Skip to main content
DELETE
Remove user from group
Removes a user from a Syteca user group. The user keeps their direct permissions (those granted to the user individually) but loses any permissions inherited from this group’s membership.
For ACB deployments updated from a version prior to 1.2, switch to the https://{hostname}/EkranACB server in the Playground.

Permissions required

The Access Token must be issued to a user with the administrative User Management permission.

Common use cases

  • Role-change cleanup — User moves to a different team; remove from old team’s group as part of the role-change automation.
  • Offboarding — Remove from all groups before deleting the user — useful for staged offboarding where you want to revoke access immediately but retain the user for a grace period.
  • AD group sync — Mirror AD group removal into Syteca user groups.

Permission loss is immediate

Group-inherited permissions are revoked the moment removal succeeds. Any active session the user has continues until the user signs out — but any new permission check (opening a Client session, fetching a secret) will reflect the new (reduced) permission set.

Errors

See Status codes. Common errors:
  • 403 Forbidden — caller lacks User Management permission.
  • 404 Not Found — user not in group, or group/user doesn’t exist.

Add to user group

The complementary addition endpoint.

Delete user

Remove the user entirely.

Get user details

Verify current group memberships.

Secret permissions

How groups inherit PAM role permissions.

Authorizations

Authorization
string
header
required

Access token for authentication

Path Parameters

groupId
integer<int32>
required

ID of the user group

userId
integer<int32>
required

ID of the user (internal or domain)

Response

User removed from group successfully