Skip to main content
POST
Request a user deletion (maker)

Authorizations

Authorization
string
header
required

JWT bearer token issued by the identity provider.

Headers

Authorization
string

Bearer JWT. A normal-user or an application principal may request a deletion; only a normal-user may decide one. The MAKER identity recorded on the request is derived from THIS token, never the body.

Body

application/json

Raise a four-eyes deletion request for a user.

userId
string
required

The target user to delete.

Example:

"42"

note
string

Optional reason (≤500 chars). Operator free-text only.

Response

Created

at
string<date-time>
required

When the latest event was recorded (RFC 3339).

operator
object
required

Server-extracted operator who recorded the latest event (the maker on 'requested'; the checker otherwise).

state
enum<string>
required

Latest workflow action: 'requested' (pending a checker), 'approved' (deleted), 'rejected', or 'failed' (execution failed, retryable).

Available options:
requested,
approved,
rejected,
failed
Example:

"requested"

userId
string
required

The target user the workflow is about.

Example:

"42"

note
string

Optional operator-authored reason.

Example:

"offboarding after a role change"