Remove a behaviour profile

DELETE

/security/behaviour/{id}

Removes the profile and what it had learned. Removing one that is
enforcing needs a fresh step-up (or a totp, or from the browser a
password, in the body). Needs behaviour:write (behaviour:team
for a team), checked in the controller; a verified account.

Capability: behaviour:write, checked in the route or controller in every mode. Behaviour:write; removing an enforcing profile needs a step-up.

Request

Path Params

Body Params application/json

Examples

Responses

🟢200

application/json

Removed

Bodyapplication/json

🟠401

🟠404

🟠403CapabilityMissing

Request Example

Shell

JavaScript

Java

Swift

curl --location --request DELETE 'https://api.prod-orm.io/security/behaviour/' \
--header 'Content-Type: application/json' \
--data '{
    "totp": "string",
    "password": "pa$$word"
}'

Response Example

200 - Example 1

{
    "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
    "removed": true
}

Modified at 2026-10-05 04:04:32

One behaviour profile

The team's access rules