opschain security roles revoke
Included from Basic tier
Revokes one local-lane security-role grant by its row id (from
opschain security roles list). The role stops applying on the next
authorisation decision; the revocation is audited
(api:security_role_grants:destroy). Only the global security
administrator (or a superuser) may revoke. A mapped grant is removed by
deleting its identity-provider group mapping instead.
opschain security roles revoke 019a0d7e-10c2-7f7a-8b53-3b1c9a4f2e01
Revoked security-role grant 019a0d7e-10c2-7f7a-8b53-3b1c9a4f2e01
Flags
| Flag | Meaning |
|---|---|
--server <url> | Server base URL (default: the active context / OPSCHAIN_SERVER). |
--auth-token <token> | Bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login). |
See also
opschain docs cli/security-roles-list