Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1490485351.4 KB

Disassociates a previously associated principal ARN from a specified portfolio.

The PrincipalType and PrincipalARN must match the AssociatePrincipalWithPortfolio call request details. For example, to disassociate an association created with a PrincipalARN of PrincipalType IAM you must use the PrincipalType IAM when calling DisassociatePrincipalFromPortfolio.

For portfolios that have been shared with principal name sharing enabled: after disassociating a principal, share recipient accounts will no longer be able to provision products in this portfolio using a role matching the name of the associated principal.

post/#X-Amz-Target=AWS242ServiceCatalogService.DisassociatePrincipalFromPortfolio

Headers

X-Amz-Target'AWS242ServiceCatalogService.DisassociatePrincipalFromPortfolio' required

Request body

AcceptLanguagestring
<p>The language code.</p> <ul> <li> <p> <code>jp</code> - Japanese</p> </li> <li> <p> <code>zh</code> - Chinese</p> </li> </ul>
PortfolioIdstring required

The portfolio identifier.

PrincipalARNstring required

The ARN of the principal (user, role, or group). This field allows an ARN with no <code>accountID</code> if <code>PrincipalType</code> is <code>IAM_PATTERN</code>.

PrincipalType'IAM' | 'IAM_PATTERN'

The supported value is <code>IAM</code> if you use a fully defined ARN, or <code>IAM_PATTERN</code> if you use no <code>accountID</code>.

Response

Success

DisassociatePrincipalFromPortfolioOutput required