A user has left your organization. You need to ensure they can no longer access any Aritma resources.
Approach: Find all their policies and delete them. If they are in any groups, remove them.
- An access token with IAM admin permissions
- The subject ID of the user whose access you want to revoke
Cannot find OpenAPI operation by operationId or pointer
Filter by subject using the user's subject ID. Repeat with pagination if the response includes a cursor.
Cannot find OpenAPI operation by operationId or pointer
Repeat for each policy returned in step 1.
Cannot find OpenAPI operation by operationId or pointer
This returns all groups the user currently belongs to. Group membership may grant additional permissions through group-level policies.
Cannot find OpenAPI operation by operationId or pointer
Repeat for each group returned in step 3.
Access is revoked immediately — there is no delay or cache TTL to wait for.
- To delete the user subject entirely, see User Management
- To manage groups and their members, see Groups
- To review remaining policies across your tenant, see Policies