Disallow delete membership when managed by SCIM

Signed-off-by: Bryan Frimin <bryan@getprobo.com>

pkg/server/api/connect/v1/v1_resolver.go

@@ -967,6 +967,11 @@ func (r *mutationResolver) RemoveMember(ctx context.Context, input types.RemoveM
 
 	err := r.iam.OrganizationService.RemoveMember(ctx, input.OrganizationID, input.MembershipID)
 	if err != nil {
+		var errManagedBySCIM *iam.ErrMembershipManagedBySCIM
+		if errors.As(err, &errManagedBySCIM) {
+			return nil, gqlutils.Conflict(err)
+		}
+
 		r.logger.ErrorCtx(ctx, "cannot remove member from organization", log.Error(err))
 		return nil, gqlutils.InternalServerError(ctx)
 	}