Skip to content
Authrim

Revoke periodic export authorization

POST
/api/admin/replication-backups/grants/{grantId}/revoke
Code sample: Shell / cURL 
curl --request POST \
  --url https://auth.example.com/api/admin/replication-backups/grants/example/revoke \
  --header 'Authorization: Bearer <token>'

Fresh human session MFA within five minutes and backup read, manage and export permissions are required. Sensitive selections additionally require the sensitive-backup permission. Audit persistence is required before any grant mutation. Revocation is permanent and audited. Repeating revocation retains the original revocation evidence. Subsequent machine requests are rejected; encrypted downloads also recheck the grant before emitting each part. Already admitted backup work is not cancelled by this action.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Path Parameters

Section titled “Path Parameters ”
grantId
required
string
/^[A-Za-z0-9_.:-]{1,128}$/

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Operation result. Responses are not cacheable.

Media type application/json
object
grant
required
object
id
required
string
/^[A-Za-z0-9_.:-]{1,128}$/
createdBy
required
string
/^[A-Za-z0-9_.:-]{1,128}$/
createdAt
required
integer
expiresAt
required
integer
revokedAt
required
integer
nullable
scope
required
object
version
required
integer
Allowed values: 1
kind
required
string
Allowed values: tenant_backup_export
tenantId
required
string
/^[A-Za-z0-9_.:-]{1,128}$/
pairId
required
string
/^[A-Za-z0-9_.:-]{1,128}$/
sourceDeploymentId
required
string
/^[A-Za-z0-9_.:-]{1,128}$/
destinationDeploymentId
required
string
/^[A-Za-z0-9_.:-]{1,128}$/
issuer
required
string format: uri
selection
required
object
settings
required
boolean
users
required
boolean
admin
required
boolean
artifacts
required
boolean
logs
required
object
audit
required
boolean
other
required
boolean
sensitive
required
boolean
period
required
One of:
integer
Allowed values: 7 30 90
key
additional properties
key
additional properties
key
additional properties
key
additional properties
key
additional properties
Example 
{
  "grant": {
    "scope": {
      "version": 1,
      "kind": "tenant_backup_export",
      "selection": {
        "logs": {
          "period": 7
        }
      }
    }
  }
}

400

Section titled “400 ”

Request rejected; no additional capability is granted.

403

Section titled “403 ”

Request rejected; no additional capability is granted.

404

Section titled “404 ”

Request rejected; no additional capability is granted.

409

Section titled “409 ”

Request rejected; no additional capability is granted.

503

Section titled “503 ”

Request rejected; no additional capability is granted.