> ## Documentation Index > Fetch the complete documentation index at: https://docs.cognee.ai/llms.txt > Use this file to discover all available pages before exploring further. # Remove User From Tenant Endpoint > Remove a user from a tenant. The tenant owner or any user with ``has_user_management_permission`` in the tenant (e.g. users in the Admin role) can remove users from the tenant. The tenant owner cannot be removed from their own tenant. This removes the user from all roles in the tenant and revokes their permissions on datasets belonging to the tenant. Data owned by the removed user (e.g. datasets they created) remains in the tenant. ## Path Parameters - **tenant_id** (UUID): The UUID of the tenant - **user_id** (UUID): The UUID of the user to remove from the tenant ## Response Returns a success message indicating the user was removed from the tenant. ## Error Codes - **400 Bad Request**: Attempt to remove the tenant owner from their own tenant - **403 Forbidden**: Requester is not the tenant owner and does not have ``has_user_management_permission`` (e.g. Admin role) in the tenant - **404 Not Found**: Tenant not found, user not found, or user not in tenant - **500 Internal Server Error**: Error removing user from tenant ## OpenAPI ````yaml /cognee_openapi_spec.json delete /api/v1/permissions/tenants/{tenant_id}/users/{user_id} openapi: 3.1.0 info: title: Cognee API description: Cognee API with Bearer token and Cookie auth version: 1.0.0 servers: - url: https://{tenant}.aws.cognee.ai description: 'Cognee Cloud: your tenant pod, named in the platform.cognee.ai dashboard' variables: tenant: default: your-tenant description: Your tenant name, shown in the Cognee Cloud dashboard - url: http://localhost:8000 description: 'Self-hosted: a locally running cognee server' security: - BearerAuth: [] - ApiKeyAuth: [] tags: - name: activity description: >- Activity endpoints for inspecting pipeline runs, traced spans, tenant users, agents, and dataset exports. - name: add description: Data ingestion endpoints for adding text, files, and structured data. - name: agent connections description: >- Endpoints for registering, unregistering, and inspecting agent connections to the instance. - name: agent management description: Endpoints for creating, listing, retrieving, and deleting agents. - name: auth description: >- Authentication endpoints for user registration, login, and token management. - name: checks description: >- Diagnostic endpoint for validating a Cognee Cloud API key supplied in the X-Api-Key header. - name: cognify description: >- Knowledge processing endpoints to transform raw data into knowledge graphs. - name: configuration description: >- Endpoints for storing, retrieving, and listing a user's saved configurations. - name: datasets description: Dataset management endpoints for listing, creating, and deleting datasets. - name: delete description: Data deletion endpoints (deprecated — use datasets endpoints instead). - name: forget description: Endpoint for removing data from the knowledge graph. - name: health description: Liveness, readiness, and component health checks. - name: improve description: Endpoint for enriching and improving an existing knowledge graph. - name: integrations description: >- Endpoints for connecting, provisioning, and disconnecting OAuth providers and plugins. - name: llm description: >- LLM-backed endpoints for inferring graph schemas and generating custom extraction prompts. - name: memify description: >- Endpoint for running enrichment pipelines over existing graphs or supplied data. - name: ontologies description: >- Endpoints for uploading, listing, and deleting ontology files used during cognify. - name: permissions description: Permission management for multi-user access control. - name: recall description: >- Endpoints for querying the knowledge graph and reviewing past recall history. - name: remember description: >- Endpoints for ingesting data into the knowledge graph and storing session memory entries. - name: responses description: Response generation endpoints using the knowledge graph. - name: schema description: >- Schema inspection endpoints for a dataset's derived schema inventory and the caller-wide memory provenance graph. - name: search description: Search endpoints for querying the knowledge graph. - name: sessions description: >- Endpoints for listing sessions and reporting usage, cost, and token statistics. - name: settings description: Configuration endpoints for managing Cognee settings. - name: skills description: >- Skill management endpoints for ingesting, listing, retrieving, and deleting dataset skills, plus read-only retrieval of improvement proposals. - name: slack description: >- Endpoints for listing workspace channels, setting channel allowlists, and linking Slack accounts. - name: sync description: Endpoints for syncing local data to Cognee Cloud and checking sync status. - name: update description: Endpoint for updating existing data in a dataset. - name: users description: User management endpoints. - name: validate description: >- Diagnostic endpoint for checking consistency between a dataset's graph and vector stores. - name: visualize description: Graph visualization endpoints. paths: /api/v1/permissions/tenants/{tenant_id}/users/{user_id}: delete: tags: - permissions summary: Remove User From Tenant Endpoint description: >- Remove a user from a tenant. The tenant owner or any user with ``has_user_management_permission`` in the tenant (e.g. users in the Admin role) can remove users from the tenant. The tenant owner cannot be removed from their own tenant. This removes the user from all roles in the tenant and revokes their permissions on datasets belonging to the tenant. Data owned by the removed user (e.g. datasets they created) remains in the tenant. ## Path Parameters - **tenant_id** (UUID): The UUID of the tenant - **user_id** (UUID): The UUID of the user to remove from the tenant ## Response Returns a success message indicating the user was removed from the tenant. ## Error Codes - **400 Bad Request**: Attempt to remove the tenant owner from their own tenant - **403 Forbidden**: Requester is not the tenant owner and does not have ``has_user_management_permission`` (e.g. Admin role) in the tenant - **404 Not Found**: Tenant not found, user not found, or user not in tenant - **500 Internal Server Error**: Error removing user from tenant operationId: >- remove_user_from_tenant_endpoint_api_v1_permissions_tenants__tenant_id__users__user_id__delete parameters: - name: tenant_id in: path required: true schema: type: string format: uuid title: Tenant Id - name: user_id in: path required: true schema: type: string format: uuid title: User Id responses: '200': description: Successful Response content: application/json: schema: {} '422': description: Validation Error content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' security: - BearerAuth: [] - ApiKeyAuth: [] components: schemas: HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' type: array title: Detail type: object title: HTTPValidationError ValidationError: properties: loc: items: anyOf: - type: string - type: integer type: array title: Location msg: type: string title: Message type: type: string title: Error Type input: title: Input ctx: type: object title: Context type: object required: - loc - msg - type title: ValidationError securitySchemes: BearerAuth: type: http scheme: bearer bearerFormat: JWT ApiKeyAuth: type: apiKey in: header name: X-Api-Key ````