> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cube.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Remove embed group members

**🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.

Removes one or more embed users (1–1000 per request) from a group, identified the same way as when adding them — exactly one of `externalId` or `embedUserId` each. Only this group’s membership is dropped; the users themselves and their other groups are left alone, and unlike adding, an unknown `externalId` is never provisioned. Idempotent: removing a user who is not a member is a no-op. Returns `204 No Content`, or `404` if the group does not exist in this tenant.


## OpenAPI

````yaml /api-reference/api.yaml delete /api/v1/embed-tenants/{embedTenantName}/groups/{id}/users
openapi: 3.1.0
info:
  title: Cube Platform API
  version: 1.0.0
  description: >-
    Programmatically manage Cube: deployments and everything scoped to them

    (environments, folders, reports, workbooks, notifications, workspace, and
    agents),

    plus account-level users, groups, policies, embedding, and AI settings.
    Data-model

    authoring, dev mode, branches, and uploads live under /build/api/v1 — same
    host and

    token, routed to the build pods.
servers:
  - url: https://{tenant}.cubecloud.dev
    description: Your tenant host. Replace the whole host if you use a custom domain.
    variables:
      tenant:
        default: your-tenant
        description: Your Cube tenant subdomain
security:
  - bearerAuth: []
tags:
  - name: Deployments
  - name: Deployment Creation
  - name: Environments
  - name: Env Variables
  - name: Regions
  - name: Data Model
  - name: Data Model Uploads
  - name: GitHub
  - name: GitHub Connection
  - name: dbt Sync
  - name: Folders
  - name: Reports
  - name: Workbooks
  - name: Notifications
  - name: Workspace
  - name: Users Admin
  - name: User Attributes
  - name: User Attribute Values
  - name: Tenant Settings
  - name: OAuth Integrations
  - name: User OAuth Tokens
  - name: OIDC Token Configs
  - name: App Theme
  - name: Embed
  - name: Embed Tenants
  - name: Dashboard Embed Access
paths:
  /api/v1/embed-tenants/{embedTenantName}/groups/{id}/users:
    delete:
      tags:
        - Embed Tenants
      summary: Remove embed group members
      operationId: removeGroupMembers
      parameters:
        - in: path
          name: embedTenantName
          required: true
          schema:
            type: string
          description: >-
            Name of the embed tenant (the `embedTenantName` used to generate
            embed sessions).
        - in: path
          name: id
          required: true
          schema:
            type: integer
          description: Numeric id of the group, as returned by the groups endpoints.
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/EmbedGroupMembersInput'
        description: EmbedGroupMembersInput
        required: false
      responses:
        '200':
          content:
            application/json: {}
          description: Successful response
        '204':
          description: Members removed.
components:
  schemas:
    EmbedGroupMembersInput:
      properties:
        members:
          description: Embed users to add or remove (1–1000 per request).
          items:
            $ref: '#/components/schemas/EmbedGroupMemberInput'
          maxItems: 1000
          minItems: 1
          type: array
      required:
        - members
      type: object
    EmbedGroupMemberInput:
      properties:
        embedUserId:
          oneOf:
            - minimum: 1
              type: integer
              description: >-
                Numeric id of an existing embed user. Provide this OR
                `externalId`.
            - type: 'null'
        externalId:
          oneOf:
            - minLength: 1
              type: string
              description: >-
                External id of the embed user (the `externalId` passed to
                `generate-session`). Provide this OR `embedUserId`.
            - type: 'null'
      type: object
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: 'Token authentication. Send `Authorization: Bearer <YOUR_TOKEN>`.'

````