---
title: How to Detach a Policy from a Group
url: https://docs.vultr.com/platform/iam/policies/how-to-detach-a-policy-from-a-group
description: Detach an IAM policy from a group on Vultr. Revoke the permissions defined in the policy from all group members through the Vultr API or Console interface.
publish_date: 2026-03-24T19:52:09.046854Z
last_updated: 2026-06-01T21:19:34.119155Z
---

Detaching a policy from a group revokes the permissions granted through that policy for all group members. Members retain any permissions assigned through other policies, roles, or other groups.

Follow this guide to detach a policy from a group using the Vultr API or Terraform.

=== "Vultr API"

    1. Send a `GET` request to the [**List Policies** endpoint](https://www.vultr.com/api/#tag/iam/operation/list-iam-policies) to retrieve all policies in your organization.

        ```console
        $ curl "https://api.vultr.com/v2/policies" \
            -X GET \
            -H "Authorization: Bearer ${VULTR_API_KEY}"
        ```

        Note the `id` of the policy you want to detach.

    1. Send a `GET` request to the [**List Groups with Policy** endpoint](https://www.vultr.com/api/#tag/iam/operation/list-iam-policy-groups) to retrieve all groups assigned to the policy. Replace `{policy-id}` with the id of the policy. Note the `id` of the group you want to detach.

        ```console
        $ curl "https://api.vultr.com/v2/policies/{policy-id}/groups" \
            -X GET \
            -H "Authorization: Bearer ${VULTR_API_KEY}"
        ```

    1. Send a `DELETE` request to the [**Detach Policy from Group** endpoint](https://www.vultr.com/api/#tag/iam/operation/detach-iam-group-from-policy) to detach the policy. Replace `{policy-id}` with the policy id and `{group-id}` with the group id.

        ```console
        $ curl "https://api.vultr.com/v2/policies/{policy-id}/groups/{group-id}" \
            -X DELETE \
            -H "Authorization: Bearer ${VULTR_API_KEY}"
        ```

        A successful detachment returns an HTTP `204 No Content` response with no response body.

=== "Terraform"

    1. Ensure the [Vultr Terraform provider](https://registry.terraform.io/providers/vultr/vultr/latest/docs) is configured in your Terraform project.

    1. Destroy the policy-group attachment resource. Replace `policy-group-attachment` with the resource label used in your configuration.

        ```console
        $ terraform destroy -target=vultr_organization_policy_group_attachment.policy-group-attachment
        ```

        Alternatively, remove the `vultr_organization_policy_group_attachment` block from your configuration and run:

        ```console
        $ terraform apply
        ```

        Verify that the output shows `vultr_organization_policy_group_attachment.policy-group-attachment: Destruction complete`.