Help Center/ Organizations/ API Reference/ APIs/ Managing Policies/ Detaching a Policy from an Entity
Updated on 2025-10-30 GMT+08:00

Detaching a Policy from an Entity

Function

This API is used to detach a policy from a root, OU, or account. It can be called only from the organization's management account.

Debugging

You can debug this API through automatic authentication in API Explorer or use the SDK sample code generated by API Explorer.

Authorization Information

Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.

  • If you are using role/policy-based authorization, see Permissions Policies and Supported Actions for details on the required permissions.
  • If you are using identity policy-based authorization, the following identity policy-based permissions are required.

    Action

    Access Level

    Resource Type (*: required)

    Condition Key

    Alias

    Dependencies

    organizations:policies:detach

    Write

    policy *

    g:ResourceTag/<tag-key>

    -

    -

    account

    g:ResourceTag/<tag-key>

    ou

    g:ResourceTag/<tag-key>

    root

    g:ResourceTag/<tag-key>

URI

POST /v1/organizations/policies/{policy_id}/detach

Table 1 Path Parameters

Parameter

Mandatory

Type

Description

policy_id

Yes

String

Unique ID of the policy.

Request Parameters

Table 2 Request header parameters

Parameter

Mandatory

Type

Description

X-Security-Token

No

String

Security token (session token) of your temporary security credentials. If a temporary security credential is used, this header is required.

Table 3 Request body parameters

Parameter

Mandatory

Type

Description

entity_id

Yes

String

Unique ID of the root, OU, or account.

Response Parameters

Status code: 200

Successful.

None

Example Requests

Detaching a policy from an entity

POST /v1/organizations/dry-run-policies/{policy_id}/detach

{
  "entity_id" : "ou-g0odxxnfw"
}

Example Responses

None

Status Codes

Status Code

Description

200

Successful.

Error Codes

See Error Codes.