---
title: How to Terminate an Assumed Role Session
url: https://docs.vultr.com/platform/iam/roles/assumed-roles/how-to-terminate-an-assumed-role-session
description: Terminate an active assumed role session in Vultr IAM. Revoke temporary elevated permissions and end the session before its scheduled expiration timestamp.
publish_date: 2026-03-24T19:52:34.062535Z
last_updated: 2026-06-01T20:43:42.589902Z
---

Terminating an assumed role session immediately revokes the temporary permissions granted by the session. This is useful when a session is no longer needed or when you need to revoke elevated access for security reasons.

Follow this guide to terminate an assumed role session using the Vultr API or Terraform.

=== "Vultr API"

    1. Send a `GET` request to the [**Read Assumed Role Session** endpoint](https://www.vultr.com/api/#tag/iam/operation/list-iam-assumed-role-sessions) to retrieve the session details. Replace `{session-token}` with the session token. Verify that the `remaining_duration` is greater than 0.

        ```console
        $ curl "https://api.vultr.com/v2/assumed-roles/{session-token}" \
            -X GET \
            -H "Authorization: Bearer ${VULTR_API_KEY}"
        ```

    1. Send a `DELETE` request to the [**Delete Assumed Role Session** endpoint](https://www.vultr.com/api/#tag/iam/operation/delete-iam-assumed-role-session) to terminate the session.

        ```console
        $ curl "https://api.vultr.com/v2/assumed-roles/{session-token}" \
            -X DELETE \
            -H "Authorization: Bearer ${VULTR_API_KEY}"
        ```

        A successful termination returns an HTTP `204 No Content` response with no response body. The session's permissions are immediately revoked.

=== "Terraform"

    1. Ensure the [Vultr Terraform provider](https://registry.terraform.io/providers/vultr/vultr/latest/docs) is configured in your Terraform project.

    1. Destroy the role session resource. Replace `my_session` with the resource label used in your configuration.

        ```console
        $ terraform destroy -target=vultr_organization_role_session.my_session
        ```

        Alternatively, remove the `vultr_organization_role_session` block from your configuration and run:

        ```console
        $ terraform apply
        ```

        Verify that the output shows `vultr_organization_role_session.my_session: Destruction complete`.