE-1066 — the permission is declared by a Lerian product, which alone decides the roles that hold it (this includes the M2M permission of a Lerian service’s credential), and it holds the role. Change who has the access by adding or removing people on the role, or in a group it is granted to; a machine permission has no client-side change.
503 IDE-0066 — the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.

DELETE

roles

{id}

permissions

{permId}

Remove one Permission from a Role

curl --request DELETE \
  --url https://identity.sandbox.lerian.net/v1/roles/{id}/permissions/{permId} \
  --header 'Authorization: Bearer <token>'

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://identity.sandbox.lerian.net/v1/roles/{id}/permissions/{permId}"

	req, _ := http.NewRequest("DELETE", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

const options = {method: 'DELETE', headers: {Authorization: 'Bearer <token>'}};

fetch('https://identity.sandbox.lerian.net/v1/roles/{id}/permissions/{permId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://identity.sandbox.lerian.net/v1/roles/{id}/permissions/{permId}"

headers = {"Authorization": "Bearer <token>"}

response = requests.delete(url, headers=headers)

print(response.text)

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

Authorizations

Authorization

string

header

required

JWT bearer token issued by the identity provider.

Path Parameters

string

required

Role ID.

Example:

"midaz-editor"

permId

string

required

Permission ID.

Example:

"midaz-editor-permission"

Response

No Content

Overview

Authentication

Single sign-on

Authorization

User information

Login MFA

Login passkey

Identity overview

Groups

Applications

Partners

Users

Account MFA

Account passkey

Identity providers

Application providers

Permissions

Roles

Security policies

Plugin declarations

Error handling

Remove one Permission from a Role

Authorizations

Path Parameters

Response