Remove roles from a group
DELETE/api/v1/RolesRole/RemoveRolesFromManagedAccountGroup/:managedAccountGroupId
Removes one or more roles from a group in a single call. The Administrator role cannot be removed from a group that the signed-in administrator belongs to; that item counts as failed. The Administrator role can be removed only from a group that is backed by a directory group; otherwise that item counts as failed. The server reads the list from the request body of this DELETE request, so the body is required. Some HTTP clients and API tools drop the body of a DELETE request; check that yours sends it.
Permission required: Administrator role.
Request
Responses
- 200
- 400
- 403
- 404
Returns the number of roles removed (passed), the number that failed, and a message for each item.
The roles could not be removed.
The signed-in user does not have the required role, or the account has read-only administrator access.
The group does not exist, or the signed-in user's account could not be found.