# Remove Registry Permissions

> Removes permissions for a user or group on a specified registry key.

Source: https://docs.capaone.com/capaone/application-manager/powerbricks/remove-registry-permissions/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

Removes permissions for a user or group on a specified registry key.

## Parameters

#### Registry Root
*Required* — Default: `HKEY_LOCAL_MACHINE`

The registry hive to remove the permission from Allowed values: `HKEY_CLASSES_ROOT`, `HKEY_LOCAL_MACHINE`, `HKEY_USERS`, `HKEY_CURRENT_CONFIG`.

#### Registry Key
*Required*

The registry key to remove the permission from

#### User or group
*Required*

The user or group to remove permissions for - ex. Domain\User or $env:COMPUTERNAME\LocalGroupName or S-1-5-32-544 or BUILTIN\Users. Please add only one user or group.

#### Require Registry Key To Exist
*Optional* — Default: `False`

Enable to stop with an error when the registry key does not exist. Disable to skip the brick without an error when the key is missing.

## Details

- **Category:** Permissions
- **Brick ID:** `Registry-Remove-Permission`

## Raw JSON definition

**JSON**

```json
{
  "category": "permissions",
  "description": "Removes permissions for a user or group on a specified registry key.",
  "developerVendor": "CapaSystems A/S",
  "displayName": null,
  "id": "Registry-Remove-Permission",
  "name": "Remove Registry Permissions",
  "parameters": [
    {
      "allowManualInput": false,
      "defaultValue": "",
      "defaultValueObject": {
        "id": "HKEY_LOCAL_MACHINE",
        "name": "HKEY_LOCAL_MACHINE"
      },
      "description": "The registry hive to remove the permission from",
      "id": "RegistryRoot",
      "name": "Registry Root",
      "regExValidation": "",
      "required": true,
      "type": "ComboBox",
      "value": null,
      "values": [],
      "valuesObject": [
        {
          "id": "HKEY_CLASSES_ROOT",
          "name": "HKEY_CLASSES_ROOT"
        },
        {
          "id": "HKEY_LOCAL_MACHINE",
          "name": "HKEY_LOCAL_MACHINE"
        },
        {
          "id": "HKEY_USERS",
          "name": "HKEY_USERS"
        },
        {
          "id": "HKEY_CURRENT_CONFIG",
          "name": "HKEY_CURRENT_CONFIG"
        }
      ]
    },
    {
      "allowManualInput": false,
      "defaultValue": "",
      "defaultValueObject": null,
      "description": "The registry key to remove the permission from",
      "id": "RegistryKey",
      "name": "Registry Key",
      "regExValidation": "",
      "required": true,
      "type": "TextBox",
      "value": null,
      "values": [],
      "valuesObject": null
    },
    {
      "allowManualInput": false,
      "defaultValue": "",
      "defaultValueObject": null,
      "description": "The user or group to remove permissions for - ex. Domain\\User or $env:COMPUTERNAME\\LocalGroupName or S-1-5-32-544 or BUILTIN\\Users. Please add only one user or group.",
      "id": "Identity",
      "name": "User or group",
      "regExValidation": "",
      "required": true,
      "type": "TextBox",
      "value": null,
      "values": [],
      "valuesObject": null
    },
    {
      "allowManualInput": false,
      "defaultValue": "False",
      "defaultValueObject": null,
      "description": "Enable to stop with an error when the registry key does not exist. Disable to skip the brick without an error when the key is missing.",
      "id": "ShouldPathExist",
      "name": "Require Registry Key To Exist",
      "regExValidation": "",
      "required": false,
      "type": "Boolean",
      "value": null,
      "values": [],
      "valuesObject": null
    }
  ],
  "powershell": {
    "base64Encoded": true,
    "function": "ZnVuY3Rpb2..."
  },
  "type": "powerbrick",
  "version": "2026.9.1.1"
}
```