# Delete

Launch stage: GA

`POST /api/2.0/secrets/acls/delete`

Deletes the given ACL on the given scope.

 Users must have the ``MANAGE`` permission to invoke this API.

 Example request:

 .. code::

    {
        "scope": "my-secret-scope",
        "principal": "data-scientists"
    }

 Throws ``RESOURCE_DOES_NOT_EXIST`` if no such secret scope, principal, or ACL exists.
 Throws ``PERMISSION_DENIED`` if the user does not have permission to make this API call.
 Throws ``INVALID_PARAMETER_VALUE`` if the permission or principal is invalid.

API scopes: secrets

## Request body

- `scope` (string, optional)
  The name of the scope to remove permissions from.
- `principal` (string, optional)
  The principal to remove an existing ACL from.

## Response

```json
{}
```