Method: folders.locations.entitlements.grants.revoke

grants.revoke is used to immediately revoke access for a grant. This method can be called when the grant is in a non-terminal state.

HTTP request

POST https://privilegedaccessmanager.googleapis.com/v1/{name=folders/*/locations/*/entitlements/*/grants/*}:revoke

The URL uses gRPC Transcoding syntax.

Path parameters

Parameters
name

string

Required. Name of the grant resource which is being revoked.

Request body

The request body contains data with the following structure:

JSON representation
{
  "reason": string
}
Fields
reason

string

Optional. The reason for revoking this grant.

Response body

If successful, the response body contains an instance of Operation.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the name resource:

  • privilegedaccessmanager.grants.revoke

For more information, see the IAM documentation.