Skip to content

MemberDirectory.deprovision

POST /{namespace}/member-directories/{directory}/deprovision

Deprovision ends one person’s access to a Tenant in one Action when the Customer’s directory removes them.

Mode
do
Event
MemberDirectory.deprovisioned

Inputs

InputTypeRequiredDescription
directoryMember DirectoryrequiredThe Member Directory that removed the person.
personPersonrequiredThe person removed.

Outputs

OutputTypeRequiredDescription
personPersonrequiredThe person, with no Role left in the Tenant.
memberDirectoryMember DirectoryrequiredThe Member Directory that removed the person.

Effects

  • Emits MemberDirectory.deprovisioned.
  • Performed by the Security Engineer.
  • Two-way: it runs at once, in the try, send and do modes.
  • Revokes the person’s keys, sign-ins and Mandates in the Tenant before their next call.
  • Keeps every record the person made, owned by the Tenant.

Refuses when

CheckErrorFixThen call
The key is valid, but its scopes do not allow this operation.forbiddenUse a key whose scopes cover the operation, or ask an owner of the namespace to grant them.MemberDirectory.deprovision

When it waits

GateDefault
Decision classLow: two-way, nothing at stake
Delay windowNone: it runs once review passes.
LimitThe call Limit of the Permission it runs under.
Over the LimitIt waits pending for an Approval from the Founder. Approved, it runs; refused, it ends refused with limit-exceeded; unanswered by its deadline, it ends canceled.