Credential Action Revoke

Authorized action status and expiry only; no secret, link, channel code or encrypted material. Optional tenant_id query scopes authority and requires an active target membership. Null or omitted scope requires global authority. Revoke is state-convergent and leaves the person restricted until a new action is completed.

POST https://id.test.globalbes.sg:9443/internal/control/v1/credential-actions/{action_id}/revoke

Called byTenant admin AuthService certificate+ signed-in user (optional)

Act as the signed-in user (sign in first)

Path

action_id*

uuid

Query

tenant_id

uuid

Headers

X-BES-Operator

uuid

Optional acting person named by a service that authenticated them; when a user token is sent it must name the same person.

Body

request_ref*

string

Stable caller reference; identical replay returns the first response; changed parameters conflict.

Request preview

POST /internal/control/v1/credential-actions/{action_id}/revoke

Response

Choose an API and send a request.

Caller tags:BOSSTenant adminAll productsMobile appMessagingControlAIAssistantPlatform opsLegacy productsCI release