Delete Permission From Vault Account

1 min

DELETE

{{url}}/aioc-rest-web/rest/sc/sapm/deletePermissionFromAccount

Overview

This API allows for the revocation of specific permissions from a designated Vault account in KRON PAM. By providing the sapmDbId of the Vault account, you can determine which permissions are to be removed from either individual users or user groups.

Parameters

sapmDbId:
- Description: The unique identifier of the Vault account in KRON PAM.
permissionToDelete:
- Description: An array of objects, each detailing a permission to be revoked.
- Components:
  - eid: External identifier for the user or user group.
  - permission: Defines the access level to be removed. Permissions include:
    - LIST_ONLY: View-only access.
    - MANAGE_PASSWORD: Password management capability.
    - READ_ONLY: Read-only access.
    - READ_ONLY_SECOND_PART: Limited read-only access to the latter part of data.
    - FULL_CONTROL: Full access and control.
    - READ_WRITE: Ability to read and modify.
    - READ_ONLY_FIRST_PART: Limited read-only access to the initial part of data.
  - type: Indicates if the permission is for a user or a user group, with possible values being USER or USER_GROUP.

urlstring

X-XSRF-TOKENstring

bodyobject

200Delete Permission From Vault Account

curl --request DELETE \
     --url {{url}}/aioc-rest-web/rest/sc/sapm/deletePermissionFromAccount \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --header 'x-xsrf-token: {{csrftoken}}' \
     --data '"{\r\n    \"sapmDbId\": 384810,\r\n    \"permissionToDelete\": [\r\n        {\r\n            \"id\": \"DEFAULT_GROUP_SYSYEM_ADMINS\",\r\n            \"eid\": \"esc1l1\",\r\n            \"permission\": \"LIST_ONLY\",\r\n            \"type\": \"USER_GROUP\"\r\n        }\r\n    ]\r\n}\r\n"'