Remove an authorized user from the caller’s account by setting their role assignment to INACTIVE.
The target account is always resolved from the caller’s credentials — Bearer tokens use
the token’s accountId; Basic (API key) callers use the application’s configured operator account.
Requires the MANAGE_SUBUSERS scope. Supports both Bearer and Basic auth.
The account owner (OWNER role) cannot be removed.
Arguments
The authorized user ID (UAC role assignment ID) to deactivate. Obtain this
from the authorizedUsers query or the addAuthorizedUser mutation response.
Returns
RemoveAuthorizedUserResponse — Response returned from the removeAuthorizedUser mutation.