Remove a user role assignment.

Revoke a role from a user. For bulk updates consider Set user role assignments.

You need to have a permission with action users.roles:remove and scope permissions:type:delegate. permissions:type:delegate scope ensures that users can only unassign roles which have same, or a subset of permissions which the user has. For example, if a user does not have required permissions for creating users, they won’t be able to unassign a role which will allow to do that. This is done to prevent escalation of privileges.