This endpoint only operates on users with direct organization role assignments. Users whose organization membership is derived from IDP group assignments cannot be removed through this endpoint — manage their membership through IDP group configuration instead.