# Remove flag for a single user

Endpoint: DELETE /{CUSTOMER}/{USER}/{FLAG}
Security: basicAuth

## Security:

  - `basicAuth` (unknown)
    http basic

## Path parameters:

  - `CUSTOMER` (string, required)

  - `USER` (string, required)

  - `FLAG` (string, required)

## Response 200:

  - `200` (unknown)
    OK

## Response 200 fields (application/json):

  - `id` (string, required)

  - `timestamp` (string, required)

## Response 400:

  - `400` (unknown)
    Unknown encoding OR Invalid JSON request OR Invalid API request OR Invalid user, domain does not belong to customer {CUSTOMER} OR Failover enabled

## Response 400 fields (application/json):

  - `id` (string, required)

  - `timestamp` (string, required)

  - `status` (integer, required)
    Example: 403

  - `message` (string, required)
    Example: Forbidden

## Response 401:

  - `401` (unknown)
    Unauthorized

## Response 401 fields (application/json):

  - `id` (string, required)

  - `timestamp` (string, required)

  - `status` (integer, required)
    Example: 403

  - `message` (string, required)
    Example: Forbidden

## Response 403:

  - `403` (unknown)
    Forbidden

## Response 403 fields (application/json):

  - `id` (string, required)

  - `timestamp` (string, required)

  - `status` (integer, required)
    Example: 403

  - `message` (string, required)
    Example: Forbidden

## Response 404:

  - `404` (unknown)
    User not found

## Response 404 fields (application/json):

  - `id` (string, required)

  - `timestamp` (string, required)

  - `status` (integer, required)
    Example: 403

  - `message` (string, required)
    Example: Forbidden

## Response 503:

  - `503` (unknown)
    Database request failed OR Keycloak request failed

## Response 503 fields (application/json):

  - `id` (string, required)

  - `timestamp` (string, required)

  - `status` (integer, required)
    Example: 403

  - `message` (string, required)
    Example: Forbidden