Credential Revoke

Disable the password, revoke pending actions and channel proofs, and close all logins. Preserve the person, memberships and channels. Tenant-scoped callers require an active target membership. Null or omitted tenant_id requires global authority. A person without a password returns null credential_id. Repetition returns the same state and records no second reason or transition.

POST https://id.test.globalbes.sg:9443/internal/control/v1/credentials/revoke

Called byTenant admin AuthService certificate+ signed-in user (optional)

Act as the signed-in user (sign in first)

Headers

X-BES-Operator

uuid

Optional acting person named by a service that authenticated them; when a user token is sent it must name the same person.

Body

person_id*

uuid

tenant_id

uuid

reason*

string

request_ref*

string

Stable caller reference; identical replay returns the first response; changed parameters conflict.

Request preview

POST /internal/control/v1/credentials/revoke

Response

Choose an API and send a request.

Caller tags:BOSSTenant adminAll productsMobile appMessagingControlAIAssistantPlatform opsLegacy productsCI release