API ReferenceAdmin Groups
Remove Member
DELETE
/v1/admin/groups/{group_id}/members/{auth_user_id}Remove a user from a group AND eagerly revoke their access (S27, #303).
NOTE: this is a FULL credential severance for the user in this tenant — it
revokes EVERY device key and refresh family they hold (mirroring SCIM
active:false suspend), not a scoped group-leave. A user removed from one group
but still a member of others must re-authenticate. Use this for offboarding /
access removal; for routine group reshuffling expect the user to be signed out.
(App-level detach is narrower — see update_oidc_app_groups, which revokes only
the detached app's sessions for users who lose access.)
Authorization
HTTPBearer AuthorizationBearer <token>
In: header
Path Parameters
group_id*Group Id
Format
uuidauth_user_id*Auth User Id
Format
uuidResponse Body
application/json
curl -X DELETE "https://example.com/v1/admin/groups/497f6eca-6276-4993-bfeb-53cbbbba6f08/members/497f6eca-6276-4993-bfeb-53cbbbba6f08"Empty
{ "detail": [ { "loc": [ "string" ], "msg": "string", "type": "string", "input": null, "ctx": {} } ]}