Skip to main content

MGCLatticeDbAccessService.revokeAccess

Revokes the calling administrator's own active JIT grant, if any: drops the database user and firewall rule and marks the audit row Revoked. A grant whose revoke fails stays Active with its expiry moved to now, so the expiry sweep retries it. Idempotent and safe to call when no grant exists.

  • HTTP method: POST
  • Route: /api/services/MGCLatticeDbAccessServiceGroup/MGCLatticeDbAccessService/revokeAccess
  • Service class: MGCLatticeDbAccessService

Parameters​

NameTypeOptionalDescription
_requestMGCLatticeDbAccessRevokeRequestContractNoThe request; its CorrelationId is echoed.

Returns​

MGCLatticeDbAccessResponseContract

An MGCLatticeDbAccessResponseContract indicating the outcome (never carries a password).

Security​

  • Requires privilege MGCLatticeDbAccessAdminPrivilege