disassociate_principal_from_portfolio
(**kwargs)¶Disassociates a previously associated principal ARN from a specified portfolio.
The PrincipalType
and PrincipalARN
must match the AssociatePrincipalWithPortfolio
call request details. For example, to disassociate an association created with a PrincipalARN
of PrincipalType
IAM you must use the PrincipalType
IAM when calling DisassociatePrincipalFromPortfolio
.
For portfolios that have been shared with principal name sharing enabled: after disassociating a principal, share recipient accounts will no longer be able to provision products in this portfolio using a role matching the name of the associated principal.
See also: AWS API Documentation
Request Syntax
response = client.disassociate_principal_from_portfolio(
AcceptLanguage='string',
PortfolioId='string',
PrincipalARN='string',
PrincipalType='IAM'|'IAM_PATTERN'
)
The language code.
en
- English (default)jp
- Japanesezh
- Chinese[REQUIRED]
The portfolio identifier.
[REQUIRED]
The ARN of the principal (IAM user, role, or group). This field allows an ARN with no accountID
if PrincipalType
is IAM_PATTERN
.
IAM
if you use a fully defined ARN, or IAM_PATTERN
if you use no accountID
.dict
Response Syntax
{}
Response Structure
Exceptions
ServiceCatalog.Client.exceptions.InvalidParametersException
ServiceCatalog.Client.exceptions.ResourceNotFoundException