Membership Revoke

Revoke all active person_role assignments in the member tenant, increment membership_version once and enqueue one hard invalidation atomically. A new request_ref for an already revoked member returns original revoked_at and empty person_role_ids; an identical request_ref returns the original response. reason is recorded in audit.

POST https://id.test.globalbes.sg:9443/internal/control/v1/memberships/{membership_id}/revoke

Called byTenant admin AuthService certificate+ signed-in user (optional)

Act as the signed-in user (sign in first)

Path

membership_id*

uuid

Headers

X-BES-Operator

uuid

Optional acting person named by a service that authenticated them; when a user token is sent it must name the same person.

Body

request_ref*

string

reason*

string

Request preview

POST /internal/control/v1/memberships/{membership_id}/revoke

Response

Choose an API and send a request.

Caller tags:BOSSTenant adminAll productsMobile appMessagingControlAIAssistantPlatform opsLegacy productsCI release