Revoke a profile's system-admin grant

POST

/api/access/admin/demote

Maintainer:Not configured

OperationId:admin_demote

Removes the system-admin governance grant from a profile. Idempotent. Requires a system admin.

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Header Params

Body Params application/jsonRequired

Examples

Responses

🟢200OK

System-admin governance grant revoked (idempotent)

This response does not have a body.

🟠401Unauthorized

🟠403Forbidden

Request Example

Shell

JavaScript

Java

Swift

curl --location '/api/access/admin/demote' \
--header 'X-Temper-Surface;' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "profile_id": "bfcb6779-b1f9-41fc-92d7-88f8bc1d12e8"
}'

Response Example

401 - Example 1

{
    "error": {
        "code": "string",
        "details": null,
        "message": "string"
    }
}

Modified at 2026-10-06 12:32:37

Reconcile auto-join team rosters

Approve a principal