Issue Summary

When sending a DELETE request to the following endpoint:

• Remove member from group using group id,

A 500 error is returned if the API key owner isn't added as a site-admin.  

Steps to Reproduce

1. Create an API key with a user who is not part of the site-admins group. 
2. Send a DELETE request to the API endpoint to remove a user from a group. 

Expected Results

According to the documentation, a 403 (Forbidden) error should be returned: 

Actual Results

While being part of the site-admins group is a requirement as per the documentation: 

A 500 error is returned that doesn't provide a clear explanation about why the request failed: 

"statusCode": 500,
"message": "com.netflix.hystrix.exception.HystrixRuntimeException: RemoveUserFromGroupByAccountIdIdentityPlatformCommand failed and no fallback available." 

Workaround

Adding the API owner to the site-admins group resolves the 500 error.