Skip to main content
Delete an unused workspace Actions policy

Authorizations

Authorization
string
header
required

BoxRouter API key; never an upstream provider key.

Headers

X-CSRF-Token
string

Session-bound CSRF token. Required for browser-session calls, together with a matching configured Origin header; omit it when calling with an API key.

If-Match
string
required

Strong ETag returned by the latest read; a stale value conflicts without changing the resource.

Required string length: 1 - 256
Pattern: ^[^\u0000]*$
Idempotency-Key
string

Optional for this operation. Preserve the same stable identifier when retrying an uncertain response; never reuse it for new work. If omitted where allowed, Cloud generates a request-scoped key that cannot reconcile a later retry. Do not include credentials or payloads. Stable identifier for one logical mutation.

Required string length: 1 - 128

Path Parameters

policy_id
string
required

Workspace-owned Actions policy ID.

Required string length: 1 - 128
Pattern: ^[^\u0000]*$

Response

Policy removed; referenced policies are refused with 409.