Method: projects.locations.entitlements.grants.revoke
grants.revoke is used to immediately revoke access for a grant. This method can be called when the grant is in a non-terminal state.
HTTP request
POST https://privilegedaccessmanager.googleapis.com/v1beta/{name=projects/*/locations/*/entitlements/*/grants/*}:revoke
The URL uses gRPC Transcoding syntax.
Path parameters
| Parameters |
name |
string
Required. Name of the grant resource which is being revoked.
|
Request body
The request body contains data with the following structure:
| JSON representation |
{
"reason": string
} |
| Fields |
reason |
string
Optional. The reason for revoking this grant.
|
Response body
If successful, the response body contains an instance of Operation.
Authorization scopes
Requires the following OAuth scope:
https://www.googleapis.com/auth/cloud-platform
For more information, see the Authentication Overview.
IAM Permissions
Requires the following IAM permission on the name resource:
privilegedaccessmanager.grants.revoke
For more information, see the IAM documentation.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-05-21 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-21 UTC."],[[["\u003cp\u003eThe \u003ccode\u003egrants.revoke\u003c/code\u003e method immediately revokes access for a grant that is in a non-terminal state.\u003c/p\u003e\n"],["\u003cp\u003eThe HTTP request to revoke a grant is a \u003ccode\u003ePOST\u003c/code\u003e request to the specified URL which follows gRPC Transcoding syntax.\u003c/p\u003e\n"],["\u003cp\u003eThe request body should include a JSON representation with an optional "reason" field, specifying the reason for revoking the grant.\u003c/p\u003e\n"],["\u003cp\u003eSuccessfully revoking a grant returns an Operation instance as a response body, and requires the OAuth scope \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eRevoking a grant requires the \u003ccode\u003eprivilegedaccessmanager.grants.revoke\u003c/code\u003e IAM permission on the targeted resource.\u003c/p\u003e\n"]]],[],null,[]]
