identity.end-user.unbind-actor

Unbind a Staff actor from its end-user seat in an identity app (human admin only)

Unbind a Staff actor from its end-user seat in an identity app (human org admin only).

Inputs:

• organization_uuid: owning organization — tenant check (required)
• identity_app_uuid: the app (required)
• staff_actor_uuid: the bound Staff actor (required)
• reason: why (required, audited)

Outputs (terminal state_data):

• end_user_uuid, staff_actor_uuid, identity_app_uuid, status ("disabled"), seated (false), seat_released, memberships_removed, changed

Refusals (failure_reason): identity_admin_requires_human (code HUMAN_PRINCIPAL_REQUIRED), ACTOR_END_USER_NOT_BOUND.

Overview

Property	Value
Workflow type	Atomic
Library	App-identity
Version	1.0

Input Schema

Field	Type	Required	Default	Description
actor	string	No	—	—
organization_uuid	uuid	Yes	—	—
identity_app_uuid	uuid	Yes	—	—
staff_actor_uuid	string	Yes	—	—
reason	string	Yes	—	—

Output Schema

Field	Type	Required	Default	Description
end_user_uuid	uuid	No	—	—
staff_actor_uuid	string	No	—	—
identity_app_uuid	uuid	No	—	—
status	string	No	—	—
seated	boolean	No	—	—
seat_released	boolean	No	—	—
memberships_removed	integer	No	—	—
changed	boolean	No	—	—
failure_reason	string	No	—	—
failure_type	string	No	—	—
failed_action	string	No	—	—
failed_at_state	string	No	—	—
reason	string	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "identity.end-user.unbind-actor",
  "initial_data": {
    "organization_uuid": "value",
    "identity_app_uuid": "value",
    "staff_actor_uuid": "value",
    "reason": "value"
  }
}