Identity & Access Management

Preview — pending review

This reference is generated from the platform API contract and is still under review. Operations, fields, and descriptions can change before publication.

Revoke a principal's project-creator grant on the subscription

DELETE
/tenants/{tenantId}/subscriptions/{subscriptionId}/project-creators/{principalId}

Removes principalId's project-creator grant. 204 whether or not the principal held one; a grant that is actually removed records a SUCCEEDED iam.project_creator.revoke Operation for the IAM activity trail. Projects the principal already opened are untouched. Authorization: unreached/unknown subscription 404; no SUBSCRIPTION-level owner grant 403; an API token is refused 403 TOKEN_SCOPE_MISSING (iam:write is never grantable); tenant on non-payment hold 403 TENANT_SUSPENDED. Async & state: Synchronous. Errors: 401; 403; 404; 500. Idempotency/Concurrency: Idempotent by nature; no Idempotency-Key is read.

Authorization

bearerToken
headerAuthorizationBearer <token>

An API token (pc_live_…) or a service-account key (sak_live_…), created in Identity & Access Management and sent as Authorization: Bearer <token>. Requests are rate limited per credential and per tenant: every response carries X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset, and a refused request gets 429 RATE_LIMITED with Retry-After.

Path Parameters

tenantId*string

The tenant id.

subscriptionId*string

The subscription id (unique platform-wide, derived from the tenant id + the subscription's name at creation).

principalId*string

The principal (user id = e-mail, or service-account id) the grant is about.

Response Body

Grant absent now; no content.

curl -X DELETE "https://example.com/tenants/string/subscriptions/string/project-creators/string"
Empty