action conjur_remove_member_from_role {
  label: "Deletes an existing role membership"
  description: "Deletes an existing role membership.\n\nIf a role A is granted to a role B, then role A is said to have role B as a member.\nThese relationships are described in the “members” portion of the returned JSON.\n\nWhen the `members` query parameter is provided, you will get the members of a role.\n\nWhen the `members` and `member` query parameters are provided, the role specfified by\n`member` will be removed as a member of the role specified in the endpoint URI.\n"
  provider: conjur
  method: DELETE
  path: "/roles/{account}/{kind}/{identifier}"
  encoding: json
  input: {
    type: "object"
    properties: {
      account: {
        type: "string"
        description: "Conjur account name"
      }
      identifier: {
        type: "string"
        description: "Resource identifier. Requires to be encoded when in path.\n\n##### Examples:\n\n- `myapp-01` -> `myapp-01` (unchanged)\n- `alice@devops` -> `alice%40devops`\n- `prod/aws/db-password` -> `prod%2Faws%2Fdb-password`\n- `research+development` -> `research%2Bdevelopment`\n- `sales&marketing` -> `sales%26marketing`\n"
      }
      kind: {
        type: "string"
      }
      member: {
        type: "string"
        description: "##### Kinds of roles:\n\n- User: one unique wonderful human\n- Host: a single logical machine (in the broad sense, not just physical)\n- Layer: a collection of hosts that have the same privileges\n- Group: a collection of users and groups that have the same privileges\n- Policy: a role which owns of a set of related object\n\nAny identifier included in the URL must be URL-encoded to be recognized by the Conjur API.\n\n##### Resource Identifiers:\n\n- `myapp-01` -> `myapp-01` (unchanged)\n- `alice@devops` -> `alice%40devops`\n- `prod/aws/db-password` -> `prod%2Faws%2Fdb-password`\n- `research+development` -> `research%2Bdevelopment`\n- `sales&marketing` -> `sales%26marketing`\n"
      }
      members: {
        type: "string"
      }
    }
    required: ["account", "identifier", "kind", "member", "members"]
    additionalProperties: false
  }
  output: {
    type: "object"
    additionalProperties: true
  }
}