DELETE/api/apps/{app_id}/service-account/organization-membershipAuthenticated

Remove an app's service account from its organization

Takes the client application's service account out of the organization that owns the app: organization membership checks (including resource servers' role lookups) no longer find it. Access tokens already issued to it stay valid until they expire. Requires management access; hardcoded apps cannot be configured.

operationId delete_api_apps_app_id_service_account_organization_membershipClient applications

Authentication & permissionsAuthenticated

Any authenticated user

Accepted credentials: Auth server session (refresh token cookie)cookie "refresh_token_<auth_server_app_id>"
Access token (cookie)cookie "access_token_<auth_server_app_id>"
Access token (Bearer)Authorization: Bearer <JWT>
Who may call: Any authenticated user

Path parameters

Name	Type	Description
app_id*	string	Client application id

Responses

application/json

AppServiceAccountOrganizationMembershipResponse

Property	Type	Description
success*	true
message*	string
organization_membership*	AppServiceAccountOrganizationMembership
available*	boolean	Whether the app is owned by an organization. Only the service account of an organization-owned app can be a member of an organization (its owner)
organization_id*	string \| null \| null	The organization that owns the app, which the service account joins; null when the app is not organization-owned
role*	"member" \| "owner" \| null \| null	The service account's role in that organization, as reported to resource servers' organization membership checks; null when it is not a member

JSONExample

"success"true

"message""string"

"organization_membership"

"available"true

"organization_id""acme"

"role""member"

Example request

bashcurl

curl -X DELETE 'https://auth.schemavaults.com/api/apps/<app_id>/service-account/organization-membership' \
  -b 'refresh_token_<auth_server_app_id>=<value>'

Other methods on this path

PUTMake an app's service account a member of its organization

Authentication & permissionsAuthenticated

Path parameters

Responses

200The service account is no longer a member of the organization

400The request failed validation (issues lists the offending fields) or was refused by the handler

401No valid session cookie, access token cookie or bearer access token was presented, or the token was revoked

403The app is hardcoded, or the caller may not manage it (platform administrators, owners / admins of the owning organization, or the owning user only)

404No such app, or the app's service account is not a member of an organization

500Failed to load the app or verify authorization

Example request

Other methods on this path