Behavior: Revokes the specified user's access to the given content. Specify the user by UserId or Emails. The user's active sessions for this content are terminated. If the user has no remaining content access, their account may be deleted (if still pending invitation) or expired (if active).
Authorization: Requires a valid Bearer token (class-level [Authorize]). Caller must have permissions on the specified ContentId.
Side Effects: Revokes content access permissions. Terminates related user sessions. May delete the user account if they have no remaining content access and their invitation was still pending. May expire the user account if they have no remaining content access.
Error Scenarios: Returns 400 if the request is null or neither UserId nor Emails are provided. Throws if the caller lacks permissions on the ContentId.
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
200The user's content security was successfully removed.
401The caller is not authenticated.
