Remove All Members

Empty a group — remove every member in one pass.

A DISTINCT PATH rather than a flag on the bulk route, and it deliberately takes no body. "Remove everyone" must never be something a malformed or proxy-stripped request body can turn into: the only way to reach it is to name it exactly. (DELETE /{group_id} — deleting the whole group — takes no body for the same reason.)

Scales past the bulk route's 200-id cap, which exists to bound a request the SPA composes from a page of checkboxes. This one composes nothing: the server reads the membership itself, and both the delete and the severance are set-based, so a SCIM-sized group is a handful of statements.

Audit: ONE group.members_cleared row carrying the count, mirroring group.deleted for the whole-group case, rather than N member_removed rows. The operator performed one action, and a 10k-member group would otherwise write 10k audit rows in a single transaction.

Path Parameters

Response Body