Remove Entitlement Membership

Remove a user from a ConductorOne-managed entitlement (catalog, group, or profile type). For access profiles, this creates a revoke task to deprovision access.

DELETE /api/v1/apps/{app_id}/entitlements/{app_entitlement_id}/remove-membership

RemoveEntitlementMembership

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/operations"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.AppEntitlements.RemoveEntitlementMembership(ctx, operations.C1APIAppV1AppEntitlementsRemoveEntitlementMembershipRequest{
        AppEntitlementID: "<id>",
        AppID: "<id>",
    })
    if err != nil {
        log.Fatal(err)
    }
    if res.RemoveEntitlementMembershipResponse != nil {
        // handle response
    }
}

200

{
  "revokeTaskId": "<string>"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Path Parameters

app_id · string | null · required

The ID of the app that contains the entitlement.

app_entitlement_id · string | null · required

The ID of the app entitlement to remove the membership from.

Body

application/json

The RemoveEntitlementMembershipRequest message.

appUserId · string | null

The ID of the app user whose membership to remove.

Response

200 - application/json

Successful response

The RemoveEntitlementMembershipResponse message.

revokeTaskId · string | null

The ID of the revoke task created to remove the user from the entitlement, if the entitlement is an access profile (aka. catalog). It's aka. the JML task.