Delete a role
/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environments/{envSlug}/roles/{id}Deletes a custom role by id; dependent role-assignment and role-permission rows are removed by database cascade. System roles are protected and return 403, and a missing role returns 404. Supports optimistic concurrency via the If-Match header (409 on a version mismatch). Responds 204 No Content and requires the rbac.manage_roles permission.
Authentication
AuthorizationJWT access token. Never send alongside X-API-Key: a request carrying both is refused.
env_roles.manageDeveloper ConsoleCreate, edit, and delete roles and set their permissions. Granted through an administrator role in the Admin Workspace; a valid token without it is refused with 403.
Path Parameters
idstring Required Headers
if-matchrequiredIf-MatchOptimistic-lock version of the resource. Send the `version` field returned on read; the server rejects with 409 if the row has changed since.
Responses
Role deleted
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
Errors
When the request can't be completed, the response body includes a stable error code you can branch on.
account.capability_requiredForbiddenThe signed-in user's administrator roles do not grant the capability this endpoint requires.
Ask an account administrator to grant a role carrying the capability named in the Authentication section, then retry.
curl -X DELETE "https://auth.canopy-io.com/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environments/{envSlug}/roles/value" \ -H "if-match: value" \ -H "If-Match: value" \ -H "Authorization: Bearer $CANOPY_TOKEN"
HTTP/1.1 204 Role deleted (empty body)
Tell us how we can improve this guide.