Disable
Disables the service principal, machine account, or token, so anything using its credentials stops being able to authenticate. Check the identity’s impersonation blast-radius first: disabling one that other accounts depend on will break them. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Send an Idempotency-Key so a retried request returns the original job instead of submitting a second one. Requires the https://devx.{environment}.oleria.io/write scope.
Authorizations
OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as Authorization: Bearer <token>.
Headers
Unique key for this request, generated by the caller. Resending the same request with the same key returns the job the first one created instead of submitting a second one; sending a different request with a key already used is refused with 409, so a key accidentally reused across targets cannot silently skip them. Use one key per request, not one per batch. Recommended on every write: these operations change systems outside Oleria, so a client that times out and retries without one can apply the change twice. This matters even for the operations that are safe to repeat: asserting a membership that already exists grants nothing a second time, but without a key it is still a second job, with its own audit record and its own results.
Path Parameters
Global id of the non-human identity.
Response
The change was accepted and is being applied. Poll the returned job for its outcome.

