POST

/api/integrations/identity/users/{user}/revoke

Beta

Revoke (mode full) or restrict (mode restrict) a person's access now. Frozen first, then sessions, credentials, permissions, sharing and break-glass are ended and each is verified. Needs identity:revoke.

Parameters

Name	In	Required	Description
user	path	true	Email or external identity id.
reason, mode, dryRun	body (POST)	reason recommended	mode is full or restrict. With dryRun the Digital Twin impact preview is returned and nothing changes.

Response

{ revocation: { state: REVOCATION_COMPLETE | REVOCATION_PARTIAL | REVOCATION_FAILED, steps } }. The last active owner cannot be revoked (409 LAST_OWNER).

Example

curl -H "Authorization: Bearer $INAYA_API_KEY" \
  "https://app.inaya.network/api/integrations/identity/users/REPLACE_ME/revoke"