Delete Permission From Vault Account

1 min

DELETE

{{url}}/aioc-rest-web/rest/sc/sapm/deletePermissionFromAccount

Request Overview

This API revokes specific permissions from a designated Vault account in KRON PAM. Permissions can be removed from either individual users or user groups.

sapmdbId: Identifier of the Vault account in KRON PAM.
permissionToDelete: Array of objects detailing the permissions to be revoked.
- id: Identifier of the permission group.
- eid: External identifier for the user or user group.
- permission: Access level to be removed (e.g., LIST_ONLY, MANAGE_PASSWORD, READ_ONLY, FULL_CONTROL).
- type: Indicates if the permission is for a user or a user group.

urlstring

X-XSRF-TOKENstring

bodyobject

200Delete Permission From Vault Account

curl --request DELETE \
     --url {{url}}/aioc-rest-web/rest/sc/sapm/deletePermissionFromAccount \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --header 'x-xsrf-token: {{csrftoken}}' \
     --data '"{\r\n    \"sapmDbId\": 384810,\r\n    \"permissionToDelete\": [\r\n        {\r\n            \"id\": \"DEFAULT_GROUP_SYSYEM_ADMINS\",\r\n            \"eid\": \"esc1l1\",\r\n            \"permission\": \"LIST_ONLY\",\r\n            \"type\": \"USER_GROUP\"\r\n        }\r\n    ]\r\n}\r\n"'