> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cognee.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Remove User From Tenant Endpoint

> Remove a user from a tenant.

The tenant owner or any user with ``has_user_management_permission`` in the
tenant (e.g. users in the Admin role) can remove users from the tenant. The
tenant owner cannot be removed from their own tenant. This removes the user
from all roles in the tenant and revokes their permissions on datasets
belonging to the tenant. Data owned by the removed user (e.g. datasets they
created) remains in the tenant.

## Path Parameters
- **tenant_id** (UUID): The UUID of the tenant
- **user_id** (UUID): The UUID of the user to remove from the tenant

## Response
Returns a success message indicating the user was removed from the tenant.

## Error Codes
- **400 Bad Request**: Attempt to remove the tenant owner from their own tenant
- **403 Forbidden**: Requester is not the tenant owner and does not have
  ``has_user_management_permission`` (e.g. Admin role) in the tenant
- **404 Not Found**: Tenant not found, user not found, or user not in tenant
- **500 Internal Server Error**: Error removing user from tenant



## OpenAPI

````yaml /cognee_openapi_spec.json delete /api/v1/permissions/tenants/{tenant_id}/users/{user_id}
openapi: 3.1.0
info:
  title: Cognee API
  description: Cognee API with Bearer token and Cookie auth
  version: 1.0.0
servers:
  - url: https://api.cognee.ai
    description: Production server (full functionality)
  - url: http://localhost:8000
    description: Local development server (requires local setup)
security:
  - BearerAuth: []
  - ApiKeyAuth: []
tags:
  - name: activity
    description: ''
  - name: add
    description: Data ingestion endpoints for adding text, files, and structured data.
  - name: auth
    description: >-
      Authentication endpoints for user registration, login, and token
      management.
  - name: checks
    description: ''
  - name: cognify
    description: >-
      Knowledge processing endpoints to transform raw data into knowledge
      graphs.
  - name: configuration
    description: ''
  - name: datasets
    description: Dataset management endpoints for listing, creating, and deleting datasets.
  - name: delete
    description: Data deletion endpoints (deprecated — use datasets endpoints instead).
  - name: forget
    description: ''
  - name: health
    description: ''
  - name: improve
    description: ''
  - name: llm
    description: ''
  - name: memify
    description: ''
  - name: notebooks
    description: ''
  - name: ontologies
    description: ''
  - name: permissions
    description: Permission management for multi-user access control.
  - name: recall
    description: ''
  - name: remember
    description: ''
  - name: responses
    description: Response generation endpoints using the knowledge graph.
  - name: search
    description: Search endpoints for querying the knowledge graph.
  - name: sessions
    description: ''
  - name: settings
    description: Configuration endpoints for managing Cognee settings.
  - name: sync
    description: ''
  - name: update
    description: ''
  - name: users
    description: User management endpoints.
  - name: visualize
    description: Graph visualization endpoints.
paths:
  /api/v1/permissions/tenants/{tenant_id}/users/{user_id}:
    delete:
      tags:
        - permissions
      summary: Remove User From Tenant Endpoint
      description: >-
        Remove a user from a tenant.


        The tenant owner or any user with ``has_user_management_permission`` in
        the

        tenant (e.g. users in the Admin role) can remove users from the tenant.
        The

        tenant owner cannot be removed from their own tenant. This removes the
        user

        from all roles in the tenant and revokes their permissions on datasets

        belonging to the tenant. Data owned by the removed user (e.g. datasets
        they

        created) remains in the tenant.


        ## Path Parameters

        - **tenant_id** (UUID): The UUID of the tenant

        - **user_id** (UUID): The UUID of the user to remove from the tenant


        ## Response

        Returns a success message indicating the user was removed from the
        tenant.


        ## Error Codes

        - **400 Bad Request**: Attempt to remove the tenant owner from their own
        tenant

        - **403 Forbidden**: Requester is not the tenant owner and does not have
          ``has_user_management_permission`` (e.g. Admin role) in the tenant
        - **404 Not Found**: Tenant not found, user not found, or user not in
        tenant

        - **500 Internal Server Error**: Error removing user from tenant
      operationId: >-
        remove_user_from_tenant_endpoint_api_v1_permissions_tenants__tenant_id__users__user_id__delete
      parameters:
        - name: tenant_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
            title: Tenant Id
        - name: user_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
            title: User Id
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
        - BearerAuth: []
        - ApiKeyAuth: []
components:
  schemas:
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-Api-Key

````