appcrane_revoke_app_access
Remove a user's access from an app. Idempotent: succeeds even if user had no access. Prevents removal of the last owner.
Instructions
Remove a user's access from an app entirely. Idempotent: returns ok even if the user had no access. App-admin or owner of the app required (or global admin). Refuses to remove the only remaining owner.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| slug | Yes | ||
| user | Yes | User id, email, or username |