Users (RBAC)
Delete User
DELETE
Delete User
Revoke a user. Erases their wrapped DEK(s) for this index — even a captured
Verify revocation:
cdbk_… token becomes useless on the next request. Cryptographic revocation, no propagation lag.
See Multi-Tenancy & RBAC for the full operator playbook.
Authentication
Required — root API key in theX-API-Key header:
Path Parameters
Headers
GET/DELETE on this resource have no request body, so the index key travels in the X-Index-Key header. The sibling POST /v1/indexes/{index_name}/users endpoint takes the same key as an index_key field in its JSON body.Response
204 No Content on success — body is empty.
Exceptions
400:user_idis not valid hex.401: Authentication failed (invalid root API key).403: RBAC is not enabled, or the caller is not using the root key.404: Index or user not found.500: Internal server error.