unassign-customer-group-user
dci unassign-customer-group-user
Unassigns a user from a customer group owned by the authenticated tenant. Requires the UsersManager permission.
The user keeps their account and role; only the customer-group scope is removed. A group must
have no assigned users before dci delete-customer-group can delete it. Requires the
users-manager permission.
Examples
# Preview the removal without sending a request.
dci unassign-customer-group-user <customer-group-id> <user-id> --dry-run
# Remove a user from a customer group without an interactive prompt, for scripts.
dci unassign-customer-group-user <customer-group-id> <user-id> --yes
Output
On success, this command produces no response data.
Errors
On failure, dci prints a single error message — with a hint when one is available — and exits with a typed code your scripts can branch on. See Errors and exit codes for the full contract.
HTTP status to exit code mapping
| HTTP status | Exit code | Error code | Meaning |
|---|---|---|---|
| 400 | 30 | VALIDATION_ERROR | The arguments or request body were rejected. Review the command's flags and payload. |
| 401 | 10 | AUTHENTICATION_FAILED | Not signed in, or the API token is invalid. Run dci login or check DCI_API_KEY. |
| 403 | 11 | PERMISSION_DENIED | The DoiT user or the active customer context does not have access. |
| 404 | 20 | RESOURCE_NOT_FOUND | The requested resource does not exist. Check the identifier argument. |
| 429 | 50 | RATE_LIMITED | Too many requests. Retryable — the CLI reports the server-provided delay. |
| 500, 503 | 40 | API_SERVER_ERROR | The API failed to process the request. Retryable; contact DoiT support if it persists. |
Related
- assign-customer-group-user — Assign a user to a customer group
- delete-customer-group — Delete a customer group
- list-customer-groups — List customer groups
- list-users — List users
- API reference: DELETE /rbac/v1/customer-groups/{customerGroupId}/users/{userId}
Aliases: unassigncustomergroupuser