Skip to main content

Remove accounts or account groups from an access policy

PUT 
/api/v1/AccessControlPolicy/:policyId/ManagedAccount/Remove

Removes accounts, account groups or user and group collections from an access policy and returns how many items passed and how many failed. Items that exist but are not in the policy count as passed. Items whose id is not found are counted as failed. For a custom-role user, items outside their role are skipped and counted as failed.

Permission required: Administrator, or a custom role with the [AP] Modify Users permission on this policy.

Values for entityType: 0 = ManagedAccount, 1 = ManagedAccountGroup, 2 = Application, 3 = Collection, 4 = Local.

Caution: In this release, removing an individual account (entityType 0, 2 or 4) fails: the call returns 400 and, because accounts are processed first, nothing in the request is removed. Account groups (1) and collections (3) can still be removed when the request contains no individual accounts.

Request​

Responses​

The result: passed (number of items changed), failed (number of items not changed) and report (a list of messages, which this route leaves empty).