Remove role inheritance¶

Remove the inheritance relationship between a specified role and a direct parent role. The role no longer inherits the parent role’s permissions through this relationship.

HTTP
DELETE $CLOUDSIGMA_API_BASE/workspaces/{workspace_id}/iam/roles/{role_id}/parents/{parent_role_id}

Before you call this API¶

Configure the regional API endpoint and authentication, and select the target workspace.

First select the roles to identify the child and parent roles. Then view role inheritance to confirm that they currently have a direct inheritance relationship.

Request parameters¶

Input examples

Shell
curl -X DELETE "$CLOUDSIGMA_API_BASE/workspaces/$WORKSPACE_ID/iam/roles/$ROLE_ID/parents/$PARENT_ROLE_ID" \
  -H "X-API-Key: $CLOUDSIGMA_API_KEY" \
  -H "X-Workspace-ID: $WORKSPACE_ID" \
  -H "Content-Type: application/json" \
  -d "{
    \"parent_role_id\": \"$PARENT_ROLE_ID\",
    \"expected_child_lifecycle_version\": 1,
    \"expected_parent_lifecycle_version\": 1,
    \"expected_role_graph_version\": \"graph-v1\",
    \"request_id\": \"req-001\"
  }"

Parameter description

Path parameters

Parameter	Type	Required	Description
workspace_id	string	Yes	Target workspace ID.
role_id	string	Yes	Child role whose inheritance is removed.
parent_role_id	string	Yes	Parent role to remove.

Request body

Parameter	Type	Required	Description
parent_role_id	string	Yes	Parent role ID. Must match `parent_role_id` in the path.
expected_child_lifecycle_version	integer	Yes	Current child role lifecycle version. Must be greater than `0`.
expected_parent_lifecycle_version	integer	Yes	Current parent role lifecycle version. Must be greater than `0`.
expected_role_graph_version	string	Yes	Current role graph version.
request_id	string	Yes	Caller-generated idempotency request ID.

Successful response¶

On success, the inheritance has been removed and the API returns the new role graph version. Replaying the same request ID with the same content does not remove it again.

Response example

JSON
{"code":"OK","msg":"OK","data":{"child_role_id":"role-001","parent_role_id":"role-parent","role_graph_version":"graph-v2","idempotent_replay":false}}

Field details

Field	Type	Description
code	string	`OK` on success.
msg	string	`OK` on success.
data.child_role_id	string	Child role ID.
data.parent_role_id	string	Parent role ID that was removed.
data.role_graph_version	string	Updated role graph version.
data.idempotent_replay	boolean	Whether this is an idempotent replay of the same request.

Error response¶

Response example

JSON
{"code":"ErrParamInvalid","msg":"请求参数无效","data":null}

Field details

Field	Type	Description
code	string	Error code.
msg	string	Error message.
data	null	—

Last updated on Sep 15, 2026