Method: organizations.locations.entitlements.grants.revoke
grants.revoke
is used to immediately revoke access for a grant. This method can be called when the grant is in a non-terminal state.
HTTP request
POST https://privilegedaccessmanager.googleapis.com/v1/{name=organizations/*/locations/*/entitlements/*/grants/*}:revoke
The URL uses gRPC Transcoding syntax.
Path parameters
Parameters |
name |
string
Required. Name of the grant resource which is being revoked.
|
Request body
The request body contains data with the following structure:
JSON representation |
{
"reason": string
} |
Fields |
reason |
string
Optional. The reason for revoking this grant.
|
Response body
If successful, the response body contains an instance of Operation
.
Authorization scopes
Requires the following OAuth scope:
https://www.googleapis.com/auth/cloud-platform
For more information, see the Authentication Overview.
IAM Permissions
Requires the following IAM permission on the name
resource:
privilegedaccessmanager.grants.revoke
For more information, see the IAM documentation.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-05-21 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-21 UTC."],[[["\u003cp\u003eThis page details the \u003ccode\u003egrants.revoke\u003c/code\u003e method, which is used to immediately revoke access for a grant in a non-terminal state.\u003c/p\u003e\n"],["\u003cp\u003eThe HTTP request for revoking a grant is a \u003ccode\u003ePOST\u003c/code\u003e request to a specific URL using gRPC Transcoding syntax, with the grant's name as a required path parameter.\u003c/p\u003e\n"],["\u003cp\u003eThe request body requires a JSON structure that includes an optional \u003ccode\u003ereason\u003c/code\u003e field, which is a string, explaining the revocation of the grant.\u003c/p\u003e\n"],["\u003cp\u003eA successful response returns an \u003ccode\u003eOperation\u003c/code\u003e instance, and this action requires the \u003ccode\u003eprivilegedaccessmanager.grants.revoke\u003c/code\u003e IAM permission and the \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e OAuth scope.\u003c/p\u003e\n"]]],[],null,[]]