---
title: "🛡️ Revoke roles."
method: DELETE
path: "/api/v1/roles/{role}/assignments"
tags: ["Role Assignments"]
---

# 🛡️ Revoke roles.

`DELETE /api/v1/roles/{role}/assignments`

Revoke a role from one or more users by deleting role assignments. If the user does not have the role, nothing will happen. The Guest Account is protected from having its roles removed.<br /><hr /><h3>🛡️ Requires Capabilities: <code>RoleAssignments.Delete</code></h3>

## Path parameters

- `role` string, required

## Query parameters

- `userIds` string[], required

## Response `200`

- RoleAssignment[]
  - `id` number, required
  - `user` User, required
    - `userId` string, required
    - `cardinalId` string
    - `cachedCloudUser` object, required
      - `subscription` 'free' | 'early_adopter' | 'starter' | 'pro' | 'ultimate'
    - `cachedCloudUserAt` string, date-time
    - `enabled` boolean
    - `role` string, required
    - `designation` string
    - `activityStatus` string
    - `activityStatusUpdatedAt` string, date-time
    - `roles` RoleAssignment[], required
    - `username` string
    - `password` string
    - `id` number, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `deletedAt` string, date-time, required
  - `role` string, required
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required
  - `deletedAt` string, date-time, required

## Other responses

- `400` — Possible reasons: Request validation failed, see response for details; You are attempting to update the Guest Account.
- `401` — Possible reasons: The authorization token is invalid.
- `403` — Possible reasons: The user does not have sufficent capabilities.

---

[API](https://skmtc.net/cardinalapps/apis/cardinal-media-server-api.md) · [All operations](https://skmtc.net/cardinalapps/apis/cardinal-media-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cardinalapps/cardinal-media-server-api/versions/0c30e5146acd/schema)