Skip to main content
Remove a role from your workspace. This also removes the role from all assigned API keys. Important: This operation cannot be undone and immediately affects all API keys that had this role assigned. All keys with this role will lose the associated permissions, and access to resources protected by this role’s permissions will be denied. Required permissions:
  • rbac.*.delete_role
See the API reference for the full HTTP endpoint documentation.

​
Usage

unkey api permissions delete-role [flags]

​
Flags

​
--role
string
required
The role ID or name to permanently delete. Must either be a valid role ID that begins with role_ or a role name that exists within your workspace. Must be 3-255 characters and contain only letters, numbers, underscores, colons, hyphens, dots, and asterisks.

​
Global Flags

FlagTypeDescription
--root-keystringOverride root key ($UNKEY_ROOT_KEY)
--api-urlstringOverride API base URL (default: https://api.unkey.com)
--configstringPath to config file (default: ~/.unkey/config.toml)
--outputstringOutput format — use json for raw JSON

​
Examples

unkey api permissions delete-role --role=role_dns_manager

​
Output

Default output shows the request ID with latency: 
req_2c9a0jf23l4k567 (took 38ms)

{}
With --output=json, the full response envelope is returned: 
{
  "meta": {
    "requestId": "req_2c9a0jf23l4k567"
  },
  "data": {}
}
Last modified on March 26, 2026