Remove user from group
Users
Remove User from Group
Syteca ACB REST API endpoint to remove a user from a Syteca user group — for IdP-driven membership cleanup, role-change automation, and offboarding workflows.
DELETE
Remove user from group
Removes a user from a Syteca user group. The user keeps their direct permissions (those granted to the user individually) but loses any permissions inherited from this group’s membership.
For ACB deployments updated from a version prior to 1.2, switch to the
https://{hostname}/EkranACB server in the Playground.Permissions required
The Access Token must be issued to a user with the administrative User Management permission.Common use cases
- Role-change cleanup — User moves to a different team; remove from old team’s group as part of the role-change automation.
- Offboarding — Remove from all groups before deleting the user — useful for staged offboarding where you want to revoke access immediately but retain the user for a grace period.
- AD group sync — Mirror AD group removal into Syteca user groups.
Permission loss is immediate
Group-inherited permissions are revoked the moment removal succeeds. Any active session the user has continues until the user signs out — but any new permission check (opening a Client session, fetching a secret) will reflect the new (reduced) permission set.Errors
See Status codes. Common errors:- 403 Forbidden — caller lacks User Management permission.
- 404 Not Found — user not in group, or group/user doesn’t exist.
Related
Add to user group
The complementary addition endpoint.
Delete user
Remove the user entirely.
Get user details
Verify current group memberships.
Secret permissions
How groups inherit PAM role permissions.