Headers
For non-platform customers - value must be Bearer <token> where <token> is api key prefixed with cal_
For platform customers - OAuth client secret key
For platform customers - OAuth client ID
Query Parameters
Permissions to remove (format: resource.action). Supports comma-separated values as well as repeated query params.