Skip to main content
Version: v5.7.0

opschain security roles review revoke

Included from Basic tier

Revokes a converted grant: the principal loses the role on the next authorisation decision and the grant leaves the review queue (the row is removed — the same api:security_role_grants:destroy act as opschain security roles revoke, whose audit event carries the grant's origin). Only the global security administrator (or a superuser) may revoke, behind the step-up floor.

opschain security roles review revoke 019a...
Revoked converted security-role grant 019a...

Flags​

FlagMeaning
--server <url>Server base URL (default: the active context / OPSCHAIN_SERVER).
--auth-token <token>Bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login).

See also​

  • opschain docs cli/security-roles-review-confirm
  • opschain docs cli/security-roles-review-list