Remove Permission

curl -X DELETE https://api.companyflow.com/roles/550e8400-e29b-41d4-a716-446655440000/permissions/770e8400-e29b-41d4-a716-446655440000 \
  -H "Authorization: Bearer YOUR_TOKEN"

const response = await fetch(
  'https://api.companyflow.com/roles/550e8400-e29b-41d4-a716-446655440000/permissions/770e8400-e29b-41d4-a716-446655440000',
  {
    method: 'DELETE',
    headers: {
      'Authorization': 'Bearer YOUR_TOKEN'
    }
  }
);

const data = await response.json();

import requests

url = "https://api.companyflow.com/roles/550e8400-e29b-41d4-a716-446655440000/permissions/770e8400-e29b-41d4-a716-446655440000"
headers = {
    "Authorization": "Bearer YOUR_TOKEN"
}

response = requests.delete(url, headers=headers)
data = response.json()

{
  "success": true,
  "data": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "company_id": "123e4567-e89b-12d3-a456-426614174000",
    "name": "Department Manager",
    "description": "Can manage specific departments",
    "is_system_role": false,
    "permissions_cache": [
      "employees:read",
      "departments:read"
    ],
    "created_at": "2024-01-15T10:30:00Z",
    "updated_at": "2025-03-03T14:25:00Z"
  }
}

{
  "success": false,
  "message": "invalid role_id"
}

{
  "success": false,
  "message": "unauthorized"
}

{
  "success": false,
  "message": "internal server error"
}

DELETE

roles

{role_id}

permissions

{permission_id}

curl -X DELETE https://api.companyflow.com/roles/550e8400-e29b-41d4-a716-446655440000/permissions/770e8400-e29b-41d4-a716-446655440000 \
  -H "Authorization: Bearer YOUR_TOKEN"

const response = await fetch(
  'https://api.companyflow.com/roles/550e8400-e29b-41d4-a716-446655440000/permissions/770e8400-e29b-41d4-a716-446655440000',
  {
    method: 'DELETE',
    headers: {
      'Authorization': 'Bearer YOUR_TOKEN'
    }
  }
);

const data = await response.json();

import requests

url = "https://api.companyflow.com/roles/550e8400-e29b-41d4-a716-446655440000/permissions/770e8400-e29b-41d4-a716-446655440000"
headers = {
    "Authorization": "Bearer YOUR_TOKEN"
}

response = requests.delete(url, headers=headers)
data = response.json()

{
  "success": true,
  "data": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "company_id": "123e4567-e89b-12d3-a456-426614174000",
    "name": "Department Manager",
    "description": "Can manage specific departments",
    "is_system_role": false,
    "permissions_cache": [
      "employees:read",
      "departments:read"
    ],
    "created_at": "2024-01-15T10:30:00Z",
    "updated_at": "2025-03-03T14:25:00Z"
  }
}

{
  "success": false,
  "message": "invalid role_id"
}

{
  "success": false,
  "message": "unauthorized"
}

{
  "success": false,
  "message": "internal server error"
}

Remove a specific permission from a role. This allows you to revoke individual permissions without affecting other permissions assigned to the role. Requires Super Admin or HR Manager permissions.

Path Parameters

string

required

The unique identifier of the role (UUID format)Example: "550e8400-e29b-41d4-a716-446655440000"

string

required

The unique identifier of the permission to remove (UUID format)Example: "770e8400-e29b-41d4-a716-446655440000"

Response

boolean

Indicates if the request was successful

object

The updated role object after permission removal

Show Role Object

string

Unique identifier for the role

string

The company this role belongs to

string

Name of the role

string

Description of the role

boolean

Whether this is a system-defined role

string[]

Array of cached permission strings (updated to reflect removal)

string

ISO 8601 timestamp of when the role was created

string

ISO 8601 timestamp of when the role was last updated

curl -X DELETE https://api.companyflow.com/roles/550e8400-e29b-41d4-a716-446655440000/permissions/770e8400-e29b-41d4-a716-446655440000 \
  -H "Authorization: Bearer YOUR_TOKEN"

const response = await fetch(
  'https://api.companyflow.com/roles/550e8400-e29b-41d4-a716-446655440000/permissions/770e8400-e29b-41d4-a716-446655440000',
  {
    method: 'DELETE',
    headers: {
      'Authorization': 'Bearer YOUR_TOKEN'
    }
  }
);

const data = await response.json();

import requests

url = "https://api.companyflow.com/roles/550e8400-e29b-41d4-a716-446655440000/permissions/770e8400-e29b-41d4-a716-446655440000"
headers = {
    "Authorization": "Bearer YOUR_TOKEN"
}

response = requests.delete(url, headers=headers)
data = response.json()

{
  "success": true,
  "data": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "company_id": "123e4567-e89b-12d3-a456-426614174000",
    "name": "Department Manager",
    "description": "Can manage specific departments",
    "is_system_role": false,
    "permissions_cache": [
      "employees:read",
      "departments:read"
    ],
    "created_at": "2024-01-15T10:30:00Z",
    "updated_at": "2025-03-03T14:25:00Z"
  }
}

{
  "success": false,
  "message": "invalid role_id"
}

{
  "success": false,
  "message": "unauthorized"
}

{
  "success": false,
  "message": "internal server error"
}

Authorization

This endpoint requires authentication with a Bearer token and one of the following roles:

Super Admin
HR Manager

Removing a permission will immediately affect all users assigned to this role. Ensure this action is intentional before proceeding.

Add Permission - Add a single permission to a role
List Permissions - View all permissions for a role
Assign Permissions - Replace all permissions for a role

Authentication

Companies

Employees

Departments

Designations

Levels

Roles & Permissions

Leave Types

Leave Requests

Leave Balances

Memos

Approvals

Path Parameters

Response

Authorization

​Path Parameters

​Response

​Authorization

​Related endpoints

Path Parameters

Response

Authorization

Related endpoints