DeleteMemberAPI can only be called via Service Account
Currently DeleteMemberAPI can only be invoked by a service Account as there are no required roles specified in the @PreAuthorize filter, without any required roles we don't authorize the user [Code]
Users with appropriate Owner permissions should be able to delete a member from a Group