> ## Documentation Index
> Fetch the complete documentation index at: https://docs.activeviam.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Remove book access from a user.

> Use an administrator account to revoke the stated access from another active user in the same organisation.
Self-targeting is rejected. The named book must be available to the caller, and the change completes before
returning.



## OpenAPI

````yaml /risk-and-pricing/atoti-risk-services/apis-endpoints/openapi/openapi.mintlify.json post /api/BookAccess/Delete
openapi: 3.0.4
info:
  title: Derivitec Api 1.0
  version: '1.0'
servers:
  - url: https://api.riskportal.activeviam.com
security:
  - oauth2: []
  - apikey: []
tags:
  - name: AdminUser
  - name: AtotiReport
  - name: AtotiSession
  - name: BloombergOAuth
  - name: Bond
  - name: BondYieldCurvePage
  - name: BookAccess
  - name: Books
  - name: Commodity
  - name: Counterparties
  - name: Currencies
  - name: Equity
  - name: EquityDividend
  - name: EquityPage
  - name: FeatureFlag
  - name: Fx
  - name: FxPage
  - name: GroupAccess
  - name: Home
  - name: LegacyPosition
  - name: MarketData
  - name: MarketDataProvider
  - name: MarketDataProviderAccess
  - name: Meta
  - name: Notification
  - name: Organisation
  - name: PnLReport
  - name: PortfolioAccess
  - name: Portfolios
  - name: Position
  - name: PositionFilter
  - name: PricingEnvironment
  - name: PricingEnvironmentAccess
  - name: RateAsset
  - name: RateAssetPage
  - name: Report
  - name: ReportDefinition
  - name: ReportHistoryLauncherQuery
  - name: ReportLauncher
  - name: ReportQuery
  - name: ReportQueryViewUser
  - name: ReportRestriction
  - name: ReportView
  - name: RiskReport
  - name: Tradable
  - name: TradeBooking
  - name: User
  - name: VarReport
  - name: VarReportQuery
  - name: YieldCurvePage
paths:
  /api/BookAccess/Delete:
    post:
      tags:
        - BookAccess
      summary: Remove book access from a user.
      description: >-
        Use an administrator account to revoke the stated access from another
        active user in the same organisation.

        Self-targeting is rejected. The named book must be available to the
        caller, and the change completes before

        returning.
      operationId: Delete
      requestBody:
        description: >-
          Required `ProxyUserEmail` for another active same-organisation user,
          `BookName`, and `AccessType` to remove: `View`, `Edit`, `Full`, or
          `Owner`.
        content:
          application/json-patch+json:
            schema:
              $ref: '#/components/schemas/ApiProxyUserBookAccessDeleteRequest'
          application/json:
            schema:
              $ref: '#/components/schemas/ApiProxyUserBookAccessDeleteRequest'
          text/json:
            schema:
              $ref: '#/components/schemas/ApiProxyUserBookAccessDeleteRequest'
          application/*+json:
            schema:
              $ref: '#/components/schemas/ApiProxyUserBookAccessDeleteRequest'
      responses:
        '200':
          description: >-
            Returns whether access was removed and target-user, book, or
            permission errors in the normal response envelope.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiProxyUserBookAccessDeleteResponse'
        '400':
          description: BadRequest
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
      security:
        - oauth2: []
        - apikey: []
components:
  schemas:
    ApiProxyUserBookAccessDeleteRequest:
      required:
        - $type
      type: object
      properties:
        proxy_user_email:
          type: string
          description: >-
            Email address of the organisation user whose book access is being
            changed.
          nullable: true
          example: user@example.com
        book_name:
          type: string
          description: >-
            Organisation-scoped name of the book to select. The value must not
            be null or empty.
          nullable: true
          example: Example book
        access_type:
          enum:
            - view
            - edit
            - full
            - owner
          type: string
          description: Existing book access level to remove from the selected user.
        $type:
          type: string
          enum:
            - >-
              Derivitec.Web.Core.BookAccess.ApiProxyUserBookAccessDeleteRequest,
              Derivitec.Web.Core
      additionalProperties: false
      description: Target user, book, and access level selected for removal.
    ApiProxyUserBookAccessDeleteResponse:
      required:
        - $type
      type: object
      additionalProperties: false
      description: Outcome of removing a user's stated book access.
      properties:
        is_success:
          type: boolean
          description: >-
            Whether the operation completed successfully. The default is `true`;
            error outcomes set it to `false`.
          example: true
        error_messages:
          type: array
          items:
            type: string
          description: >-
            Messages explaining operation-level failures. The collection is
            empty by default.
          nullable: true
        $type:
          type: string
          enum:
            - >-
              Derivitec.Web.Core.BookAccess.ApiProxyUserBookAccessDeleteResponse,
              Derivitec.Web.Core
  securitySchemes:
    oauth2:
      type: oauth2
      description: >-
        OAuth2 access-token requested from AWS Cognito and provided as a Auth
        Bearer header
      flows:
        implicit:
          authorizationUrl: https://auth.riskportal.derivitec.com/oauth2/authorize
          scopes: {}
    apikey:
      type: apiKey
      description: API-Key requested via the site and provided as a header
      name: x-api-key
      in: header

````