> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kodelabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Remove app access from a user

> Removes a user's access to an app. The user stays in your organization.

> [!WARNING]
>
> The user loses access to the app. Assign the app again to restore it.

> [!NOTE]
>
> The user must have the app. If not, the request fails with `400` and the message "App not found", so a second call for the same user and app returns `400`. Wait until `assignmentStatus` is `SUCCEEDED` or `FAILED` before you remove access that is still being set up. You can remove an assignment that is `PENDING`.


## OpenAPI

````yaml /openapi/kode-api.yaml delete /api/v1/users/{userId}/apps/{appId}
openapi: 3.1.0
info:
  title: KODE API
  version: 1.0.0
  summary: Programmatic access to KODE OS resources and operations.
  description: >
    Use the KODE API to work with buildings, data sources, connectors, devices,
    points, virtual devices,

    timeseries data, schedules, the ontology, templating, mass writes, spaces,
    space assignments, tenants, meters, users, actions,

    and AssetOps work orders.
  license:
    name: Proprietary
    identifier: LicenseRef-Proprietary
servers:
  - url: https://api.kodelabs.com/kodeos
    description: KODE API
security:
  - bearerAuth: []
tags:
  - name: Authentication
    description: OAuth 2.0 discovery, token, and revocation endpoints.
  - name: Buildings
    description: Buildings and their areas.
  - name: Data sources
    description: Data sources connected to a building.
  - name: Devices
    description: Devices and their points.
  - name: Points
    description: Point queries and point writes.
  - name: Timeseries
    description: Current and historical point values.
  - name: Actions
    description: Actions exposed by building data sources.
  - name: Work orders
    description: AssetOps work orders, lookups, comments, and attachments.
  - name: Connectors
    description: KODE API connectors and the devices and points ingested through them.
  - name: Schedules
    description: Schedules discovered on building data sources.
  - name: Templating
    description: Apply ontology templates to groups of points.
  - name: Virtual devices
    description: Virtual devices that group points from other devices.
  - name: Ontology
    description: Canonical types, fields, units, and connections of the KODE ontology.
  - name: Users
    description: Users of the organization and their app access.
  - name: Mass write
    description: Write values to many points across buildings, and follow each run.
  - name: Spaces
    description: Levels and space units of a building, and the meters located in them.
  - name: Space assignments
    description: Assign tenants to leasable spaces of a building for a period.
  - name: Tenants
    description: Tenants of a building, the people or companies that lease its spaces.
  - name: Meters
    description: >-
      Meters of a building, their space assignments, parent and child links, and
      readings.
paths:
  /api/v1/users/{userId}/apps/{appId}:
    delete:
      tags:
        - Users
      summary: Remove app access from a user
      description: Removes a user's access to an app. The user stays in your organization.
      operationId: unassignUserApp
      parameters:
        - name: appId
          in: path
          required: true
          schema:
            type: string
          description: Identifier of the app. Only `bms` is supported.
        - name: userId
          in: path
          required: true
          schema:
            type: string
          description: Identifier of the user.
      responses:
        '204':
          description: The app access was removed. The response has no body.
        '400':
          description: >-
            The `appId` is not `bms`, or the user does not have the app ("App
            not found").
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          description: >-
            The service account is not allowed to remove access for the user's
            current role.
        '404':
          description: No user with this `userId` exists in your organization.
        '429':
          $ref: '#/components/responses/TooManyRequests'
components:
  responses:
    Unauthorized:
      description: The access token is missing, invalid, or expired. Request a new token.
    TooManyRequests:
      description: >-
        A rate-limit window is exhausted. Wait, then retry with increasing
        delays.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >
        Paste an access token from [Create an access
        token](/products/kode-api/api-reference/authentication/create-an-access-token).
        Tokens expire, so request a new one if you receive `401`.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.