{ "v3": { "/access-profiles": { "GET": [ "idn:access-profile:read" ], "POST": [ "idn:access-profile:manage", "idn:entitlement:read", "idn:identity:read", "idn:sources:read" ] }, "/access-profiles/{id}": { "GET": [ "idn:access-profile:read" ], "PATCH": [ "idn:access-profile:manage" ], "DELETE": [ "idn:access-profile:manage" ] }, "/access-profiles/bulk-delete": { "POST": [ "idn:access-profile:manage" ] }, "/access-profiles/{id}/entitlements": { "GET": [ "idn:access-profile:read" ] }, "/access-requests": { "POST": [ "idn:access-request:manage", "idn:access-request-self:manage" ] }, "/access-requests/cancel": { "POST": [ "idn:access-request:manage" ] }, "/access-request-config": { "GET": [ "idn:access-request-config:read" ], "PUT": [ "idn:access-request-config:manage" ] }, "/access-request-status": { "GET": [ "idn:access-request-status:read" ] }, "/access-request-approvals/pending": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/completed": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/{approvalId}/approve": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/{approvalId}/reject": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/{approvalId}/forward": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/approval-summary": { "GET": [ "idn:access-request-approvals:read" ] }, "/accounts": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "POST": [ "idn:accounts:manage" ] }, "/accounts/{id}": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "PATCH": [ "idn:accounts:manage" ], "PUT": [ "idn:accounts:manage" ], "DELETE": [ "idn:accounts:manage" ] }, "/accounts/{id}/entitlements": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ] }, "/accounts/{id}/reload": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/enable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/disable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/unlock": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/search-attribute-config": { "POST": [ "idn:account-config:manage" ], "GET": [ "idn:account-config:read", "idn:account-config:manage" ] }, "/accounts/search-attribute-config/{name}": { "GET": [ "idn:account-config:read", "idn:account-config:manage" ], "DELETE": [ "idn:account-config:manage" ], "PATCH": [ "idn:account-config:manage" ] }, "/account-activities": { "GET": [ "sp:scopes:all" ] }, "/account-activities/{id}": { "GET": [ "sp:scopes:all" ] }, "/auth-org/network-config": { "GET": [ "sp:auth-org:read" ], "POST": [ "sp:auth-org:manage" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/lockout-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/service-provider-config": { "GET": [ "sp:auth-org:read " ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/session-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-users/{id}": { "GET": [ "sp:auth-user:read" ], "PATCH": [ "sp:auth-user:manage" ] }, "/brandings": { "GET": [ "idn:branding:read" ], "POST": [ "idn:branding:manage" ] }, "/brandings/{name}": { "GET": [ "idn:branding:read" ], "PUT": [ "idn:branding:manage" ], "DELETE": [ "idn:branding:manage" ] }, "/campaigns": { "GET": [ "idn:campaign:read", "idn:campaign:manage", "idn:campaign-report:read", "idn:campaign-report:manage" ], "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PATCH": [ "idn:campaign:read", "idn:campaign:manage" ] }, "/campaigns/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/activate": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/complete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/delete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/run-remediation-scan": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/{id}/reports": { "GET": [ "idn:campaign-report:read", "idn:campaign-report:manage" ] }, "/campaigns/{id}/run-report/{type}": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/reports-configuration": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PUT": [ "idn:campaign:manage" ] }, "/campaign-filters": { "POST": [ "idn:campaign-filter:manage" ], "GET": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/{id}": { "GET": [ "idn:campaign-filter:read" ], "POST": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/delete": { "POST": [ "idn:campaign-filter:manage" ] }, "/campaign-templates": { "POST": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ] }, "/campaign-templates/{id}": { "PATCH": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}/schedule": { "GET": [ "idn:campaign-temlates:read" ], "PUT": [ "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}/generate": { "POST": [ "idn:campaign-template:manage" ] }, "/certifications": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/access-review-items": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/decide": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/sign-off": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/decision-summary": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/identity-summaries": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/access-summaries/{type}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/identity-summaries/{identitySummaryId}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{certificationId}/access-review-items/{itemId}/permissions": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/reviewers": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/reassign-async": { "POST": [ "idn:campaign:manage" ] }, "/certification-tasks/{id}": { "GET": [ "idn:campaign:read" ] }, "/certification-tasks": { "GET": [ "idn:campaign:read" ] }, "/configuration-hub/object-mappings/{sourceOrg}": { "GET": [ "sp:config-object-mapping:read", "sp:config-object-mapping:manage" ], "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/{objectMappingId}": { "DELETE": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/bulk-create": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/bulk-patch": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/backups/uploads": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "POST": [ "sp:config-backup:manage" ] }, "/configuration-hub/backups/uploads/{id}": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "DELETE": [ "sp:config-backup:manage" ] }, "/connectors/{scriptName}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "DELETE": [ "idn:connector-config:manage" ], "PATCH": [ "idn:connector-config:manage" ] }, "/connectors": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "POST": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/translations/{locale}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/source-template": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/identities/{identity-id}/set-lifecycle-state": { "POST": [ "idn:identity-lifecycle-state:manage" ] }, "/identity-profiles/{identity-profile-id}/lifecycle-states": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "POST": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/identity-profiles/{identity-profile-id}/lifecycle-states/{lifecycle-state-id}": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "PATCH": [ "idn:identity-profile-lifecycle-state:manage" ], "DELETE": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/identity-profiles": { "GET": [ "idn:identity-profile:read" ], "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/bulk-delete": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/export": { "GET": [ "idn:identity-profile:read" ] }, "/identity-profiles/import": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/identity-preview": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}": { "GET": [ "idn:identity-profile:read" ], "DELETE": [ "idn:identity-profile:manage" ], "PATCH": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/default-identity-attribute-config": { "GET": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/process-identities": { "POST": [ "idn:identity-profile:manage" ] }, "/managed-clients": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clients/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage", "idn:managed-client-status:read", "idn:managed-client-status:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clients/{id}/status": { "GET": [ "idn:managed-client-status:read" ] }, "/managed-clusters": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}/log-config": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PUT": [ "idn:remote-client:manage" ] }, "/mfa/okta-verify/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/duo-web/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/kba/config": { "GET": [ "idn:mfa-kba:read" ] }, "/mfa/kba/config/answers": { "POST": [ "idn:mfa-kba:authenticate" ] }, "/mfa/{method}/test": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ] }, "/mfa/{method}/delete": { "DELETE": [ "idn:mfa-configuration:manage" ] }, "/mfa/okta-verify/verify": { "POST": [ "idn:mfa:verify" ] }, "/mfa/duo-web/verify": { "POST": [ "idn:mfa:verify" ] }, "/mfa/{method}/poll": { "POST": [ "idn:mfa:poll" ] }, "/mfa/kba/authenticate": { "POST": [ "idn:mfa-kba:authenticate" ] }, "/mfa/token/authenticate": { "POST": [ "idn:mfa:verify" ] }, "/mfa/token/send": { "POST": [ "idn:mfa:send" ] }, "/non-employee-records": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-records/{id}": { "GET": [ "idn:nelm:read" ], "PUT": [ "idn:nelm:manage" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-records/bulk-delete": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-requests": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-requests/{id}": { "GET": [ "idn:nelm:read" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-requests/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employees/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload/status": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/schema-attributes-template/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}/approve": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/{id}/reject": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}/schema-attributes": { "GET": [ "idn:nelm:read" ], "POST": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{sourceId}/schema-attributes/{attributeId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/oauth-clients": { "GET": [ "sp:oauth-client:read", "sp:oauth-client:manage" ], "POST": [ "sp:oauth-client:manage" ] }, "/oauth-clients/{id}": { "GET": [ "sp:oauth-client:manage", "sp:oauth-client:read" ], "DELETE": [ "sp:oauth-client:manage" ], "PATCH": [ "sp:oauth-client:manage" ] }, "/password-sync-groups": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "POST": [ "idn:password-sync-group:manage" ] }, "/password-sync-groups/{id}": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "PUT": [ "idn:password-sync-group:manage" ], "DELETE": [ "idn:password-sync-group:manage" ] }, "/password-policies/{id}": { "GET": [ "idn:password-policy:read" ], "PUT": [ "idn:password-policy:write" ], "DELETE": [ "idn:password-policy:write" ] }, "/password-policies": { "POST": [ "idn:password-policy:write" ], "GET": [ "idn:password-policy:read" ] }, "/personal-access-tokens": { "GET": [ "sp:my-personal-access-tokens:read", "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:read", "sp:all-personal-access-tokens:manage" ], "POST": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/personal-access-tokens/{id}": { "PATCH": [ "sp:my-personal-access-tokens:manage" ], "DELETE": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/public-identities": { "GET": [ "sp:scopes:default" ] }, "/public-identities-config": { "GET": [ "idn:public-identity-config:read", "idn:public-identity-config:manage" ], "PUT": [ "idn:public-identity-config:manage" ] }, "/requestable-objects": { "GET": [ "idn:requestable-objects:read" ] }, "/roles": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}/assigned-identities": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/saved-searches": { "POST": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ] }, "/saved-searches/{id}": { "PUT": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ], "DELETE": [ "sp:saved-search:manage" ] }, "/saved-searches/{id}/execute": { "POST": [ "sp:saved-search:manage" ] }, "/scheduled-searches": { "POST": [ "sp:scheduled-search:manage" ], "GET": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/{id}": { "PUT": [ "sp:scheduled-search:manage" ], "DELETE": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/{id}/unsubscribe": { "POST": [ "sp:scopes:all" ] }, "/search": { "POST": [ "sp:search:read" ] }, "/search/count": { "POST": [ "sp:search:read" ] }, "/search/aggregate": { "POST": [ "sp:search:read" ] }, "/search/{index}/{id}": { "GET": [ "sp:search:read" ] }, "/segments": { "POST": [ "idn:segment:manage" ], "GET": [ "idn:segment:read", "idn:segment:manage" ] }, "/segments/{id}": { "GET": [ "idn:segment:read", "idn:segment:manage" ], "DELETE": [ "idn:segment:manage" ], "PATCH": [ "idn:segment:manage" ] }, "/service-desk-integrations": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/{id}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/types": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/templates/{scriptName}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/status-check-configuration": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ] }, "/query-password-info": { "POST": [ "idn:password-info:read" ] }, "/set-password": { "POST": [ "idn:password-change:manage" ] }, "/password-change-status/{id}": { "GET": [ "idn:password-change:read" ] }, "/password-dictionary": { "GET": [ "idn:password-dictionary:read", "idn:password-dictionary:manage" ], "PUT": [ "idn:password-dictionary:manage" ] }, "/password-org-config": { "GET": [ "idn:password-org-config:read" ], "PUT": [ "idn:password-org-config:manage" ], "POST": [ "idn:password-org-config:manage" ] }, "/reports/{taskResultId}/result": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/reports/run": { "POST": [ "sp:report:manage" ] }, "/reports/{id}/cancel": { "POST": [ "sp:report:manage" ] }, "/reports/{taskResultId}": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/sod-policies": { "POST": [ "idn:sod-policy:manage" ], "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ] }, "/sod-policies/{id}": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ], "PATCH": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/evaluate": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/{id}/schedule": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/{id}/violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-policies/sod-violation-report-status/{reportResultId}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/predict": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/check": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download/{fileName}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sources": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/{id}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/provisioning-policies": { "GET": [ "idn:provisioning-policy:read", "idn:provisioning-policy:manage" ], "POST": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/{usageType}": { "GET": [ "idn:provisioning-policy-source:read", "idn:provisioning-policy:read", "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PUT": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PATCH": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "DELETE": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/bulk-update": { "POST": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/schemas": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/schemas/{schemaId}": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "PUT": [ "idn:source-schema:manage" ], "PATCH": [ "idn:source-schema:manage" ], "DELETE": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/source-health": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/{id}/schemas/accounts": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{id}/schemas/entitlements": { "GET": [ "idn:source-schema:read" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/upload-connector-file": { "POST": [ "idn:sources-admin:manage" ] }, "/sources/{sourceId}/connections": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/tagged-objects": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tagged-objects/{type}": { "GET": [ "idn:tag:read", "idn:tag:manage" ] }, "/tagged-objects/{type}/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "PUT": [ "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-add": { "POST": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-remove": { "POST": [ "idn:tag:manage" ] }, "/transforms": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "POST": [ "idn:transform:manage" ] }, "/transforms/{id}": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "PUT": [ "idn:transform:manage" ], "DELETE": [ "idn:transform:manage" ] }, "/work-items": { "GET": [ "sp:scopes:all" ] }, "/work-items/completed": { "GET": [ "sp:scopes:all" ] }, "/work-items/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/completed/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/summary": { "GET": [ "sp:scopes:all" ] }, "/work-items/{id}": { "GET": [ "sp:scopes:all" ], "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/forward": { "POST": [ "idn:work-item:update" ] }, "/work-items/{id}/approve/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/reject/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/bulk-approve/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/bulk-reject/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/submit-account-selection": { "POST": [ "sp:scopes:all" ] }, "/workflows": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "POST": [ "sp:workflow:manage" ] }, "/workflows/{id}": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "PUT": [ "sp:workflow:manage" ], "PATCH": [ "sp:workflow:manage" ], "DELETE": [ "sp:workflow:manage" ] }, "/workflows/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/{id}/executions": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/history": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/cancel": { "POST": [ "sp:workflow-execute:external" ] }, "/workflow-library": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/actions": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/triggers": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/operators": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflows/{id}/external/oauth-clients": { "POST": [ "sp:workflow:manage" ] }, "/workflows/execute/external/{id}": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/execute/external/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/source-usages/{sourceId}/status": { "GET": [ "idn:identity-history:manage" ] }, "/source-usages/{sourceId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/account-usages/{accountId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/manual-discover-applications-template": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications": { "POST": [ "idn:application-discovery:write" ] }, "/discovered-applications": { "GET": [ "idn:application-discovery:read" ] } }, "beta": { "/access-model-metadata/attributes": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/attributes/{key}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-model-metadata/attributes/{key}/values": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/attributes/{key}/values/{value}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-profiles": { "GET": [ "idn:access-profile:read" ], "POST": [ "idn:access-profile:manage", "idn:entitlement:read", "idn:identity:read", "idn:sources:read" ] }, "/access-profiles/{id}": { "GET": [ "idn:access-profile:read", "idn:access-profile:manage" ], "PATCH": [ "idn:access-profile:manage" ], "DELETE": [ "idn:access-profile:manage" ] }, "/access-profiles/bulk-delete": { "POST": [ "idn:access-profile:manage" ] }, "/access-profiles/bulk-update-requestable": { "POST": [ "idn:access-profile:manage" ] }, "/access-profiles/{id}/entitlements": { "GET": [ "idn:access-profile:read", "idn:access-profile:manage" ] }, "/access-requests": { "POST": [ "idn:access-request:manage", "idn:access-request-self:manage" ] }, "/access-requests/cancel": { "POST": [ "idn:access-request:manage" ] }, "/access-requests/close": { "POST": [ "sp:scopes:all" ] }, "/access-request-config": { "GET": [ "idn:access-request-config:read" ], "PUT": [ "idn:access-request-config:manage" ] }, "/access-request-status": { "GET": [ "idn:access-request-status:read" ] }, "/access-request-administration": { "GET": [ "idn:access-request-administration:read" ] }, "/access-request-approvals/pending": { "GET": [ "sp:scopes:all" ] }, "/access-request-approvals/completed": { "GET": [ "sp:scopes:all" ] }, "/access-request-approvals/{approvalId}/approve": { "POST": [ "sp:scopes:all" ] }, "/access-request-approvals/{approvalId}/reject": { "POST": [ "sp:scopes:all" ] }, "/access-request-approvals/{approvalId}/forward": { "POST": [ "sp:scopes:all" ] }, "/access-request-approvals/approval-summary": { "GET": [ "idn:access-request-approvals-summary:read" ] }, "/ai-access-request-recommendations": { "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage" ] }, "/ai-access-request-recommendations/ignored-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/requested-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/viewed-items": { "POST": [ "iai:access-request-recommender:manage" ], "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/viewed-items/bulk-create": { "POST": [ "iai:access-request-recommender:manage" ] }, "/accounts": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "POST": [ "idn:accounts:manage" ] }, "/accounts/{id}": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "PATCH": [ "idn:accounts:manage" ], "PUT": [ "idn:accounts:manage" ], "DELETE": [ "idn:accounts:manage" ] }, "/accounts/{id}/entitlements": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ] }, "/accounts/{id}/reload": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/enable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/disable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/unlock": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/remove": { "POST": [ "idn:accounts:manage" ] }, "/identities-accounts/{id}/enable": { "POST": [ "idn:accounts-state:manage" ] }, "/identities-accounts/{id}/disable": { "POST": [ "idn:accounts-state:manage" ] }, "/identities-accounts/enable": { "POST": [ "idn:accounts-state:manage" ] }, "/identities-accounts/disable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/search-attribute-config": { "POST": [ "idn:account-config:manage" ], "GET": [ "idn:account-config:read", "idn:account-config:manage" ] }, "/accounts/search-attribute-config/{name}": { "GET": [ "idn:account-config:read", "idn:account-config:manage" ], "DELETE": [ "idn:account-config:manage" ], "PATCH": [ "idn:account-config:manage" ] }, "/account-activities": { "GET": [ "sp:scopes:all" ] }, "/account-activities/{id}": { "GET": [ "sp:scopes:all" ] }, "/account-aggregations/{id}/status": { "GET": [ "sp:scopes:all" ] }, "/auth-profiles": { "GET": [ "sp:auth-profile:read" ] }, "/auth-profiles/{id}": { "GET": [ "sp:auth-profile:read" ], "PATCH": [ "sp:auth-profile:update" ] }, "/campaigns": { "GET": [ "idn:campaign:read", "idn:campaign:manage", "idn:campaign-report:read", "idn:campaign-report:manage" ], "POST": [ "idn:campaign:manage" ] }, "/campaigns/delete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PATCH": [ "idn:campaign:read", "idn:campaign:manage" ] }, "/campaigns/{id}/activate": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/complete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/run-remediation-scan": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/reports": { "GET": [ "idn:campaign-report:read", "idn:campaign-report:manage" ] }, "/campaigns/{id}/run-report/{type}": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/reports-configuration": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PUT": [ "idn:campaign:manage" ] }, "/campaign-templates": { "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ], "POST": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}": { "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ], "PATCH": [ "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}/generate": { "POST": [ "idn:campaign-template:manage" ] }, "/certifications/{id}/reassign-async": { "POST": [ "idn:certification:write" ] }, "/certifications/{id}/tasks/{taskId}": { "GET": [ "sp:scopes:all" ] }, "/certifications/{id}/tasks-pending": { "GET": [ "sp:scopes:all" ] }, "/certifications/{certificationId}/access-review-items/{itemId}/permissions": { "GET": [ "idn:certification:read" ] }, "/certifications/{id}/reviewers": { "GET": [ "idn:certification:read" ] }, "/certifications": { "GET": [ "sp:scopes:all" ] }, "/connector-rules": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "POST": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/{id}": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "PUT": [ "idn:rule-management-connector:manage" ], "DELETE": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/validate": { "POST": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ] }, "/connectors": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ] }, "/custom-password-instructions": { "POST": [ "sp:scopes:all" ] }, "/custom-password-instructions/{pageId}": { "GET": [ "sp:scopes:all" ], "DELETE": [ "sp:scopes:all" ] }, "/entitlements": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/{id}": { "GET": [ "idn:entitlement:read", "idn:entitlement:update", "idn:entitlement:manage" ], "PATCH": [ "idn:entitlement:manage" ] }, "/entitlements/{id}/parents": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/{id}/children": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/bulk-update": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/{id}/entitlement-request-config": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ], "PUT": [ "idn:entitlement:manage" ] }, "/entitlements/reset/sources/{sourceId}": { "POST": [ "idn:entitlement:update" ] }, "/entitlements/{id}/access-model-metadata/{attributeKey}/values/{attributeValue}": { "POST": [ "idn:entitlement:manage" ], "DELETE": [ "idn:entitlement:manage" ] }, "/entitlements/aggregate/sources/{id}": { "POST": [ "idn:entitlement:manage" ] }, "/generate-password-reset-token/digit": { "POST": [ "idn:password-digit-token:create" ] }, "/historical-identities": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshot-summary": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots/{date}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots/{date}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/common-access": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "POST": [ "iai:access-modeling:manage" ] }, "/common-access/update-status": { "POST": [ "iai:access-modeling:manage" ] }, "/historical-identities/{id}/events": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/start-date": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/compare": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/compare/{accessType}": { "GET": [ "sp:scopes:all" ] }, "/identities/{identityId}/synchronize-attributes": { "POST": [ "sp:scopes:all" ] }, "/identities/{identityId}/ownership": { "GET": [ "idn:identity:read" ] }, "/identities": { "GET": [ "idn:identity:read", "idn:identity:manage" ] }, "/identities/{id}": { "GET": [ "idn:identity:read", "idn:identity:manage" ], "DELETE": [ "idn:identity:manage" ] }, "/identities/invite": { "POST": [ "sp:scopes:all" ] }, "/identities/{id}/verification/account/send": { "POST": [ "idn:password:user-invite" ] }, "/identities/process": { "POST": [ "idn:identity:process", "idn:identity:manage" ] }, "/identities/{identityId}/reset": { "POST": [ "idn:identity:update" ] }, "/identities/{identityId}/role-assignments": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/identities/{identityId}/role-assignments/{assignmentId}": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/identity-attributes": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "POST": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/{name}": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "PUT": [ "idn:identity-profile-attribute:manage" ], "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/bulk-delete": { "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/identity-profiles": { "GET": [ "idn:identity-profile:read" ], "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/bulk-delete": { "POST": [ "idn:identity-profile:delete" ] }, "/identity-profiles/export": { "GET": [ "idn:identity-profile:read", "idn:identity-profile:manage" ] }, "/identity-profiles/import": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/identity-preview": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}": { "GET": [ "idn:identity-profile:read", "idn:identity-profile:manage" ], "DELETE": [ "idn:identity-profile:delete" ], "PATCH": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/default-identity-attribute-config": { "GET": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/process-identities": { "POST": [ "idn:identity-profile:read", "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/lifecycle-states/{lifecycle-state-id}": { "GET": [ "sp:scopes:all" ], "PATCH": [ "sp:scopes:all" ] }, "/multihosts": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/types": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ], "DELETE": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "PATCH": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources/testConnection": { "POST": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources/{sourceId}/testConnection": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/sources/errors": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/acctAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/entitlementAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/non-employee-records": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-records/{id}": { "GET": [ "idn:nelm:read" ], "PUT": [ "idn:nelm:manage" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-records/bulk-delete": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-requests": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-requests/{id}": { "GET": [ "idn:nelm:read" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-requests/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employees/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload/status": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/schema-attributes-template/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}/approve": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/{id}/reject": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}/schema-attributes": { "GET": [ "idn:nelm:read" ], "POST": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{sourceId}/schema-attributes/{attributeId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/managed-clients/{id}/status": { "GET": [ "idn:managed-client-status:read" ], "POST": [ "idn:managed-client-status:manage" ] }, "/managed-clusters/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ] }, "/managed-clusters/{id}/log-config": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PUT": [ "idn:remote-client:manage" ] }, "/managed-clusters": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ] }, "/mail-from-attributes": { "PUT": [ "sp:notification-mail-from-attributes:write" ] }, "/mail-from-attributes/{identityId}": { "GET": [ "sp:notification-mail-from-attributes:read" ] }, "/mfa/okta-verify/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/duo-web/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/kba/config": { "GET": [ "idn:mfa-kba:read" ] }, "/mfa/kba/config/answers": { "POST": [ "idn:mfa-kba:authenticate" ] }, "/mfa/{method}/test": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ] }, "/mfa/{method}/delete": { "DELETE": [ "idn:mfa-configuration:manage" ] }, "/mfa/okta-verify/verify": { "POST": [ "idn:mfa:verify" ] }, "/mfa/duo-web/verify": { "POST": [ "idn:mfa:verify" ] }, "/mfa/{method}/poll": { "POST": [ "idn:mfa:poll" ] }, "/mfa/kba/authenticate": { "POST": [ "idn:mfa-kba:authenticate" ] }, "/mfa/token/authenticate": { "POST": [ "idn:mfa:verify" ] }, "/mfa/token/send": { "POST": [ "idn:mfa:send" ] }, "/notification-template-defaults": { "GET": [ "idn:notification-template-defaults:read" ] }, "/notification-templates": { "GET": [ "idn:notification-templates:read" ], "POST": [ "idn:notification-templates:create" ] }, "/notification-templates/{id}": { "GET": [ "sp:scopes:all" ] }, "/notification-templates/bulk-delete": { "POST": [ "idn:notification-templates:delete" ] }, "/oauth-clients": { "GET": [ "sp:oauth-client:read", "sp:oauth-client:manage" ], "POST": [ "sp:oauth-client:manage" ] }, "/oauth-clients/{id}": { "GET": [ "sp:oauth-client:manage", "sp:oauth-client:read" ], "DELETE": [ "sp:oauth-client:manage" ], "PATCH": [ "sp:oauth-client:manage" ] }, "/org-config": { "GET": [ "idn:org-configs:read", "idn:org-configs:manage" ], "PATCH": [ "idn:org-configs:manage" ] }, "/org-config/valid-time-zones": { "GET": [ "idn:org-configs:read", "idn:org-configs-user:read" ] }, "/outlier-summaries": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-summaries/latest": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/{outlierId}/contributing-features": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/{outlierId}/feature-details/{contributingFeatureName}/access-items": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/ignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/unignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/export": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-feature-summaries/{outlierFeatureId}": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/password-dictionary": { "GET": [ "idn:password-dictionary:read", "idn:password-dictionary:manage" ], "PUT": [ "idn:password-dictionary:manage" ] }, "/query-password-info": { "POST": [ "idn:password-info:read" ] }, "/set-password": { "POST": [ "idn:password-change:manage" ] }, "/password-change-status/{id}": { "GET": [ "idn:password-change:read" ] }, "/password-sync-groups": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "POST": [ "idn:password-sync-group:manage" ] }, "/password-sync-groups/{id}": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "PUT": [ "idn:password-sync-group:manage" ], "DELETE": [ "idn:password-sync-group:manage" ] }, "/password-policies/{id}": { "GET": [ "idn:password-policy:read" ], "PUT": [ "idn:password-policy:write" ], "DELETE": [ "idn:password-policy:write" ] }, "/password-policies": { "POST": [ "idn:password-policy:write" ], "GET": [ "idn:password-policy:read" ] }, "/password-org-config": { "GET": [ "idn:password-org-config:read" ], "PUT": [ "idn:password-org-config:manage" ], "POST": [ "idn:password-org-config:manage" ] }, "/personal-access-tokens": { "GET": [ "sp:my-personal-access-tokens:read", "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:read", "sp:all-personal-access-tokens:manage" ], "POST": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/personal-access-tokens/{id}": { "PATCH": [ "sp:my-personal-access-tokens:manage" ], "DELETE": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/public-identities-config": { "GET": [ "idn:public-identity-config:read", "idn:public-identity-config:manage" ], "PUT": [ "idn:public-identity-config:manage" ] }, "/notification-template-context": { "GET": [ "idn:notification-templates:read" ] }, "/notification-preferences/{key}": { "GET": [ "idn:notification-preferences:read" ] }, "/reassignment-configurations/types": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "POST": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "PUT": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}/{configType}": { "DELETE": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}/evaluate/{configType}": { "GET": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/tenant-config": { "GET": [ "idn:reassignment-tenant-configuration:read" ], "PUT": [ "idn:reassignment-tenant-configuration:update" ] }, "/recommendations/request": { "POST": [ "iai:decisions:manage" ] }, "/recommendations/config": { "GET": [ "iai:configuration:read" ], "PUT": [ "iai:configuration:manage" ] }, "/requestable-objects": { "GET": [ "idn:requestable-objects:read" ] }, "/role-insights/requests": { "POST": [ "iai:role-insights" ] }, "/role-insights/requests/{id}": { "GET": [ "iai:role-insights" ] }, "/role-insights/summary": { "GET": [ "iai:role-insights" ] }, "/role-insights": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes/download": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/current-entitlements": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes/{entitlementId}/identities": { "GET": [ "iai:role-insights" ] }, "/role-mining-sessions": { "POST": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}": { "PATCH": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/status": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}/applications": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}/entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularity-distribution": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/edit-entitlements": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/identities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}/download": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/provision": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/excluded-entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/saved": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/{potentialRoleId}/sources/{sourceId}/identityUsage": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/roles": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}/assigned-identities": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/{id}/entitlements": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/segments": { "POST": [ "sp:scopes:all" ], "GET": [ "sp:scopes:all" ] }, "/segments/{id}": { "GET": [ "sp:scopes:all" ], "DELETE": [ "sp:scopes:all" ], "PATCH": [ "sp:scopes:all" ] }, "/send-test-notification": { "POST": [ "sp:scopes:all" ] }, "/service-desk-integrations": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/{id}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/types": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/templates/{scriptName}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/status-check-configuration": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations/{id}": { "PUT": [ "idn:service-desk-integration:manage" ], "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations/{id}/beforeProvisioningRule": { "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/sp-config/export": { "POST": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/export/{id}": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/export/{id}/download": { "GET": [ "sp:scopes:all" ] }, "/sp-config/import": { "POST": [ "sp:config:manage" ] }, "/sp-config/import/{id}": { "GET": [ "sp:config:manage" ] }, "/sp-config/import/{id}/download": { "GET": [ "sp:scopes:all" ] }, "/sp-config/config-objects": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sources": { "GET": [ "idn:sources:read" ], "POST": [ "idn:sources:manage" ] }, "/sources/{id}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{id}/attribute-sync-config": { "GET": [ "idn:attr-sync-source-config:read", "idn:attr-sync-source-config:manage" ], "PUT": [ "idn:attr-sync-source-config:manage" ] }, "/sources/{sourceId}/connector/check-connection": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/peek-resource-objects": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/ping-cluster": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/test-configuration": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{id}/connectors/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ] }, "/sources/{sourceId}/native-change-detection-config": { "GET": [ "idn:sources:read" ], "PUT": [ "idn:sources:update" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/provisioning-policies": { "GET": [ "idn:provisioning-policy:read", "idn:provisioning-policy:manage" ], "POST": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/{usageType}": { "GET": [ "idn:provisioning-policy-source:read", "idn:provisioning-policy:read", "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PUT": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PATCH": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "DELETE": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/bulk-update": { "POST": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/remove-accounts": { "POST": [ "idn:accounts:manage" ] }, "/sources/{sourceId}/schemas": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/schemas/{schemaId}": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "PUT": [ "idn:source-schema:manage" ], "PATCH": [ "idn:source-schema:manage" ], "DELETE": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/schemas/accounts": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/schemas/entitlements": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/upload-connector-file": { "POST": [ "idn:sources-admin:manage" ] }, "/sources/{sourceId}/synchronize-attributes": { "POST": [ "sp:scopes:all" ] }, "/sources/{sourceId}/entitlement-request-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/sources/{sourceId}/load-accounts": { "POST": [ "idn:sources:manage" ] }, "/sources/{sourceId}/load-entitlements": { "POST": [ "idn:entitlement:manage" ] }, "/sources/{sourceId}/load-uncorrelated-accounts": { "POST": [ "idn:sources:manage" ] }, "/sources/{sourceId}/correlation-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/source-apps/{id}": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "PATCH": [ "idn:app-roles:manage" ], "DELETE": [ "idn:app-roles:manage" ] }, "/source-apps/bulk-update": { "POST": [ "idn:app-roles:manage" ] }, "/source-apps/assigned": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "POST": [ "idn:app-roles:manage" ] }, "/source-apps/all": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps/{id}/access-profiles": { "GET": [ "idn:app-roles:manage" ] }, "/source-apps/{id}/access-profiles/bulk-remove": { "POST": [ "idn:app-roles:manage" ] }, "/task-status/{id}": { "GET": [ "idn:task-management:read", "idn:task-management:write" ], "PATCH": [ "idn:task-management:write" ] }, "/task-status": { "GET": [ "idn:task-management:read", "idn:task-management:write" ] }, "/task-status/pending-tasks": { "GET": [ "idn:task-management:read", "idn:task-management:write" ], "HEAD": [ "idn:task-management:read", "idn:task-management:write" ] }, "/tagged-objects": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tagged-objects/{type}": { "GET": [ "idn:tag:read", "idn:tag:manage" ] }, "/tagged-objects/{type}/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "PUT": [ "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-add": { "POST": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-remove": { "POST": [ "idn:tag:manage" ] }, "/tags": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tags/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/tenant": { "GET": [ "sp:tenant:read" ] }, "/transforms": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "POST": [ "idn:transform:manage" ] }, "/transforms/{id}": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "PUT": [ "idn:transform:manage" ], "DELETE": [ "idn:transform:manage" ] }, "/translation-catalogs/{catalog-id}": { "GET": [ "iai:decisions:manage" ] }, "/triggers": { "GET": [ "sp:trigger-service-subscriptions:read" ] }, "/trigger-subscriptions": { "POST": [ "sp:trigger-service-subscriptions:manage" ], "GET": [ "sp:trigger-service-subscriptions:read", "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/{id}": { "PUT": [ "sp:trigger-service-subscriptions:manage" ], "PATCH": [ "sp:trigger-service-subscriptions:manage" ], "DELETE": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/validate-filter": { "POST": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-invocations/status": { "GET": [ "sp:trigger-service-invocation-status:read", "sp:trigger-service-invocation-status:manage" ] }, "/trigger-invocations/{id}/complete": { "POST": [ "sp:scopes:all" ] }, "/trigger-invocations/test": { "POST": [ "sp:trigger-service-invocation-status:manage" ] }, "/ui-metadata/tenant": { "GET": [ "idn:ui-access-metadata-page:read" ], "PUT": [ "idn:ui-access-metadata-page:manage" ] }, "/user-apps/{id}": { "PATCH": [ "idn:app-roles:manage" ] }, "/user-apps/{id}/available-accounts": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps/all": { "GET": [ "idn:app-roles:manage" ] }, "/verified-from-addresses": { "GET": [ "sp:scopes:all" ], "POST": [ "sp:scopes:all" ] }, "/verified-from-addresses/{id}": { "DELETE": [ "sp:scopes:all" ] }, "/verified-domains": { "GET": [ "sp:notification-dkim-attributes:read" ], "POST": [ "sp:notification-verify-domain-dkim:write" ] }, "/sod-policies": { "POST": [ "idn:sod-policy:manage" ], "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ] }, "/sod-policies/{id}": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ], "PATCH": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/schedule": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/{id}/violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/predict": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-policies/sod-violation-report-status/{reportResultId}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download/{fileName}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/work-items": { "GET": [ "idn:work-item:read" ] }, "/work-items/completed": { "GET": [ "idn:work-item:read" ] }, "/work-items/count": { "GET": [ "idn:work-item:read" ] }, "/work-items/completed/count": { "GET": [ "idn:work-item:read" ] }, "/work-items/summary": { "GET": [ "idn:work-item:read" ] }, "/work-items/{id}": { "GET": [ "idn:work-item:read" ], "POST": [ "idn:work-item:update" ] }, "/work-items/{id}/forward": { "POST": [ "idn:work-item:update" ] }, "/work-items/{id}/approve/{approvalItemId}": { "POST": [ "idn:work-item:update" ] }, "/work-items/{id}/reject/{approvalItemId}": { "POST": [ "idn:work-item:update" ] }, "/work-items/bulk-approve/{id}": { "POST": [ "idn:work-item:update" ] }, "/work-items/bulk-reject/{id}": { "POST": [ "idn:work-item:update" ] }, "/work-items/{id}/submit-account-selection": { "POST": [ "idn:work-item:update" ] }, "/workflows": { "POST": [ "sp:workflow:manage" ], "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflows/{id}": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "PUT": [ "sp:workflow:manage" ], "PATCH": [ "sp:workflow:manage" ], "DELETE": [ "sp:workflow:manage" ] }, "/workflows/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/{id}/executions": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/history": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/cancel": { "POST": [ "sp:workflow-execute:external" ] }, "/workflow-library": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/actions": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/triggers": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/operators": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflows/{id}/external/oauth-clients": { "POST": [ "sp:workflow:manage" ] }, "/workflows/execute/external/{id}": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/execute/external/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/workgroups": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "POST": [ "idn:workgroup:manage" ] }, "/workgroups/{id}": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "DELETE": [ "idn:workgroup:manage" ], "PATCH": [ "idn:workgroup:manage" ] }, "/workgroups/bulk-delete": { "POST": [ "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/connections": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/members": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/members/bulk-add": { "POST": [ "idn:workgroup:write" ] }, "/workgroups/{workgroupId}/members/bulk-delete": { "POST": [ "idn:workgroup:write" ] }, "/form-definitions": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "DELETE": [ "sp:forms:manage" ], "PATCH": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}/data-source": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/export": { "GET": [ "sp:config:read", "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/forms-action-dynamic-schema": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/import": { "POST": [ "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/template": { "POST": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}/upload": { "POST": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}/file/{fileID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-instances": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-instances/{formInstanceID}/file/{fileID}": { "GET": [ "sp:forms:manage" ] }, "/form-definitions/predefined-select-options": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/source-usages/{sourceId}/status": { "GET": [ "idn:identity-history:manage" ] }, "/source-usages/{sourceId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/account-usages/{accountId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/access-request-identity-metrics/{identityId}/requested-objects/{requestedObjectId}/type/{type}": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-approvals:manage" ] }, "/manual-discover-applications-template": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications": { "POST": [ "idn:application-discovery:write" ] }, "/discovered-applications": { "GET": [ "idn:application-discovery:read" ] }, "/discovered-applications/{id}": { "GET": [ "idn:application-discovery:read" ], "PATCH": [ "idn:application-discovery:write" ] }, "/icons/{objectType}/{objectId}": { "PUT": [ "idn:icons:manage" ], "DELETE": [ "idn:icons:manage" ] }, "/suggested-entitlement-description-batches/{batchId}/stats": { "GET": [ "idn:sed:read" ] }, "/suggested-entitlement-description-batches": { "GET": [ "idn:sed:read" ], "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-approvals": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-assignments": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-descriptions": { "GET": [ "idn:sed:read" ], "PATCH": [ "idn:sed:write" ] }, "/launchers": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "POST": [ "sp:launcher-admin:write" ] }, "/launchers/{launcherID}": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "PUT": [ "sp:launcher-admin:write" ], "DELETE": [ "sp:launcher-admin:delete" ] }, "/beta/launchers/{launcherID}/launch": { "POST": [ "sp:launcher-user:launch" ] } }, "v2024": { "/access-profiles": { "GET": [ "idn:access-profile:read" ], "POST": [ "idn:access-profile:manage", "idn:entitlement:read", "idn:identity:read", "idn:sources:read" ] }, "/access-profiles/{id}": { "GET": [ "idn:access-profile:read" ], "PATCH": [ "idn:access-profile:manage" ], "DELETE": [ "idn:access-profile:manage" ] }, "/access-profiles/bulk-delete": { "POST": [ "idn:access-profile:manage" ] }, "/access-profiles/{id}/entitlements": { "GET": [ "idn:access-profile:read" ] }, "/access-requests": { "POST": [ "idn:access-request:manage", "idn:access-request-self:manage" ] }, "/access-requests/cancel": { "POST": [ "idn:access-request:manage" ] }, "/access-requests/bulk-cancel": { "POST": [ "idn:access-request-administration:manage" ] }, "/access-requests/accounts-selection": { "POST": [ "idn:access-request:manage" ] }, "/access-request-config": { "GET": [ "idn:access-request-config:read" ], "PUT": [ "idn:access-request-config:manage" ] }, "/access-request-status": { "GET": [ "idn:access-request-status:read" ] }, "/access-request-administration": { "GET": [ "idn:access-request-administration:read" ] }, "/access-request-approvals/pending": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/completed": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/{approvalId}/approve": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/{approvalId}/reject": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/{approvalId}/forward": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/approval-summary": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/bulk-approve": { "POST": [ "idn:access-request:manage" ] }, "/access-request-approvals/{accessRequestId}/approvers": { "GET": [ "idn:access-request-administration:read" ] }, "/accounts": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "POST": [ "idn:accounts:manage" ] }, "/accounts/{id}": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "PATCH": [ "idn:accounts:manage" ], "PUT": [ "idn:accounts:manage" ], "DELETE": [ "idn:accounts:manage" ] }, "/accounts/{id}/entitlements": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ] }, "/accounts/{id}/reload": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/enable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/disable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/unlock": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/remove": { "POST": [ "idn:accounts:manage" ] }, "/account-activities": { "GET": [ "sp:scopes:all" ] }, "/account-activities/{id}": { "GET": [ "sp:scopes:all" ] }, "/auth-org/network-config": { "GET": [ "sp:auth-org:read" ], "POST": [ "sp:auth-org:manage" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/lockout-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/service-provider-config": { "GET": [ "sp:auth-org:read " ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/session-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-users/{id}": { "GET": [ "sp:auth-user:read" ], "PATCH": [ "sp:auth-user:manage" ] }, "/brandings": { "GET": [ "idn:branding:read" ], "POST": [ "idn:branding:manage" ] }, "/brandings/{name}": { "GET": [ "idn:branding:read" ], "PUT": [ "idn:branding:manage" ], "DELETE": [ "idn:branding:manage" ] }, "/campaigns": { "GET": [ "idn:campaign:read", "idn:campaign:manage", "idn:campaign-report:read", "idn:campaign-report:manage" ], "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PATCH": [ "idn:campaign:read", "idn:campaign:manage" ] }, "/campaigns/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/activate": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/complete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/delete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/run-remediation-scan": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/{id}/reports": { "GET": [ "idn:campaign-report:read", "idn:campaign-report:manage" ] }, "/campaigns/{id}/run-report/{type}": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/reports-configuration": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PUT": [ "idn:campaign:manage" ] }, "/campaign-filters": { "POST": [ "idn:campaign-filter:manage" ], "GET": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/{id}": { "GET": [ "idn:campaign-filter:read" ], "POST": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/delete": { "POST": [ "idn:campaign-filter:manage" ] }, "/campaign-templates": { "POST": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ] }, "/campaign-templates/{id}": { "PATCH": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}/schedule": { "GET": [ "idn:campaign-temlates:read" ], "PUT": [ "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}/generate": { "POST": [ "idn:campaign-template:manage" ] }, "/certifications": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/access-review-items": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/decide": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/sign-off": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/decision-summary": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/identity-summaries": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/access-summaries/{type}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/identity-summaries/{identitySummaryId}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{certificationId}/access-review-items/{itemId}/permissions": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/reviewers": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/reassign-async": { "POST": [ "idn:campaign:manage" ] }, "/certification-tasks/{id}": { "GET": [ "idn:campaign:read" ] }, "/certification-tasks": { "GET": [ "idn:campaign:read" ] }, "/connector-customizers": { "GET": [ "sp:connector:read" ], "POST": [ "sp:connector:manage" ] }, "/connector-customizers/{id}": { "GET": [ "sp:connector:read" ], "PUT": [ "sp:connector:manage" ], "DELETE": [ "sp:connector:manage" ] }, "/connector-customizers/{id}/versions": { "POST": [ "sp:connector:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}": { "GET": [ "sp:config-object-mapping:read", "sp:config-object-mapping:manage" ], "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/{objectMappingId}": { "DELETE": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/bulk-create": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/bulk-patch": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/scheduled-actions": { "GET": [ "sp:config-scheduled-action:read", "sp:config-scheduled-action:manage" ], "POST": [ "sp:config-scheduled-action:manage" ] }, "/configuration-hub/scheduled-actions/{id}": { "PATCH": [ "sp:config-scheduled-action:manage" ], "DELETE": [ "sp:config-scheduled-action:manage" ] }, "/configuration-hub/backups/uploads": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "POST": [ "sp:config-backup:manage" ] }, "/configuration-hub/backups/uploads/{id}": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "DELETE": [ "sp:config-backup:manage" ] }, "/configuration-hub/backups": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ] }, "/configuration-hub/backups/{id}": { "DELETE": [ "sp:config-backup:manage" ] }, "/configuration-hub/drafts": { "GET": [ "sp:config-draft:read", "sp:config-draft:manage" ] }, "/configuration-hub/drafts/{id}": { "DELETE": [ "sp:config-draft:manage" ] }, "/configuration-hub/deploys": { "GET": [ "sp:config-deploy:read", "sp:config-deploy:manage" ], "POST": [ "sp:config-deploy:manage" ] }, "/configuration-hub/deploys/{id}": { "GET": [ "sp:config-deploy:read", "sp:config-deploy:manage" ] }, "/connectors/{scriptName}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "DELETE": [ "idn:connector-config:manage" ], "PATCH": [ "idn:connector-config:manage" ] }, "/connectors": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "POST": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/translations/{locale}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/source-template": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/correlation-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connector-rules": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "POST": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/{id}": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "PUT": [ "idn:rule-management-connector:manage" ], "DELETE": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/validate": { "POST": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ] }, "/data-segments/membership/{identityId}": { "GET": [ "idn:data-segment:read" ] }, "/data-segments/user-enabled/{identityId}": { "GET": [ "idn:data-segment:read" ] }, "/data-segments/{segmentId}": { "GET": [ "idn:data-segment:read" ], "POST": [ "idn:data-segment:manage" ], "PATCH": [ "idn:data-segment:manage" ], "DELETE": [ "idn:data-segment:manage" ] }, "/data-segments": { "GET": [ "idn:data-segment:read" ], "POST": [ "idn:data-segment:manage" ] }, "/identities": { "GET": [ "idn:identity:read", "idn:identity:manage" ] }, "/identities/{id}": { "GET": [ "idn:identity:read", "idn:identity:manage" ], "DELETE": [ "idn:identity:manage" ] }, "/identities-accounts/{id}/enable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/{id}/disable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/enable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/disable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities/{identityId}/ownership": { "GET": [ "idn:identity:read" ] }, "/identities/{id}/reset": { "POST": [ "idn:identity:manage" ] }, "/identities/{identityId}/role-assignments": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/identities/{identityId}/role-assignments/{assignmentId}": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/identities/{identity-id}/set-lifecycle-state": { "POST": [ "idn:identity-lifecycle-state:manage" ] }, "/identity-profiles/{identity-profile-id}/lifecycle-states": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "POST": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/identity-profiles/{identity-profile-id}/lifecycle-states/{lifecycle-state-id}": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "PATCH": [ "idn:identity-profile-lifecycle-state:manage" ], "DELETE": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/identity-profiles": { "GET": [ "idn:identity-profile:read" ], "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/bulk-delete": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/export": { "GET": [ "idn:identity-profile:read" ] }, "/identity-profiles/import": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}": { "GET": [ "idn:identity-profile:read" ], "DELETE": [ "idn:identity-profile:manage" ], "PATCH": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/default-identity-attribute-config": { "GET": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/process-identities": { "POST": [ "idn:identity-profile:manage" ] }, "/managed-clients": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clients/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage", "idn:managed-client-status:read", "idn:managed-client-status:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clients/{id}/status": { "GET": [ "idn:managed-client-status:read" ] }, "/managed-clusters": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}/log-config": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PUT": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}/manualUpgrade": { "POST": [ "idn:managed-cluster-upgrade:manage" ] }, "/managed-cluster-types": { "GET": [ "idn:managed-cluster-types:read", "idn:managed-cluster-types:manage" ], "POST": [ "idn:managed-cluster-types:manage" ] }, "/managed-cluster-types/{id}": { "GET": [ "idn:managed-cluster-types:read", "idn:managed-cluster-types:manage" ], "PATCH": [ "idn:managed-cluster-types:manage" ], "DELETE": [ "idn:managed-cluster-types:manage" ] }, "/mfa/okta-verify/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/duo-web/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/kba/config": { "GET": [ "idn:mfa-kba:read" ] }, "/mfa/kba/config/answers": { "POST": [ "idn:mfa-kba:authenticate" ] }, "/mfa/{method}/test": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ] }, "/multihosts": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/types": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ], "DELETE": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "PATCH": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources/testConnection": { "POST": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources/{sourceId}/testConnection": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/sources/errors": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/acctAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/entitlementAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/non-employee-records": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-records/{id}": { "GET": [ "idn:nelm:read" ], "PUT": [ "idn:nelm:manage" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-records/bulk-delete": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-requests": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-requests/{id}": { "GET": [ "idn:nelm:read" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-requests/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employees/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload/status": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/schema-attributes-template/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}/approve": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/{id}/reject": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}/schema-attributes": { "GET": [ "idn:nelm:read" ], "POST": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{sourceId}/schema-attributes/{attributeId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/oauth-clients": { "GET": [ "sp:oauth-client:read", "sp:oauth-client:manage" ], "POST": [ "sp:oauth-client:manage" ] }, "/oauth-clients/{id}": { "GET": [ "sp:oauth-client:manage", "sp:oauth-client:read" ], "DELETE": [ "sp:oauth-client:manage" ], "PATCH": [ "sp:oauth-client:manage" ] }, "/password-sync-groups": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "POST": [ "idn:password-sync-group:manage" ] }, "/password-sync-groups/{id}": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "PUT": [ "idn:password-sync-group:manage" ], "DELETE": [ "idn:password-sync-group:manage" ] }, "/password-policies/{id}": { "GET": [ "idn:password-policy:read" ], "PUT": [ "idn:password-policy:write" ], "DELETE": [ "idn:password-policy:write" ] }, "/password-policies": { "POST": [ "idn:password-policy:write" ], "GET": [ "idn:password-policy:read" ] }, "/personal-access-tokens": { "GET": [ "sp:my-personal-access-tokens:read", "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:read", "sp:all-personal-access-tokens:manage" ], "POST": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/personal-access-tokens/{id}": { "PATCH": [ "sp:my-personal-access-tokens:manage" ], "DELETE": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/public-identities": { "GET": [ "sp:scopes:default" ] }, "/public-identities-config": { "GET": [ "idn:public-identity-config:read", "idn:public-identity-config:manage" ], "PUT": [ "idn:public-identity-config:manage" ] }, "/requestable-objects": { "GET": [ "idn:requestable-objects:read" ] }, "/revocable-objects": { "GET": [ "idn:requestable-objects:read" ] }, "/roles": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}/assigned-identities": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/{roleId}/dimensions": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{roleId}/dimensions/{dimensionId}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{roleId}/dimensions/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{roleId}/dimensions/{dimensionId}/access-profiles": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/{roleId}/dimensions/{dimensionId}/entitlements": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/saved-searches": { "POST": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ] }, "/saved-searches/{id}": { "PUT": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ], "DELETE": [ "sp:saved-search:manage" ] }, "/saved-searches/{id}/execute": { "POST": [ "sp:saved-search:manage" ] }, "/scheduled-searches": { "POST": [ "sp:scheduled-search:manage" ], "GET": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/{id}": { "PUT": [ "sp:scheduled-search:manage" ], "DELETE": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/{id}/unsubscribe": { "POST": [ "sp:scopes:all" ] }, "/search": { "POST": [ "sp:search:read" ] }, "/search/count": { "POST": [ "sp:search:read" ] }, "/search/aggregate": { "POST": [ "sp:search:read" ] }, "/search/{index}/{id}": { "GET": [ "sp:search:read" ] }, "/segments": { "POST": [ "idn:segment:manage" ], "GET": [ "idn:segment:read", "idn:segment:manage" ] }, "/segments/{id}": { "GET": [ "idn:segment:read", "idn:segment:manage" ], "DELETE": [ "idn:segment:manage" ], "PATCH": [ "idn:segment:manage" ] }, "/service-desk-integrations": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/{id}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/types": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/templates/{scriptName}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/status-check-configuration": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ] }, "/query-password-info": { "POST": [ "idn:password-info:read" ] }, "/set-password": { "POST": [ "idn:password-change:manage" ] }, "/password-change-status/{id}": { "GET": [ "idn:password-change:read" ] }, "/password-dictionary": { "GET": [ "idn:password-dictionary:read", "idn:password-dictionary:manage" ], "PUT": [ "idn:password-dictionary:manage" ] }, "/password-org-config": { "GET": [ "idn:password-org-config:read" ], "PUT": [ "idn:password-org-config:manage" ], "POST": [ "idn:password-org-config:manage" ] }, "/reports/{taskResultId}/result": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/reports/run": { "POST": [ "sp:report:manage" ] }, "/reports/{id}/cancel": { "POST": [ "sp:report:manage" ] }, "/reports/{taskResultId}": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/sod-policies": { "POST": [ "idn:sod-policy:manage" ], "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ] }, "/sod-policies/{id}": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ], "PATCH": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/evaluate": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/{id}/schedule": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/{id}/violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-policies/sod-violation-report-status/{reportResultId}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/predict": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/check": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download/{fileName}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sources": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/{id}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/provisioning-policies": { "GET": [ "idn:provisioning-policy:read", "idn:provisioning-policy:manage" ], "POST": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/{usageType}": { "GET": [ "idn:provisioning-policy-source:read", "idn:provisioning-policy:read", "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PUT": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PATCH": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "DELETE": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/bulk-update": { "POST": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/schemas": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/schedules": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/{sourceId}/schedules/{scheduleType}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/schemas/{schemaId}": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "PUT": [ "idn:source-schema:manage" ], "PATCH": [ "idn:source-schema:manage" ], "DELETE": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/source-health": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/{id}/schemas/accounts": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{id}/schemas/entitlements": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/upload-connector-file": { "POST": [ "idn:sources-admin:manage" ] }, "/sources/{sourceId}/connections": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/{id}/correlation-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/sources/{sourceId}/password-policies": { "PATCH": [ "idn:sources:manage" ] }, "/sources/{sourceId}/connector/check-connection": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/peek-resource-objects": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/ping-cluster": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/test-configuration": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{id}/connectors/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ] }, "/sources/{sourceId}/native-change-detection-config": { "GET": [ "idn:sources:read" ], "PUT": [ "idn:sources:update" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{id}/remove-accounts": { "POST": [ "idn:accounts:manage" ] }, "/sources/{id}/load-accounts": { "POST": [ "idn:sources:manage" ] }, "/sources/{id}/load-uncorrelated-accounts": { "POST": [ "idn:sources:manage" ] }, "/tagged-objects": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tagged-objects/{type}": { "GET": [ "idn:tag:read", "idn:tag:manage" ] }, "/tagged-objects/{type}/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "PUT": [ "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-add": { "POST": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-remove": { "POST": [ "idn:tag:manage" ] }, "/tags": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tags/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/transforms": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "POST": [ "idn:transform:manage" ] }, "/transforms/{id}": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "PUT": [ "idn:transform:manage" ], "DELETE": [ "idn:transform:manage" ] }, "/work-items": { "GET": [ "sp:scopes:all" ] }, "/work-items/completed": { "GET": [ "sp:scopes:all" ] }, "/work-items/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/completed/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/summary": { "GET": [ "sp:scopes:all" ] }, "/work-items/{id}": { "GET": [ "sp:scopes:all" ], "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/approve/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/reject/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/bulk-approve/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/bulk-reject/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/submit-account-selection": { "POST": [ "sp:scopes:all" ] }, "/workflows": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "POST": [ "sp:workflow:manage" ] }, "/workflows/{id}": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "PUT": [ "sp:workflow:manage" ], "PATCH": [ "sp:workflow:manage" ], "DELETE": [ "sp:workflow:manage" ] }, "/workflows/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/{id}/executions": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/history": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/cancel": { "POST": [ "sp:workflow-execute:external" ] }, "/workflow-library": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/actions": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/triggers": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/operators": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflows/{id}/external/oauth-clients": { "POST": [ "sp:workflow:manage" ] }, "/workflows/execute/external/{id}": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/execute/external/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/source-usages/{sourceId}/status": { "GET": [ "idn:identity-history:manage" ] }, "/source-usages/{sourceId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/account-usages/{accountId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/identity-profiles/identity-preview": { "POST": [ "idn:identity-profile:manage" ] }, "/work-items/{id}/forward": { "POST": [ "sp:scopes:all" ] }, "/accounts/search-attribute-config": { "POST": [ "idn:account-config:manage" ], "GET": [ "idn:account-config:read", "idn:account-config:manage" ] }, "/accounts/search-attribute-config/{name}": { "GET": [ "idn:account-config:read", "idn:account-config:manage" ], "DELETE": [ "idn:account-config:manage" ], "PATCH": [ "idn:account-config:manage" ] }, "/access-model-metadata/attributes": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/attributes/{key}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-model-metadata/attributes/{key}/values": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/attributes/{key}/values/{value}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-profiles/bulk-update-requestable": { "POST": [ "idn:access-profile:manage" ] }, "/ai-access-request-recommendations": { "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage" ] }, "/ai-access-request-recommendations/config": { "GET": [ "iai:configuration:read", "iai:configuration:manage" ], "PUT": [ "iai:configuration:read", "iai:configuration:manage" ] }, "/ai-access-request-recommendations/ignored-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/requested-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/viewed-items": { "POST": [ "iai:access-request-recommender:manage" ], "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/viewed-items/bulk-create": { "POST": [ "iai:access-request-recommender:manage" ] }, "/auth-profiles": { "GET": [ "sp:auth-profile:read" ] }, "/auth-profiles/{id}": { "GET": [ "sp:auth-profile:read" ], "PATCH": [ "sp:auth-profile:update" ] }, "/entitlements": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/{id}": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ], "PATCH": [ "idn:entitlement:manage" ] }, "/entitlements/{id}/parents": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/{id}/children": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/bulk-update": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/{id}/entitlement-request-config": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ], "PUT": [ "idn:entitlement:manage" ] }, "/entitlements/reset/sources/{id}": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/{id}/access-model-metadata/{attributeKey}/values/{attributeValue}": { "POST": [ "idn:entitlement:manage" ], "DELETE": [ "idn:entitlement:manage" ] }, "/entitlements/aggregate/sources/{id}": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/identities/{id}/entitlements": { "GET": [ "idn:entitlement:read" ] }, "/generate-password-reset-token/digit": { "POST": [ "idn:password-digit-token:create" ] }, "/historical-identities": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshot-summary": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots/{date}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots/{date}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/common-access": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "POST": [ "iai:access-modeling:manage" ] }, "/common-access/update-status": { "POST": [ "iai:access-modeling:manage" ] }, "/historical-identities/{id}/events": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/start-date": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/compare": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/compare/{access-type}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/identities/invite": { "POST": [ "idn:password-user-invite:manage" ] }, "/identities/{id}/verification/account/send": { "POST": [ "idn:password:user-invite" ] }, "/identities/process": { "POST": [ "idn:identity:process", "idn:identity:manage" ] }, "/identity-attributes": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "POST": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/{name}": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "PUT": [ "idn:identity-profile-attribute:manage" ], "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/bulk-delete": { "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/launchers": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "POST": [ "sp:launcher-admin:write" ] }, "/launchers/{launcherID}": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "PUT": [ "sp:launcher-admin:write" ], "DELETE": [ "sp:launcher-admin:delete" ] }, "/launchers/{launcherID}/launch": { "POST": [ "sp:launcher-user:launch" ] }, "/mail-from-attributes": { "PUT": [ "sp:notification-mail-from-attributes:write" ] }, "/mail-from-attributes/{identity}": { "GET": [ "sp:notification-mail-from-attributes:read" ] }, "/generic-approvals": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-administration:read", "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-administration:read", "idn:access-request-approvals:manage" ] }, "/machine-accounts": { "GET": [ "idn:mis-account:read" ] }, "/machine-accounts/{id}": { "GET": [ "idn:mis-account:read" ], "PATCH": [ "idn:mis-account:manage" ] }, "/sources/{sourceId}/machine-classification-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/machine-account-mappings": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/machine-mappings": { "PUT": [ "idn:sources:manage" ] }, "/accounts/{id}/classify": { "POST": [ "idn:account:update" ] }, "/machine-identities": { "GET": [ "idn:mis-identity:read", "idn:mis-identity:manage" ], "POST": [ "idn:mis-identity:manage" ] }, "/machine-identities/{id}": { "GET": [ "idn:mis-identity:read" ], "PATCH": [ "idn:mis-identity:manage" ], "DELETE": [ "idn:mis-identity:manage" ] }, "/notification-template-defaults": { "GET": [ "idn:notification-template-defaults:read" ] }, "/notification-templates": { "GET": [ "idn:notification-templates:read" ], "POST": [ "idn:notification-templates:create" ] }, "/notification-templates/{id}": { "GET": [ "idn:notification-templates:read" ] }, "/notification-templates/bulk-delete": { "POST": [ "idn:notification-templates:delete" ] }, "/org-config": { "GET": [ "idn:org-configs:read", "idn:org-configs:manage" ], "PATCH": [ "idn:org-configs:manage" ] }, "/org-config/valid-time-zones": { "GET": [ "idn:org-configs:read", "idn:org-configs-user:read" ] }, "/outlier-summaries": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-summaries/latest": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/{outlierId}/contributing-features": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/{outlierId}/feature-details/{contributingFeatureName}/access-items": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/ignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/unignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/export": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-feature-summaries/{outlierFeatureId}": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/notification-template-context": { "GET": [ "idn:notification-templates:read" ] }, "/notification-preferences/{key}": { "GET": [ "idn:notification-preferences:read" ] }, "/reassignment-configurations/types": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "POST": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "PUT": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}/{configType}": { "DELETE": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}/evaluate/{configType}": { "GET": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/tenant-config": { "GET": [ "idn:reassignment-tenant-configuration:read" ], "PUT": [ "idn:reassignment-tenant-configuration:update" ] }, "/recommendations/request": { "POST": [ "iai:decisions:manage" ] }, "/recommendations/config": { "GET": [ "iai:configuration:read" ], "PUT": [ "iai:configuration:manage" ] }, "/role-insights/requests": { "POST": [ "iai:role-insights" ] }, "/role-insights/requests/{id}": { "GET": [ "iai:role-insights" ] }, "/role-insights/summary": { "GET": [ "iai:role-insights" ] }, "/role-insights": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes/download": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/current-entitlements": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes/{entitlementId}/identities": { "GET": [ "iai:role-insights" ] }, "/role-mining-sessions": { "POST": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}": { "PATCH": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/status": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}/applications": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}/entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularity-distribution": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/edit-entitlements": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/identities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}/download": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/provision": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/excluded-entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/saved": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/{potentialRoleId}/sources/{sourceId}/identityUsage": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/roles/{id}/entitlements": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/send-test-notification": { "POST": [ "idn:notification-templates:create" ] }, "/sim-integrations/{id}": { "PUT": [ "idn:service-desk-integration:manage" ], "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations/{id}/beforeProvisioningRule": { "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/sp-config/export": { "POST": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/export/{id}": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/export/{id}/download": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/import": { "POST": [ "sp:config:manage" ] }, "/sp-config/import/{id}": { "GET": [ "sp:config:manage" ] }, "/sp-config/import/{id}/download": { "GET": [ "sp:config:manage" ] }, "/sp-config/config-objects": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sources/{id}/attribute-sync-config": { "GET": [ "idn:attr-sync-source-config:read", "idn:attr-sync-source-config:manage" ], "PUT": [ "idn:attr-sync-source-config:manage" ] }, "/sources/{id}/synchronize-attributes": { "POST": [ "idn:attr-sync-source-config:manage" ] }, "/sources/{id}/entitlement-request-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/sources/{sourceId}/load-entitlements": { "POST": [ "idn:entitlement:manage" ] }, "/task-status/{id}": { "GET": [ "idn:task-management:read", "idn:task-management:write" ], "PATCH": [ "idn:task-management:write" ] }, "/task-status": { "GET": [ "idn:task-management:read", "idn:task-management:write" ] }, "/task-status/pending-tasks": { "GET": [ "idn:task-management:read", "idn:task-management:write" ], "HEAD": [ "idn:task-management:read", "idn:task-management:write" ] }, "/tenant": { "GET": [ "sp:tenant:read" ] }, "/tenant-context": { "GET": [ "idn:tenant-context:read" ], "PATCH": [ "idn:tenant-context:write" ] }, "/triggers": { "GET": [ "sp:trigger-service-subscriptions:read" ] }, "/trigger-subscriptions": { "POST": [ "sp:trigger-service-subscriptions:manage" ], "GET": [ "sp:trigger-service-subscriptions:read", "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/{id}": { "PUT": [ "sp:trigger-service-subscriptions:manage" ], "PATCH": [ "sp:trigger-service-subscriptions:manage" ], "DELETE": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/validate-filter": { "POST": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-invocations/status": { "GET": [ "sp:trigger-service-invocation-status:read", "sp:trigger-service-invocation-status:manage" ] }, "/trigger-invocations/test": { "POST": [ "sp:trigger-service-invocation-status:manage" ] }, "/ui-metadata/tenant": { "GET": [ "idn:ui-access-metadata-page:read" ], "PUT": [ "idn:ui-access-metadata-page:manage" ] }, "/verified-from-addresses": { "GET": [ "idn:notification-templates:read" ], "POST": [ "idn:notification-templates:create" ] }, "/verified-from-addresses/{id}": { "DELETE": [ "idn:notification-templates:delete" ] }, "/verified-domains": { "GET": [ "sp:notification-dkim-attributes:read" ], "POST": [ "sp:notification-verify-domain-dkim:write" ] }, "/workgroups": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "POST": [ "idn:workgroup:manage" ] }, "/workgroups/{id}": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "DELETE": [ "idn:workgroup:manage" ], "PATCH": [ "idn:workgroup:manage" ] }, "/workgroups/bulk-delete": { "POST": [ "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/connections": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/members": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/members/bulk-add": { "POST": [ "idn:workgroup:write" ] }, "/workgroups/{workgroupId}/members/bulk-delete": { "POST": [ "idn:workgroup:write" ] }, "/form-definitions": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "DELETE": [ "sp:forms:manage" ], "PATCH": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}/data-source": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/export": { "GET": [ "sp:config:read", "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/forms-action-dynamic-schema": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/import": { "POST": [ "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/{formDefinitionID}/upload": { "POST": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}/file/{fileID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-instances": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-instances/{formInstanceID}/file/{fileID}": { "GET": [ "sp:forms:manage" ] }, "/form-definitions/predefined-select-options": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/access-request-identity-metrics/{identityId}/requested-objects/{requestedObjectId}/type/{type}": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-approvals:manage" ] }, "/icons/{objectType}/{objectId}": { "PUT": [ "idn:icons:manage" ], "DELETE": [ "idn:icons:manage" ] }, "/suggested-entitlement-description-batches/{batchId}/stats": { "GET": [ "idn:sed:read" ] }, "/suggested-entitlement-description-batches": { "GET": [ "idn:sed:read" ], "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-approvals": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-assignments": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-descriptions": { "GET": [ "idn:sed:read" ], "PATCH": [ "idn:sed:write" ] }, "/discovered-applications": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications-template": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications": { "POST": [ "idn:application-discovery:write" ] }, "/source-apps/{id}": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "PATCH": [ "idn:app-roles:manage" ], "DELETE": [ "idn:app-roles:manage" ] }, "/source-apps/bulk-update": { "POST": [ "idn:app-roles:manage" ] }, "/source-apps/assigned": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "POST": [ "idn:app-roles:manage" ] }, "/source-apps/all": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps/{id}/access-profiles": { "GET": [ "idn:app-roles:manage" ] }, "/source-apps/{id}/access-profiles/bulk-remove": { "POST": [ "idn:app-roles:manage" ] }, "/user-apps/{id}": { "PATCH": [ "idn:app-roles:manage" ] }, "/user-apps/{id}/available-accounts": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps/all": { "GET": [ "idn:app-roles:manage" ] }, "/roles/{id}/access-model-metadata/{attributeKey}/values/{attributeValue}": { "POST": [ "idn:role:update", "idn:role-checked:update" ], "DELETE": [ "idn:role:delete", "idn:role-checked:delete", "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/ids": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/filter": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/query": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/id": { "GET": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update": { "GET": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/filter": { "POST": [ "idn:role-unchecked:read", "idn:role-unchecked:manage" ] } }, "v2025": { "/access-profiles": { "GET": [ "idn:access-profile:read" ], "POST": [ "idn:access-profile:manage", "idn:entitlement:read", "idn:identity:read", "idn:sources:read" ] }, "/access-profiles/{id}": { "GET": [ "idn:access-profile:read" ], "PATCH": [ "idn:access-profile:manage" ], "DELETE": [ "idn:access-profile:manage" ] }, "/access-profiles/bulk-delete": { "POST": [ "idn:access-profile:manage" ] }, "/access-profiles/{id}/entitlements": { "GET": [ "idn:access-profile:read" ] }, "/access-requests": { "POST": [ "idn:access-request:manage", "idn:access-request-self:manage" ] }, "/access-requests/cancel": { "POST": [ "idn:access-request:manage" ] }, "/access-requests/bulk-cancel": { "POST": [ "idn:access-request-administration:manage" ] }, "/access-requests/accounts-selection": { "POST": [ "idn:access-request:manage" ] }, "/access-request-config": { "GET": [ "idn:access-request-config:read" ], "PUT": [ "idn:access-request-config:manage" ] }, "/access-request-status": { "GET": [ "idn:access-request-status:read" ] }, "/access-request-administration": { "GET": [ "idn:access-request-administration:read" ] }, "/access-request-approvals/pending": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/completed": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/{approvalId}/approve": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/{approvalId}/reject": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/{approvalId}/forward": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/approval-summary": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/bulk-approve": { "POST": [ "idn:access-request:manage" ] }, "/access-request-approvals/{accessRequestId}/approvers": { "GET": [ "idn:access-request-administration:read" ] }, "/accounts": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "POST": [ "idn:accounts:manage" ] }, "/accounts/{id}": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "PATCH": [ "idn:accounts:manage" ], "PUT": [ "idn:accounts:manage" ], "DELETE": [ "idn:accounts:manage" ] }, "/accounts/{id}/entitlements": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ] }, "/accounts/{id}/reload": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/enable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/disable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/unlock": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/remove": { "POST": [ "idn:accounts:manage" ] }, "/account-activities": { "GET": [ "sp:scopes:all" ] }, "/account-activities/{id}": { "GET": [ "sp:scopes:all" ] }, "/api-usage/count": { "GET": [ "sp:api-usage:read" ] }, "/api-usage/summary": { "GET": [ "sp:api-usage:read" ] }, "/auth-org/network-config": { "GET": [ "sp:auth-org:read" ], "POST": [ "sp:auth-org:manage" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/lockout-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/service-provider-config": { "GET": [ "sp:auth-org:read " ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/session-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-users/{id}": { "GET": [ "sp:auth-user:read" ], "PATCH": [ "sp:auth-user:manage" ] }, "/brandings": { "GET": [ "idn:branding:read" ], "POST": [ "idn:branding:manage" ] }, "/brandings/{name}": { "GET": [ "idn:branding:read" ], "PUT": [ "idn:branding:manage" ], "DELETE": [ "idn:branding:manage" ] }, "/campaigns": { "GET": [ "idn:campaign:read", "idn:campaign:manage", "idn:campaign-report:read", "idn:campaign-report:manage" ], "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PATCH": [ "idn:campaign:read", "idn:campaign:manage" ] }, "/campaigns/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/activate": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/complete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/delete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/run-remediation-scan": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/{id}/reports": { "GET": [ "idn:campaign-report:read", "idn:campaign-report:manage" ] }, "/campaigns/{id}/run-report/{type}": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/reports-configuration": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PUT": [ "idn:campaign:manage" ] }, "/campaign-filters": { "POST": [ "idn:campaign-filter:manage" ], "GET": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/{id}": { "GET": [ "idn:campaign-filter:read" ], "POST": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/delete": { "POST": [ "idn:campaign-filter:manage" ] }, "/campaign-templates": { "POST": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ] }, "/campaign-templates/{id}": { "PATCH": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}/schedule": { "GET": [ "idn:campaign-temlates:read" ], "PUT": [ "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}/generate": { "POST": [ "idn:campaign-template:manage" ] }, "/certifications": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/access-review-items": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/decide": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/sign-off": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/decision-summary": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/identity-summaries": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/access-summaries/{type}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/identity-summaries/{identitySummaryId}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{certificationId}/access-review-items/{itemId}/permissions": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/reviewers": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/reassign-async": { "POST": [ "idn:campaign:manage" ] }, "/certification-tasks/{id}": { "GET": [ "idn:campaign:read" ] }, "/certification-tasks": { "GET": [ "idn:campaign:read" ] }, "/connector-customizers": { "GET": [ "sp:connector:read" ], "POST": [ "sp:connector:manage" ] }, "/connector-customizers/{id}": { "GET": [ "sp:connector:read" ], "PUT": [ "sp:connector:manage" ], "DELETE": [ "sp:connector:manage" ] }, "/connector-customizers/{id}/versions": { "POST": [ "sp:connector:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}": { "GET": [ "sp:config-object-mapping:read", "sp:config-object-mapping:manage" ], "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/{objectMappingId}": { "DELETE": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/bulk-create": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/bulk-patch": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/scheduled-actions": { "GET": [ "sp:config-scheduled-action:read", "sp:config-scheduled-action:manage" ], "POST": [ "sp:config-scheduled-action:manage" ] }, "/configuration-hub/scheduled-actions/{id}": { "PATCH": [ "sp:config-scheduled-action:manage" ], "DELETE": [ "sp:config-scheduled-action:manage" ] }, "/configuration-hub/backups/uploads": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "POST": [ "sp:config-backup:manage" ] }, "/configuration-hub/backups/uploads/{id}": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "DELETE": [ "sp:config-backup:manage" ] }, "/configuration-hub/backups": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ] }, "/configuration-hub/backups/{id}": { "DELETE": [ "sp:config-backup:manage" ] }, "/configuration-hub/drafts": { "GET": [ "sp:config-draft:read", "sp:config-draft:manage" ] }, "/configuration-hub/drafts/{id}": { "DELETE": [ "sp:config-draft:manage" ] }, "/configuration-hub/deploys": { "GET": [ "sp:config-deploy:read", "sp:config-deploy:manage" ], "POST": [ "sp:config-deploy:manage" ] }, "/configuration-hub/deploys/{id}": { "GET": [ "sp:config-deploy:read", "sp:config-deploy:manage" ] }, "/connectors/{scriptName}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "DELETE": [ "idn:connector-config:manage" ], "PATCH": [ "idn:connector-config:manage" ] }, "/connectors": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "POST": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/translations/{locale}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/source-template": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/correlation-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connector-rules": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "POST": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/{id}": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "PUT": [ "idn:rule-management-connector:manage" ], "DELETE": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/validate": { "POST": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ] }, "/das/tasks": { "GET": [ "das:task:read", "das:task:manage" ] }, "/das/tasks/{id}": { "GET": [ "das:task:read", "das:task:manage" ], "DELETE": [ "das:task:manage" ] }, "/das/tasks/cancel/{id}": { "POST": [ "das:task:manage" ] }, "/das/tasks/rerun/{id}": { "POST": [ "das:task:manage" ] }, "/das/tasks/schedules": { "GET": [ "das:task:read", "das:task:manage" ], "POST": [ "das:task:manage" ] }, "/das/tasks/schedules/{id}": { "GET": [ "das:task:read", "das:task:manage" ], "PUT": [ "das:task:manage" ], "DELETE": [ "das:task:manage" ] }, "/das/applications": { "POST": [ "das:applications:manage" ], "GET": [ "das:applications:read", "das:applications:manage" ] }, "/das/applications/{id}": { "PUT": [ "das:applications:manage" ], "DELETE": [ "das:applications:manage" ], "GET": [ "das:applications:read", "das:applications:manage" ] }, "/das/owners/applications/{appId}": { "GET": [ "das:owners:read", "das:owners:manage" ] }, "/das/owners/resources/{resourceId}": { "GET": [ "das:owners:read", "das:owners:manage" ] }, "/das/owners/{ownerIdentityId}/resources": { "GET": [ "das:owners:read", "das:owners:manage" ] }, "/das/owners/assign": { "POST": [ "das:owners:manage" ] }, "/das/owners/{sourceIdentityId}/reassign/{destinationIdentityId}": { "POST": [ "das:owners:manage" ] }, "/das/owners/reelect": { "POST": [ "das:owners:manage" ] }, "/data-segments/membership/{identityId}": { "GET": [ "idn:data-segment:read" ] }, "/data-segments/user-enabled/{identityId}": { "GET": [ "idn:data-segment:read" ] }, "/data-segments/{segmentId}": { "GET": [ "idn:data-segment:read" ], "POST": [ "idn:data-segment:manage" ], "PATCH": [ "idn:data-segment:manage" ], "DELETE": [ "idn:data-segment:manage" ] }, "/data-segments": { "GET": [ "idn:data-segment:read" ], "POST": [ "idn:data-segment:manage" ] }, "/identities": { "GET": [ "idn:identity:read", "idn:identity:manage" ] }, "/identities/{id}": { "GET": [ "idn:identity:read", "idn:identity:manage" ], "DELETE": [ "idn:identity:manage" ] }, "/identities-accounts/{id}/enable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/{id}/disable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/enable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/disable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities/{identityId}/ownership": { "GET": [ "idn:identity:read" ] }, "/identities/{id}/reset": { "POST": [ "idn:identity:manage" ] }, "/identities/{identityId}/role-assignments": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/identities/{identityId}/role-assignments/{assignmentId}": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/identities/{identity-id}/set-lifecycle-state": { "POST": [ "idn:identity-lifecycle-state:manage" ] }, "/identity-profiles/{identity-profile-id}/lifecycle-states": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "POST": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/identity-profiles/{identity-profile-id}/lifecycle-states/{lifecycle-state-id}": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "PATCH": [ "idn:identity-profile-lifecycle-state:manage" ], "DELETE": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/identity-profiles": { "GET": [ "idn:identity-profile:read" ], "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/bulk-delete": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/export": { "GET": [ "idn:identity-profile:read" ] }, "/identity-profiles/import": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}": { "GET": [ "idn:identity-profile:read" ], "DELETE": [ "idn:identity-profile:manage" ], "PATCH": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/default-identity-attribute-config": { "GET": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/process-identities": { "POST": [ "idn:identity-profile:manage" ] }, "/launchers": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "POST": [ "sp:launcher-admin:write" ] }, "/launchers/{launcherID}": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "PUT": [ "sp:launcher-admin:write" ], "DELETE": [ "sp:launcher-admin:delete" ] }, "/launchers/{launcherID}/launch": { "POST": [ "sp:launcher-user:launch" ] }, "/managed-clients": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clients/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage", "idn:managed-client-status:read", "idn:managed-client-status:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clients/{id}/status": { "GET": [ "idn:managed-client-status:read" ] }, "/managed-clients/{id}/health-indicators": { "GET": [ "idn:remote-client:manage" ] }, "/managed-clusters": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}/log-config": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PUT": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}/manualUpgrade": { "POST": [ "idn:managed-cluster-upgrade:manage" ] }, "/managed-cluster-types": { "GET": [ "idn:managed-cluster-types:read", "idn:managed-cluster-types:manage" ], "POST": [ "idn:managed-cluster-types:manage" ] }, "/managed-cluster-types/{id}": { "GET": [ "idn:managed-cluster-types:read", "idn:managed-cluster-types:manage" ], "PATCH": [ "idn:managed-cluster-types:manage" ], "DELETE": [ "idn:managed-cluster-types:manage" ] }, "/mfa/okta-verify/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/duo-web/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/kba/config": { "GET": [ "idn:mfa-kba:read" ] }, "/mfa/kba/config/answers": { "POST": [ "idn:mfa-kba:authenticate" ] }, "/mfa/{method}/test": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ] }, "/multihosts": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/types": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ], "DELETE": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "PATCH": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources/testConnection": { "POST": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources/{sourceId}/testConnection": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/sources/errors": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/sources/bulk-delete": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/acctAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/entitlementAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/non-employee-records": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-records/{id}": { "GET": [ "idn:nelm:read" ], "PUT": [ "idn:nelm:manage" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-records/bulk-delete": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-requests": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-requests/{id}": { "GET": [ "idn:nelm:read" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-requests/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employees/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload/status": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/schema-attributes-template/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}/approve": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/{id}/reject": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}/schema-attributes": { "GET": [ "idn:nelm:read" ], "POST": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{sourceId}/schema-attributes/{attributeId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/oauth-clients": { "GET": [ "sp:oauth-client:read", "sp:oauth-client:manage" ], "POST": [ "sp:oauth-client:manage" ] }, "/oauth-clients/{id}": { "GET": [ "sp:oauth-client:manage", "sp:oauth-client:read" ], "DELETE": [ "sp:oauth-client:manage" ], "PATCH": [ "sp:oauth-client:manage" ] }, "/password-sync-groups": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "POST": [ "idn:password-sync-group:manage" ] }, "/password-sync-groups/{id}": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "PUT": [ "idn:password-sync-group:manage" ], "DELETE": [ "idn:password-sync-group:manage" ] }, "/password-policies/{id}": { "GET": [ "idn:password-policy:read" ], "PUT": [ "idn:password-policy:write" ], "DELETE": [ "idn:password-policy:write" ] }, "/password-policies": { "POST": [ "idn:password-policy:write" ], "GET": [ "idn:password-policy:read" ] }, "/personal-access-tokens": { "GET": [ "sp:my-personal-access-tokens:read", "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:read", "sp:all-personal-access-tokens:manage" ], "POST": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/personal-access-tokens/{id}": { "PATCH": [ "sp:my-personal-access-tokens:manage" ], "DELETE": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/public-identities": { "GET": [ "sp:scopes:default" ] }, "/public-identities-config": { "GET": [ "idn:public-identity-config:read", "idn:public-identity-config:manage" ], "PUT": [ "idn:public-identity-config:manage" ] }, "/requestable-objects": { "GET": [ "idn:requestable-objects:read" ] }, "/revocable-objects": { "GET": [ "idn:requestable-objects:read" ] }, "/roles": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}/assigned-identities": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/{roleId}/dimensions": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{roleId}/dimensions/{dimensionId}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{roleId}/dimensions/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{roleId}/dimensions/{dimensionId}/access-profiles": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/{roleId}/dimensions/{dimensionId}/entitlements": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/saved-searches": { "POST": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ] }, "/saved-searches/{id}": { "PUT": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ], "DELETE": [ "sp:saved-search:manage" ] }, "/saved-searches/{id}/execute": { "POST": [ "sp:saved-search:manage" ] }, "/scheduled-searches": { "POST": [ "sp:scheduled-search:manage" ], "GET": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/{id}": { "PUT": [ "sp:scheduled-search:manage" ], "DELETE": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/{id}/unsubscribe": { "POST": [ "sp:scopes:all" ] }, "/search": { "POST": [ "sp:search:read" ] }, "/search/count": { "POST": [ "sp:search:read" ] }, "/search/aggregate": { "POST": [ "sp:search:read" ] }, "/search/{index}/{id}": { "GET": [ "sp:search:read" ] }, "/segments": { "POST": [ "idn:segment:manage" ], "GET": [ "idn:segment:read", "idn:segment:manage" ] }, "/segments/{id}": { "GET": [ "idn:segment:read", "idn:segment:manage" ], "DELETE": [ "idn:segment:manage" ], "PATCH": [ "idn:segment:manage" ] }, "/service-desk-integrations": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/{id}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/types": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/templates/{scriptName}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/status-check-configuration": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ] }, "/query-password-info": { "POST": [ "idn:password-info:read" ] }, "/set-password": { "POST": [ "idn:password-change:manage" ] }, "/password-change-status/{id}": { "GET": [ "idn:password-change:read" ] }, "/password-dictionary": { "GET": [ "idn:password-dictionary:read", "idn:password-dictionary:manage" ], "PUT": [ "idn:password-dictionary:manage" ] }, "/password-org-config": { "GET": [ "idn:password-org-config:read" ], "PUT": [ "idn:password-org-config:manage" ], "POST": [ "idn:password-org-config:manage" ] }, "/reports/{taskResultId}/result": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/reports/run": { "POST": [ "sp:report:manage" ] }, "/reports/{id}/cancel": { "POST": [ "sp:report:manage" ] }, "/reports/{taskResultId}": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/sod-policies": { "POST": [ "idn:sod-policy:manage" ], "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ] }, "/sod-policies/{id}": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ], "PATCH": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/evaluate": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/{id}/schedule": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/{id}/violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-policies/sod-violation-report-status/{reportResultId}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/predict": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/check": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download/{fileName}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/ssf/streams": { "POST": [ "sp:ssf-transmitter-streams:manage" ], "GET": [ "sp:ssf-transmitter-streams:manage" ], "PATCH": [ "sp:ssf-transmitter-streams:manage" ], "PUT": [ "sp:ssf-transmitter-streams:manage" ], "DELETE": [ "sp:ssf-transmitter-streams:manage" ] }, "/ssf/streams/status": { "GET": [ "sp:ssf-transmitter-streams:manage" ], "POST": [ "sp:ssf-transmitter-streams:manage" ] }, "/ssf/streams/verify": { "POST": [ "sp:ssf-transmitter-streams:manage" ] }, "/sources": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/{id}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/provisioning-policies": { "GET": [ "idn:provisioning-policy:read", "idn:provisioning-policy:manage" ], "POST": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/{usageType}": { "GET": [ "idn:provisioning-policy-source:read", "idn:provisioning-policy:read", "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PUT": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PATCH": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "DELETE": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/bulk-update": { "POST": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/schemas": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/schedules": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/{sourceId}/schedules/{scheduleType}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/schemas/{schemaId}": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "PUT": [ "idn:source-schema:manage" ], "PATCH": [ "idn:source-schema:manage" ], "DELETE": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/source-health": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/{id}/schemas/accounts": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{id}/schemas/entitlements": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/upload-connector-file": { "POST": [ "idn:sources-admin:manage" ] }, "/sources/{sourceId}/connections": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/{id}/correlation-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/sources/{sourceId}/password-policies": { "GET": [ "idn:password-policy:read" ], "PATCH": [ "idn:sources:manage" ] }, "/sources/{sourceId}/connector/check-connection": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/peek-resource-objects": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/ping-cluster": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/test-configuration": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{id}/connectors/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ] }, "/sources/{sourceId}/native-change-detection-config": { "GET": [ "idn:sources:read" ], "PUT": [ "idn:sources:update" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{id}/remove-accounts": { "POST": [ "idn:accounts:manage" ] }, "/sources/{id}/load-accounts": { "POST": [ "idn:sources:manage" ] }, "/sources/{id}/load-uncorrelated-accounts": { "POST": [ "idn:sources:manage" ] }, "/tagged-objects": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tagged-objects/{type}": { "GET": [ "idn:tag:read", "idn:tag:manage" ] }, "/tagged-objects/{type}/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "PUT": [ "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-add": { "POST": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-remove": { "POST": [ "idn:tag:manage" ] }, "/tags": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tags/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/transforms": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "POST": [ "idn:transform:manage" ] }, "/transforms/{id}": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "PUT": [ "idn:transform:manage" ], "DELETE": [ "idn:transform:manage" ] }, "/work-items": { "GET": [ "sp:scopes:all" ] }, "/work-items/completed": { "GET": [ "sp:scopes:all" ] }, "/work-items/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/completed/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/summary": { "GET": [ "sp:scopes:all" ] }, "/work-items/{id}": { "GET": [ "sp:scopes:all" ], "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/approve/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/reject/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/bulk-approve/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/bulk-reject/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/submit-account-selection": { "POST": [ "sp:scopes:all" ] }, "/workflows": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "POST": [ "sp:workflow:manage" ] }, "/workflows/{id}": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "PUT": [ "sp:workflow:manage" ], "PATCH": [ "sp:workflow:manage" ], "DELETE": [ "sp:workflow:manage" ] }, "/workflows/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/{id}/executions": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/history": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/history-v2": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/cancel": { "POST": [ "sp:workflow-execute:external" ] }, "/workflow-library": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/actions": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/triggers": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/operators": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflows/{id}/external/oauth-clients": { "POST": [ "sp:workflow:manage" ] }, "/workflows/execute/external/{id}": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/execute/external/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/source-usages/{sourceId}/status": { "GET": [ "idn:identity-history:manage" ] }, "/source-usages/{sourceId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/account-usages/{accountId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/identity-profiles/identity-preview": { "POST": [ "idn:identity-profile:manage" ] }, "/work-items/{id}/forward": { "POST": [ "sp:scopes:all" ] }, "/accounts/search-attribute-config": { "POST": [ "idn:account-config:manage" ], "GET": [ "idn:account-config:read", "idn:account-config:manage" ] }, "/accounts/search-attribute-config/{name}": { "GET": [ "idn:account-config:read", "idn:account-config:manage" ], "DELETE": [ "idn:account-config:manage" ], "PATCH": [ "idn:account-config:manage" ] }, "/access-model-metadata/attributes": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/attributes/{key}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-model-metadata/attributes/{key}/values": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/attributes/{key}/values/{value}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-model-metadata/bulk-update/filter": { "POST": [ "idn:entitlement:manage" ] }, "/access-model-metadata/bulk-update/query": { "POST": [ "idn:entitlement:manage" ] }, "/access-model-metadata/bulk-update/ids": { "POST": [ "idn:entitlement:manage" ] }, "/access-profiles/bulk-update-requestable": { "POST": [ "idn:access-profile:manage" ] }, "/ai-access-request-recommendations": { "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage" ] }, "/ai-access-request-recommendations/config": { "GET": [ "iai:configuration:read", "iai:configuration:manage" ], "PUT": [ "iai:configuration:read", "iai:configuration:manage" ] }, "/ai-access-request-recommendations/ignored-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/requested-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/viewed-items": { "POST": [ "iai:access-request-recommender:manage" ], "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/viewed-items/bulk-create": { "POST": [ "iai:access-request-recommender:manage" ] }, "/authorization/custom-user-levels": { "POST": [ "idn:user-level:manage" ], "GET": [ "idn:user-level:manage" ] }, "/authorization/custom-user-levels/{id}/publish": { "POST": [ "idn:user-level:manage" ] }, "/authorization/custom-user-levels/{id}": { "GET": [ "idn:user-level:manage" ], "DELETE": [ "idn:user-level:manage" ], "PATCH": [ "idn:user-level:manage" ] }, "/authorization/authorization-assignable-right-sets": { "GET": [ "idn:user-level:manage" ] }, "/authorization/user-levels/{id}/identities": { "GET": [ "idn:user-level:read", "idn:user-level:manage" ] }, "/authorization/user-levels/get-identity-count": { "POST": [ "idn:user-level:read", "idn:user-level:manage" ] }, "/auth-profiles": { "GET": [ "sp:auth-profile:read" ] }, "/auth-profiles/{id}": { "GET": [ "sp:auth-profile:read" ], "PATCH": [ "sp:auth-profile:update" ] }, "/entitlements": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/{id}": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ], "PATCH": [ "idn:entitlement:manage" ] }, "/entitlements/{id}/parents": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/{id}/children": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/bulk-update": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/{id}/entitlement-request-config": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ], "PUT": [ "idn:entitlement:manage" ] }, "/entitlements/reset/sources/{id}": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/{id}/access-model-metadata/{attributeKey}/values/{attributeValue}": { "POST": [ "idn:entitlement:manage" ], "DELETE": [ "idn:entitlement:manage" ] }, "/entitlements/aggregate/sources/{id}": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/identities/{id}/entitlements": { "GET": [ "idn:entitlement:read" ] }, "/generate-password-reset-token/digit": { "POST": [ "idn:password-digit-token:create" ] }, "/historical-identities": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshot-summary": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots/{date}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots/{date}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/common-access": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "POST": [ "iai:access-modeling:manage" ] }, "/common-access/update-status": { "POST": [ "iai:access-modeling:manage" ] }, "/historical-identities/{id}/events": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/start-date": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/compare": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/compare/{access-type}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/identities/invite": { "POST": [ "idn:password-user-invite:manage" ] }, "/identities/{id}/verification/account/send": { "POST": [ "idn:password:user-invite" ] }, "/identities/process": { "POST": [ "idn:identity:process", "idn:identity:manage" ] }, "/identity-attributes": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "POST": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/{name}": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "PUT": [ "idn:identity-profile-attribute:manage" ], "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/bulk-delete": { "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/mail-from-attributes": { "PUT": [ "sp:notification-mail-from-attributes:write" ] }, "/mail-from-attributes/{identity}": { "GET": [ "sp:notification-mail-from-attributes:read" ] }, "/generic-approvals": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-administration:read", "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-administration:read", "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/approve": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/attributes": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/comments": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/reassign": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/reject": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/config/{id}": { "GET": [ "sp:approvals:read" ] }, "/generic-approvals/config/{id}/{scope}": { "PUT": [ "sp:approvals:write" ], "DELETE": [ "sp:approvals:write" ] }, "/generic-approvals/bulk-approve": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/bulk-reject": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/bulk-cancel": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/bulk-reassign": { "POST": [ "sp:approvals:write" ] }, "/machine-accounts": { "GET": [ "idn:mis-account:read" ] }, "/machine-accounts/{id}": { "GET": [ "idn:mis-account:read" ], "PATCH": [ "idn:mis-account:manage" ] }, "/sources/{sourceId}/machine-classification-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/machine-account-mappings": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/machine-mappings": { "PUT": [ "idn:sources:manage" ] }, "/sources/{sourceId}/classify": { "POST": [ "idn:account:update" ], "DELETE": [ "idn:account:update" ], "GET": [ "idn:account:update" ] }, "/sources/{sourceId}/declassify": { "POST": [ "idn:account:update" ] }, "/sources/{sourceId}/aggregate-agents": { "POST": [ "idn:mis-agents:aggregate" ] }, "/sources/{sourceId}/subtypes": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/{sourceId}/subtypes/{technicalName}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/subtypes/{subtypeId}": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/accounts/{id}/classify": { "POST": [ "idn:account:update" ] }, "/machine-identities": { "GET": [ "idn:mis-identity:read", "idn:mis-identity:manage" ], "POST": [ "idn:mis-identity:manage" ] }, "/machine-identities/{id}": { "GET": [ "idn:mis-identity:read" ], "PATCH": [ "idn:mis-identity:manage" ], "DELETE": [ "idn:mis-identity:manage" ] }, "/machine-identity-user-entitlements": { "GET": [ "idn:mis-identity:read" ] }, "/notification-template-defaults": { "GET": [ "idn:notification-template-defaults:read" ] }, "/notification-templates": { "GET": [ "idn:notification-templates:read" ], "POST": [ "idn:notification-templates:create" ] }, "/notification-templates/{id}": { "GET": [ "idn:notification-templates:read" ] }, "/notification-templates/bulk-delete": { "POST": [ "idn:notification-templates:delete" ] }, "/org-config": { "GET": [ "idn:org-configs:read", "idn:org-configs:manage" ], "PATCH": [ "idn:org-configs:manage" ] }, "/org-config/valid-time-zones": { "GET": [ "idn:org-configs:read", "idn:org-configs-user:read" ] }, "/outlier-summaries": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-summaries/latest": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/{outlierId}/contributing-features": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/{outlierId}/feature-details/{contributingFeatureName}/access-items": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/ignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/unignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/export": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-feature-summaries/{outlierFeatureId}": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/parameter-storage/attestation": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/parameter-storage/parameters": { "POST": [ "sp:parameter-storage:manage" ], "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/parameter-storage/parameters/{id}": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ], "PATCH": [ "sp:parameter-storage:manage" ], "DELETE": [ "sp:parameter-storage:manage" ] }, "/parameter-storage/parameters/{id}/references": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/parameter-storage/specification": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/notification-template-context": { "GET": [ "idn:notification-templates:read" ] }, "/notification-preferences/{key}": { "GET": [ "idn:notification-preferences:read" ] }, "/reassignment-configurations/types": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "POST": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "PUT": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}/{configType}": { "DELETE": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}/evaluate/{configType}": { "GET": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/tenant-config": { "GET": [ "idn:reassignment-tenant-configuration:read" ], "PUT": [ "idn:reassignment-tenant-configuration:update" ] }, "/recommendations/request": { "POST": [ "iai:decisions:manage" ] }, "/recommendations/config": { "GET": [ "iai:configuration:read" ], "PUT": [ "iai:configuration:manage" ] }, "/role-insights/requests": { "POST": [ "iai:role-insights" ] }, "/role-insights/requests/{id}": { "GET": [ "iai:role-insights" ] }, "/role-insights/summary": { "GET": [ "iai:role-insights" ] }, "/role-insights": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes/download": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/current-entitlements": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes/{entitlementId}/identities": { "GET": [ "iai:role-insights" ] }, "/role-mining-sessions": { "POST": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}": { "PATCH": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/status": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}/applications": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}/entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularity-distribution": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/edit-entitlements": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/identities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}/download": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/provision": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/excluded-entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/saved": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/{potentialRoleId}/sources/{sourceId}/identityUsage": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-propagation": { "POST": [ "idn:role-propagation:write" ] }, "/role-propagation/{rolePropagationId}/status": { "GET": [ "idn:role-propagation:read" ] }, "/role-propagation/is-running": { "GET": [ "idn:role-propagation:read" ] }, "/role-propagation/terminate": { "POST": [ "idn:role-propagation:write" ] }, "/role-propagation-config": { "PUT": [ "idn:role-propagation-config:write" ], "GET": [ "idn:role-propagation-config:read" ] }, "/roles/{id}/entitlements": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/send-test-notification": { "POST": [ "idn:notification-templates:create" ] }, "/sim-integrations/{id}": { "PUT": [ "idn:service-desk-integration:manage" ], "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations/{id}/beforeProvisioningRule": { "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/sp-config/export": { "POST": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/export/{id}": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/export/{id}/download": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/import": { "POST": [ "sp:config:manage" ] }, "/sp-config/import/{id}": { "GET": [ "sp:config:manage" ] }, "/sp-config/import/{id}/download": { "GET": [ "sp:config:manage" ] }, "/sp-config/config-objects": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sources/{id}/attribute-sync-config": { "GET": [ "idn:attr-sync-source-config:read", "idn:attr-sync-source-config:manage" ], "PUT": [ "idn:attr-sync-source-config:manage" ] }, "/sources/{id}/synchronize-attributes": { "POST": [ "idn:attr-sync-source-config:manage" ] }, "/sources/{id}/entitlement-request-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/sources/{sourceId}/load-entitlements": { "POST": [ "idn:entitlement:manage" ] }, "/task-status/{id}": { "GET": [ "idn:task-management:read", "idn:task-management:write" ], "PATCH": [ "idn:task-management:write" ] }, "/task-status": { "GET": [ "idn:task-management:read", "idn:task-management:write" ] }, "/task-status/pending-tasks": { "GET": [ "idn:task-management:read", "idn:task-management:write" ], "HEAD": [ "idn:task-management:read", "idn:task-management:write" ] }, "/tenant": { "GET": [ "sp:tenant:read" ] }, "/tenant-context": { "GET": [ "idn:tenant-context:read" ], "PATCH": [ "idn:tenant-context:write" ] }, "/triggers": { "GET": [ "sp:trigger-service-subscriptions:read" ] }, "/trigger-subscriptions": { "POST": [ "sp:trigger-service-subscriptions:manage" ], "GET": [ "sp:trigger-service-subscriptions:read", "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/{id}": { "PUT": [ "sp:trigger-service-subscriptions:manage" ], "PATCH": [ "sp:trigger-service-subscriptions:manage" ], "DELETE": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/validate-filter": { "POST": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-invocations/status": { "GET": [ "sp:trigger-service-invocation-status:read", "sp:trigger-service-invocation-status:manage" ] }, "/trigger-invocations/test": { "POST": [ "sp:trigger-service-invocation-status:manage" ] }, "/ui-metadata/tenant": { "GET": [ "idn:ui-access-metadata-page:read" ], "PUT": [ "idn:ui-access-metadata-page:manage" ] }, "/verified-from-addresses": { "GET": [ "idn:notification-templates:read" ], "POST": [ "idn:notification-templates:create" ] }, "/verified-from-addresses/{id}": { "DELETE": [ "idn:notification-templates:delete" ] }, "/verified-domains": { "GET": [ "sp:notification-dkim-attributes:read" ], "POST": [ "sp:notification-verify-domain-dkim:write" ] }, "/workgroups": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "POST": [ "idn:workgroup:manage" ] }, "/workgroups/{id}": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "DELETE": [ "idn:workgroup:manage" ], "PATCH": [ "idn:workgroup:manage" ] }, "/workgroups/bulk-delete": { "POST": [ "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/connections": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/members": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/members/bulk-add": { "POST": [ "idn:workgroup:write" ] }, "/workgroups/{workgroupId}/members/bulk-delete": { "POST": [ "idn:workgroup:write" ] }, "/form-definitions": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "DELETE": [ "sp:forms:manage" ], "PATCH": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}/data-source": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/export": { "GET": [ "sp:config:read", "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/forms-action-dynamic-schema": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/import": { "POST": [ "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/{formDefinitionID}/upload": { "POST": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}/file/{fileID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-instances": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-instances/{formInstanceID}/file/{fileID}": { "GET": [ "sp:forms:manage" ] }, "/form-definitions/predefined-select-options": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/access-request-identity-metrics/{identityId}/requested-objects/{requestedObjectId}/type/{type}": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-approvals:manage" ] }, "/icons/{objectType}/{objectId}": { "PUT": [ "idn:icons:manage" ], "DELETE": [ "idn:icons:manage" ] }, "/suggested-entitlement-description-batches/{batchId}/stats": { "GET": [ "idn:sed:read" ] }, "/suggested-entitlement-description-batches": { "GET": [ "idn:sed:read" ], "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-approvals": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-assignments": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-descriptions": { "GET": [ "idn:sed:read" ], "PATCH": [ "idn:sed:write" ] }, "/sources/{sourceId}/discover-applications": { "POST": [ "idn:application-discovery:write" ] }, "/discovered-applications": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications-template": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications": { "POST": [ "idn:application-discovery:write" ] }, "/source-apps/{id}": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "PATCH": [ "idn:app-roles:manage" ], "DELETE": [ "idn:app-roles:manage" ] }, "/source-apps/bulk-update": { "POST": [ "idn:app-roles:manage" ] }, "/source-apps/assigned": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "POST": [ "idn:app-roles:manage" ] }, "/source-apps/all": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps/{id}/access-profiles": { "GET": [ "idn:app-roles:manage" ] }, "/source-apps/{id}/access-profiles/bulk-remove": { "POST": [ "idn:app-roles:manage" ] }, "/user-apps/{id}": { "PATCH": [ "idn:app-roles:manage" ] }, "/user-apps/{id}/available-accounts": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps/all": { "GET": [ "idn:app-roles:manage" ] }, "/roles/{id}/access-model-metadata/{attributeKey}/values/{attributeValue}": { "POST": [ "idn:role:update", "idn:role-checked:update" ], "DELETE": [ "idn:role:delete", "idn:role-checked:delete", "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/ids": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/filter": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/query": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/id": { "GET": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update": { "GET": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/filter": { "POST": [ "idn:role-unchecked:read", "idn:role-unchecked:manage" ] }, "/criteria/privilege": { "POST": [ "sp:gov-criteria:write" ], "GET": [ "sp:gov-criteria:read" ] }, "/criteria/privilege/{criteriaId}": { "PUT": [ "sp:gov-criteria:write" ], "GET": [ "sp:gov-criteria:read" ], "DELETE": [ "sp:gov-criteria:write" ] }, "/criteria-config/privilege/{criteriaConfigId}": { "PATCH": [ "sp:gov-criteria:write" ], "GET": [ "sp:gov-criteria:read" ] }, "/criteria-config/privilege": { "GET": [ "sp:gov-criteria:read" ] } }, "v2026": { "/access-request-config": { "GET": [ "idn:access-request-config:read" ], "PUT": [ "idn:access-request-config:manage" ] }, "/entitlement-connections": { "GET": [ "idn:entitlement-connections:list" ], "PATCH": [ "idn:entitlement-connections:manage" ], "POST": [ "idn:entitlement-connections:manage" ] }, "/entitlement-connections/current-identity": { "GET": [ "idn:entitlement-connections:read" ] }, "/entitlement-connections/{connectionId}": { "PATCH": [ "idn:entitlement-connections:manage" ] }, "/entitlements": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/account/{accountId}/entitlements": { "GET": [ "idn:entitlement:read" ] }, "/entitlements/bulk-update": { "POST": [ "idn:entitlement:update", "idn:source-checked:update" ] }, "/entitlements/{id}": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ], "PATCH": [ "idn:entitlement:manage", "idn:entitlement:update" ] }, "/entitlements/{id}/parents": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/{id}/children": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/task-status/{id}": { "GET": [ "idn:task-management:read", "idn:task-management:write" ], "PATCH": [ "idn:task-management:write" ] }, "/task-status": { "GET": [ "idn:task-management:read", "idn:task-management:write" ] }, "/account-requests/deletion": { "GET": [ "idn:account-requests:read", "idn:account-requests:management" ] }, "/account-requests/account/{accountId}/delete": { "POST": [ "idn:account-requests:create" ] }, "/machine-identities": { "GET": [ "idn:mis-identity:read", "idn:mis-identity:manage" ], "POST": [ "idn:mis-identity:manage" ] }, "/machine-identities/{id}": { "GET": [ "idn:mis-identity:read" ], "PATCH": [ "idn:mis-identity:manage" ], "DELETE": [ "idn:mis-identity:manage" ] }, "/notification-template-variables/{key}/{medium}": { "GET": [ "idn:notification-templates:read" ] }, "/access-profiles": { "GET": [ "idn:access-profile:read" ], "POST": [ "idn:access-profile:manage", "idn:entitlement:read", "idn:identity:read", "idn:sources:read" ] }, "/access-profiles/{id}": { "GET": [ "idn:access-profile:read" ], "PATCH": [ "idn:access-profile:manage" ], "DELETE": [ "idn:access-profile:manage" ] }, "/access-profiles/bulk-delete": { "POST": [ "idn:access-profile:manage" ] }, "/access-profiles/{id}/entitlements": { "GET": [ "idn:access-profile:read" ] }, "/access-requests": { "POST": [ "idn:access-request:manage", "idn:access-request-self:manage" ] }, "/access-requests/cancel": { "POST": [ "idn:access-request:manage" ] }, "/access-requests/bulk-cancel": { "POST": [ "idn:access-request-administration:manage" ] }, "/access-requests/accounts-selection": { "POST": [ "idn:access-request:create" ] }, "/access-request-status": { "GET": [ "idn:access-request-status:read" ] }, "/access-request-administration": { "GET": [ "idn:access-request-administration:read" ] }, "/access-request-approvals/pending": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/completed": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/{approvalId}/approve": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/{approvalId}/reject": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/{approvalId}/forward": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/approval-summary": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/bulk-approve": { "POST": [ "idn:access-request:manage" ] }, "/access-request-approvals/{accessRequestId}/approvers": { "GET": [ "idn:access-request-administration:read" ] }, "/accounts": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "POST": [ "idn:accounts:manage" ] }, "/accounts/{id}": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "PATCH": [ "idn:accounts:manage" ], "PUT": [ "idn:accounts:manage" ], "DELETE": [ "idn:accounts:manage" ] }, "/accounts/{id}/entitlements": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ] }, "/accounts/{id}/reload": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/enable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/disable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/unlock": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/{id}/remove": { "POST": [ "idn:accounts:manage" ] }, "/account-activities": { "GET": [ "sp:scopes:all" ] }, "/account-activities/{id}": { "GET": [ "sp:scopes:all" ] }, "/api-usage/count": { "GET": [ "sp:api-usage:read" ] }, "/api-usage/summary": { "GET": [ "sp:api-usage:read" ] }, "/auth-org/network-config": { "GET": [ "sp:auth-org:read" ], "POST": [ "sp:auth-org:manage" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/lockout-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/service-provider-config": { "GET": [ "sp:auth-org:read " ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/session-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-users/{id}": { "GET": [ "sp:auth-user:read" ], "PATCH": [ "sp:auth-user:manage" ] }, "/brandings": { "GET": [ "idn:branding:read" ], "POST": [ "idn:branding:manage" ] }, "/brandings/{name}": { "GET": [ "idn:branding:read" ], "PUT": [ "idn:branding:manage" ], "DELETE": [ "idn:branding:manage" ] }, "/campaigns": { "GET": [ "idn:campaign:read", "idn:campaign:manage", "idn:campaign-report:read", "idn:campaign-report:manage" ], "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PATCH": [ "idn:campaign:read", "idn:campaign:manage" ] }, "/campaigns/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/activate": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/complete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/delete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/{id}/run-remediation-scan": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/{id}/reports": { "GET": [ "idn:campaign-report:read", "idn:campaign-report:manage" ] }, "/campaigns/{id}/run-report/{type}": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/reports-configuration": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PUT": [ "idn:campaign:manage" ] }, "/campaign-filters": { "POST": [ "idn:campaign-filter:manage" ], "GET": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/{id}": { "GET": [ "idn:campaign-filter:read" ], "POST": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/delete": { "POST": [ "idn:campaign-filter:manage" ] }, "/campaign-templates": { "POST": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ] }, "/campaign-templates/{id}": { "PATCH": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}/schedule": { "GET": [ "idn:campaign-temlates:read" ], "PUT": [ "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/{id}/generate": { "POST": [ "idn:campaign-template:manage" ] }, "/certifications": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/access-review-items": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/decide": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/sign-off": { "POST": [ "idn:campaign:manage" ] }, "/certifications/{id}/decision-summary": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/identity-summaries": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/access-summaries/{type}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/identity-summaries/{identitySummaryId}": { "GET": [ "idn:campaign:read" ] }, "/certifications/{certificationId}/access-review-items/{itemId}/permissions": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/reviewers": { "GET": [ "idn:campaign:read" ] }, "/certifications/{id}/reassign-async": { "POST": [ "idn:campaign:manage" ] }, "/certification-tasks/{id}": { "GET": [ "idn:campaign:read" ] }, "/certification-tasks": { "GET": [ "idn:campaign:read" ] }, "/connector-customizers": { "GET": [ "sp:connector:read" ], "POST": [ "sp:connector:manage" ] }, "/connector-customizers/{id}": { "GET": [ "sp:connector:read" ], "PUT": [ "sp:connector:manage" ], "DELETE": [ "sp:connector:manage" ] }, "/connector-customizers/{id}/versions": { "POST": [ "sp:connector:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}": { "GET": [ "sp:config-object-mapping:read", "sp:config-object-mapping:manage" ], "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/{objectMappingId}": { "DELETE": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/bulk-create": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/object-mappings/{sourceOrg}/bulk-patch": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/scheduled-actions": { "GET": [ "sp:config-scheduled-action:read", "sp:config-scheduled-action:manage" ], "POST": [ "sp:config-scheduled-action:manage" ] }, "/configuration-hub/scheduled-actions/{id}": { "PATCH": [ "sp:config-scheduled-action:manage" ], "DELETE": [ "sp:config-scheduled-action:manage" ] }, "/configuration-hub/backups/uploads": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "POST": [ "sp:config-backup:manage" ] }, "/configuration-hub/backups/uploads/{id}": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "DELETE": [ "sp:config-backup:manage" ] }, "/configuration-hub/backups": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ] }, "/configuration-hub/backups/{id}": { "DELETE": [ "sp:config-backup:manage" ] }, "/configuration-hub/drafts": { "GET": [ "sp:config-draft:read", "sp:config-draft:manage" ] }, "/configuration-hub/drafts/{id}": { "DELETE": [ "sp:config-draft:manage" ] }, "/configuration-hub/deploys": { "GET": [ "sp:config-deploy:read", "sp:config-deploy:manage" ], "POST": [ "sp:config-deploy:manage" ] }, "/configuration-hub/deploys/{id}": { "GET": [ "sp:config-deploy:read", "sp:config-deploy:manage" ] }, "/connectors/{scriptName}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "DELETE": [ "idn:connector-config:manage" ], "PATCH": [ "idn:connector-config:manage" ] }, "/connectors": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "POST": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/translations/{locale}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/source-template": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/{scriptName}/correlation-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connector-rules": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "POST": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/{id}": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "PUT": [ "idn:rule-management-connector:manage" ], "DELETE": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/validate": { "POST": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ] }, "/das/tasks": { "GET": [ "das:task:read", "das:task:manage" ] }, "/das/tasks/{id}": { "GET": [ "das:task:read", "das:task:manage" ], "DELETE": [ "das:task:manage" ] }, "/das/tasks/cancel/{id}": { "POST": [ "das:task:manage" ] }, "/das/tasks/rerun/{id}": { "POST": [ "das:task:manage" ] }, "/das/tasks/schedules": { "GET": [ "das:task:read", "das:task:manage" ], "POST": [ "das:task:manage" ] }, "/das/tasks/schedules/{id}": { "GET": [ "das:task:read", "das:task:manage" ], "PUT": [ "das:task:manage" ], "DELETE": [ "das:task:manage" ] }, "/das/applications": { "POST": [ "das:applications:manage" ], "GET": [ "das:applications:read", "das:applications:manage" ] }, "/das/applications/{id}": { "PUT": [ "das:applications:manage" ], "DELETE": [ "das:applications:manage" ], "GET": [ "das:applications:read", "das:applications:manage" ] }, "/das/owners/applications/{appId}": { "GET": [ "das:owners:read", "das:owners:manage" ] }, "/das/owners/resources/{resourceId}": { "GET": [ "das:owners:read", "das:owners:manage" ] }, "/das/owners/{ownerIdentityId}/resources": { "GET": [ "das:owners:read", "das:owners:manage" ] }, "/das/owners/assign": { "POST": [ "das:owners:manage" ] }, "/das/owners/{sourceIdentityId}/reassign/{destinationIdentityId}": { "POST": [ "das:owners:manage" ] }, "/das/owners/reelect": { "POST": [ "das:owners:manage" ] }, "/data-segments/membership/{identityId}": { "GET": [ "idn:data-segment:read" ] }, "/data-segments/user-enabled/{identityId}": { "GET": [ "idn:data-segment:read" ] }, "/data-segments/{segmentId}": { "GET": [ "idn:data-segment:read" ], "POST": [ "idn:data-segment:manage" ], "PATCH": [ "idn:data-segment:manage" ], "DELETE": [ "idn:data-segment:manage" ] }, "/data-segments": { "GET": [ "idn:data-segment:read" ], "POST": [ "idn:data-segment:manage" ] }, "/identities": { "GET": [ "idn:identity:read", "idn:identity:manage" ] }, "/identities/{id}": { "GET": [ "idn:identity:read", "idn:identity:manage" ], "DELETE": [ "idn:identity:manage" ] }, "/identities-accounts/{id}/enable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/{id}/disable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/enable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/disable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities/{identityId}/ownership": { "GET": [ "idn:identity:read" ] }, "/identities/{id}/reset": { "POST": [ "idn:identity:manage" ] }, "/identities/{identityId}/role-assignments": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/identities/{identityId}/role-assignments/{assignmentId}": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/identities/{identity-id}/set-lifecycle-state": { "POST": [ "idn:identity-lifecycle-state:manage" ] }, "/identity-profiles/{identity-profile-id}/lifecycle-states": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "POST": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/identity-profiles/{identity-profile-id}/lifecycle-states/{lifecycle-state-id}": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "PATCH": [ "idn:identity-profile-lifecycle-state:manage" ], "DELETE": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/identity-profiles": { "GET": [ "idn:identity-profile:read" ], "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/bulk-delete": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/export": { "GET": [ "idn:identity-profile:read" ] }, "/identity-profiles/import": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}": { "GET": [ "idn:identity-profile:read" ], "DELETE": [ "idn:identity-profile:manage" ], "PATCH": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/default-identity-attribute-config": { "GET": [ "idn:identity-profile:manage" ] }, "/identity-profiles/{identity-profile-id}/process-identities": { "POST": [ "idn:identity-profile:manage" ] }, "/intelligence/identities": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/identities/{id}/accounts": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/identities/{id}/outliers/rare-access": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/identities/{id}/access-history/access-items": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/identities/{id}/access-history/certifications": { "GET": [ "sp:identity-sec-intel:read" ] }, "/jit-activations/activate": { "POST": [ "idn:jit-activation-workflow:activate", "idn:jit-activation-workflow:manage" ] }, "/jit-activations/deactivate": { "POST": [ "idn:jit-activation-workflow:deactivate", "idn:jit-activation-workflow:manage" ] }, "/jit-activations/extend": { "POST": [ "idn:jit-activation-workflow:extend", "idn:jit-activation-workflow:manage" ] }, "/jit-activation-config/{configType}": { "GET": [ "idn:jit-policy:read", "idn:jit-policy:manage" ], "PATCH": [ "idn:jit-policy:update", "idn:jit-policy:manage" ] }, "/launchers": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "POST": [ "sp:launcher-admin:write" ] }, "/launchers/{launcherID}": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "PUT": [ "sp:launcher-admin:write" ], "DELETE": [ "sp:launcher-admin:delete" ] }, "/launchers/{launcherID}/launch": { "POST": [ "sp:launcher-user:launch" ] }, "/managed-clients": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clients/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage", "idn:managed-client-status:read", "idn:managed-client-status:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clients/{id}/status": { "GET": [ "idn:managed-client-status:read" ] }, "/managed-clients/{id}/health-indicators": { "GET": [ "idn:remote-client:manage" ] }, "/managed-clusters": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}/log-config": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PUT": [ "idn:remote-client:manage" ] }, "/managed-clusters/{id}/manualUpgrade": { "POST": [ "idn:managed-cluster-upgrade:manage" ] }, "/managed-cluster-types": { "GET": [ "idn:managed-cluster-types:read", "idn:managed-cluster-types:manage" ], "POST": [ "idn:managed-cluster-types:manage" ] }, "/managed-cluster-types/{id}": { "GET": [ "idn:managed-cluster-types:read", "idn:managed-cluster-types:manage" ], "PATCH": [ "idn:managed-cluster-types:manage" ], "DELETE": [ "idn:managed-cluster-types:manage" ] }, "/mfa/okta-verify/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/duo-web/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/kba/config": { "GET": [ "idn:mfa-kba:read" ] }, "/mfa/kba/config/answers": { "POST": [ "idn:mfa-kba:authenticate" ] }, "/mfa/{method}/test": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ] }, "/multihosts": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/types": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ], "DELETE": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "PATCH": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources/testConnection": { "POST": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources/{sourceId}/testConnection": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/sources": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/sources/errors": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/sources/bulk-delete": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ] }, "/multihosts/{multihostId}/acctAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/multihosts/{multiHostId}/entitlementAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/non-employee-records": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-records/{id}": { "GET": [ "idn:nelm:read" ], "PUT": [ "idn:nelm:manage" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-records/bulk-delete": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-requests": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-requests/{id}": { "GET": [ "idn:nelm:read" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-requests/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employees/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-sources/{id}/non-employee-bulk-upload/status": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{id}/schema-attributes-template/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/{id}/approve": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/{id}/reject": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/{sourceId}/schema-attributes": { "GET": [ "idn:nelm:read" ], "POST": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/{sourceId}/schema-attributes/{attributeId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/oauth-clients": { "GET": [ "sp:oauth-client:read", "sp:oauth-client:manage" ], "POST": [ "sp:oauth-client:manage" ] }, "/oauth-clients/{id}": { "GET": [ "sp:oauth-client:manage", "sp:oauth-client:read" ], "DELETE": [ "sp:oauth-client:manage" ], "PATCH": [ "sp:oauth-client:manage" ] }, "/password-sync-groups": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "POST": [ "idn:password-sync-group:manage" ] }, "/password-sync-groups/{id}": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "PUT": [ "idn:password-sync-group:manage" ], "DELETE": [ "idn:password-sync-group:manage" ] }, "/password-policies/{id}": { "GET": [ "idn:password-policy:read" ], "PUT": [ "idn:password-policy:write" ], "DELETE": [ "idn:password-policy:write" ] }, "/password-policies": { "POST": [ "idn:password-policy:write" ], "GET": [ "idn:password-policy:read" ] }, "/personal-access-tokens": { "GET": [ "sp:my-personal-access-tokens:read", "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:read", "sp:all-personal-access-tokens:manage" ], "POST": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/personal-access-tokens/{id}": { "PATCH": [ "sp:my-personal-access-tokens:manage" ], "DELETE": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/public-identities": { "GET": [ "sp:scopes:default" ] }, "/public-identities-config": { "GET": [ "idn:public-identity-config:read", "idn:public-identity-config:manage" ], "PUT": [ "idn:public-identity-config:manage" ] }, "/requestable-objects": { "GET": [ "idn:requestable-objects:read" ] }, "/revocable-objects": { "GET": [ "idn:requestable-objects:read" ] }, "/roles": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{id}/assigned-identities": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/{roleId}/dimensions": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{roleId}/dimensions/{dimensionId}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{roleId}/dimensions/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/{roleId}/dimensions/{dimensionId}/access-profiles": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/{roleId}/dimensions/{dimensionId}/entitlements": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/saved-searches": { "POST": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ] }, "/saved-searches/{id}": { "PUT": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ], "DELETE": [ "sp:saved-search:manage" ] }, "/saved-searches/{id}/execute": { "POST": [ "sp:saved-search:manage" ] }, "/scheduled-searches": { "POST": [ "sp:scheduled-search:manage" ], "GET": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/{id}": { "PUT": [ "sp:scheduled-search:manage" ], "DELETE": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/{id}/unsubscribe": { "POST": [ "sp:scopes:all" ] }, "/search": { "POST": [ "sp:search:read" ] }, "/search/count": { "POST": [ "sp:search:read" ] }, "/search/aggregate": { "POST": [ "sp:search:read" ] }, "/search/{index}/{id}": { "GET": [ "sp:search:read" ] }, "/segments": { "POST": [ "idn:segment:manage" ], "GET": [ "idn:segment:read", "idn:segment:manage" ] }, "/segments/{id}": { "GET": [ "idn:segment:read", "idn:segment:manage" ], "DELETE": [ "idn:segment:manage" ], "PATCH": [ "idn:segment:manage" ] }, "/service-desk-integrations": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/{id}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/types": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/templates/{scriptName}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/status-check-configuration": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ] }, "/query-password-info": { "POST": [ "idn:password-info:read" ] }, "/set-password": { "POST": [ "idn:password-change:manage" ] }, "/password-change-status/{id}": { "GET": [ "idn:password-change:read" ] }, "/password-dictionary": { "GET": [ "idn:password-dictionary:read", "idn:password-dictionary:manage" ], "PUT": [ "idn:password-dictionary:manage" ] }, "/password-org-config": { "GET": [ "idn:password-org-config:read" ], "PUT": [ "idn:password-org-config:manage" ], "POST": [ "idn:password-org-config:manage" ] }, "/reports/{taskResultId}/result": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/reports/run": { "POST": [ "sp:report:manage" ] }, "/reports/{id}/cancel": { "POST": [ "sp:report:manage" ] }, "/reports/{taskResultId}": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/sod-policies": { "POST": [ "idn:sod-policy:manage" ], "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ] }, "/sod-policies/{id}": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ], "PATCH": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/evaluate": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/{id}/schedule": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ] }, "/sod-policies/{id}/violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/{id}/violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-policies/sod-violation-report-status/{reportResultId}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/predict": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/check": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/{reportResultId}/download/{fileName}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/ssf/streams": { "POST": [ "sp:ssf-transmitter-streams:manage" ], "GET": [ "sp:ssf-transmitter-streams:manage" ], "PATCH": [ "sp:ssf-transmitter-streams:manage" ], "PUT": [ "sp:ssf-transmitter-streams:manage" ], "DELETE": [ "sp:ssf-transmitter-streams:manage" ] }, "/ssf/streams/status": { "GET": [ "sp:ssf-transmitter-streams:manage" ], "POST": [ "sp:ssf-transmitter-streams:manage" ] }, "/ssf/streams/verify": { "POST": [ "sp:ssf-transmitter-streams:manage" ] }, "/sources": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/{id}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/provisioning-policies": { "GET": [ "idn:provisioning-policy:read", "idn:provisioning-policy:manage" ], "POST": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/{usageType}": { "GET": [ "idn:provisioning-policy-source:read", "idn:provisioning-policy:read", "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PUT": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PATCH": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "DELETE": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/provisioning-policies/bulk-update": { "POST": [ "idn:provisioning-policy:manage" ] }, "/sources/{sourceId}/datasets": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/{sourceId}/datasets/{datasetId}": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/{sourceId}/resources": { "GET": [ "idn:sources:read", "idn:source-schema:read", "idn:sources:manage", "idn:source-schema:manage" ] }, "/sources/{sourceId}/resources/{resourceId}": { "GET": [ "idn:sources:read", "idn:source-schema:read", "idn:sources:manage", "idn:source-schema:manage" ] }, "/sources/{sourceId}/schemas": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/schedules": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/{sourceId}/schedules/{scheduleType}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/schemas/{schemaId}": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "PUT": [ "idn:source-schema:manage" ], "PATCH": [ "idn:source-schema:manage" ], "DELETE": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/source-health": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/{id}/schemas/accounts": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{id}/schemas/entitlements": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/{sourceId}/upload-connector-file": { "POST": [ "idn:sources-admin:manage" ] }, "/sources/{sourceId}/connections": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/{id}/correlation-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/sources/{sourceId}/password-policies": { "GET": [ "idn:password-policy:read" ], "PATCH": [ "idn:sources:manage" ] }, "/sources/{sourceId}/connector/check-connection": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/peek-resource-objects": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/ping-cluster": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{sourceId}/connector/test-configuration": { "POST": [ "idn:source-connector:manage" ] }, "/sources/{id}/connectors/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ] }, "/sources/{sourceId}/native-change-detection-config": { "GET": [ "idn:sources:read" ], "PUT": [ "idn:sources:update" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{id}/remove-accounts": { "POST": [ "idn:accounts:manage" ] }, "/sources/{id}/load-accounts": { "POST": [ "idn:sources:manage" ] }, "/sources/{id}/load-uncorrelated-accounts": { "POST": [ "idn:sources:manage" ] }, "/tagged-objects": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tagged-objects/{type}": { "GET": [ "idn:tag:read", "idn:tag:manage" ] }, "/tagged-objects/{type}/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "PUT": [ "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-add": { "POST": [ "idn:tag:manage" ] }, "/tagged-objects/bulk-remove": { "POST": [ "idn:tag:manage" ] }, "/tags": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tags/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/transforms": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "POST": [ "idn:transform:manage" ] }, "/transforms/{id}": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "PUT": [ "idn:transform:manage" ], "DELETE": [ "idn:transform:manage" ] }, "/work-items": { "GET": [ "sp:scopes:all" ] }, "/work-items/completed": { "GET": [ "sp:scopes:all" ] }, "/work-items/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/completed/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/summary": { "GET": [ "sp:scopes:all" ] }, "/work-items/{id}": { "GET": [ "sp:scopes:all" ], "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/approve/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/reject/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/bulk-approve/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/bulk-reject/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/{id}/submit-account-selection": { "POST": [ "sp:scopes:all" ] }, "/workflows": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "POST": [ "sp:workflow:manage" ] }, "/workflows/{id}": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "PUT": [ "sp:workflow:manage" ], "PATCH": [ "sp:workflow:manage" ], "DELETE": [ "sp:workflow:manage" ] }, "/workflows/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/{id}/executions": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/history": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/history-v2": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/{id}/cancel": { "POST": [ "sp:workflow-execute:external" ] }, "/workflow-library": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/actions": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/triggers": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/operators": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflows/{id}/external/oauth-clients": { "POST": [ "sp:workflow:manage" ] }, "/workflows/execute/external/{id}": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/execute/external/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/source-usages/{sourceId}/status": { "GET": [ "idn:identity-history:manage" ] }, "/source-usages/{sourceId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/account-usages/{accountId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/identity-profiles/identity-preview": { "POST": [ "idn:identity-profile:manage" ] }, "/work-items/{id}/forward": { "POST": [ "sp:scopes:all" ] }, "/accounts/search-attribute-config": { "POST": [ "idn:account-config:manage" ], "GET": [ "idn:account-config:read", "idn:account-config:manage" ] }, "/accounts/search-attribute-config/{name}": { "GET": [ "idn:account-config:read", "idn:account-config:manage" ], "DELETE": [ "idn:account-config:manage" ], "PATCH": [ "idn:account-config:manage" ] }, "/access-model-metadata/attributes": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/attributes/{key}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-model-metadata/attributes/{key}/values": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/attributes/{key}/values/{value}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-model-metadata/bulk-update/filter": { "POST": [ "idn:entitlement:manage" ] }, "/access-model-metadata/bulk-update/query": { "POST": [ "idn:entitlement:manage" ] }, "/access-model-metadata/bulk-update/ids": { "POST": [ "idn:entitlement:manage" ] }, "/access-profiles/bulk-update-requestable": { "POST": [ "idn:access-profile:manage" ] }, "/ai-access-request-recommendations": { "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage" ] }, "/ai-access-request-recommendations/config": { "GET": [ "iai:configuration:read", "iai:configuration:manage" ], "PUT": [ "iai:configuration:read", "iai:configuration:manage" ] }, "/ai-access-request-recommendations/ignored-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/requested-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/viewed-items": { "POST": [ "iai:access-request-recommender:manage" ], "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/viewed-items/bulk-create": { "POST": [ "iai:access-request-recommender:manage" ] }, "/authorization/custom-user-levels": { "POST": [ "idn:user-level:manage" ], "GET": [ "idn:user-level:manage" ] }, "/authorization/custom-user-levels/{id}/publish": { "POST": [ "idn:user-level:manage" ] }, "/authorization/custom-user-levels/{id}": { "GET": [ "idn:user-level:manage" ], "DELETE": [ "idn:user-level:manage" ], "PATCH": [ "idn:user-level:manage" ] }, "/authorization/authorization-assignable-right-sets": { "GET": [ "idn:user-level:manage" ] }, "/authorization/user-levels/{id}/identities": { "GET": [ "idn:user-level:read", "idn:user-level:manage" ] }, "/authorization/user-levels/get-identity-count": { "POST": [ "idn:user-level:read", "idn:user-level:manage" ] }, "/auth-profiles": { "GET": [ "sp:auth-profile:read" ] }, "/auth-profiles/{id}": { "GET": [ "sp:auth-profile:read" ], "PATCH": [ "sp:auth-profile:update" ] }, "/entitlements/{id}/entitlement-request-config": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ], "PUT": [ "idn:entitlement:manage" ] }, "/entitlements/reset/sources/{id}": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/{id}/access-model-metadata/{attributeKey}/values/{attributeValue}": { "POST": [ "idn:entitlement:manage" ], "DELETE": [ "idn:entitlement:manage" ] }, "/entitlements/aggregate/sources/{id}": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/identities/{id}/entitlements": { "GET": [ "idn:entitlement:read" ] }, "/generate-password-reset-token/digit": { "POST": [ "idn:password-digit-token:create" ] }, "/historical-identities": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshot-summary": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots/{date}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/snapshots/{date}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/common-access": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "POST": [ "iai:access-modeling:manage" ] }, "/common-access/update-status": { "POST": [ "iai:access-modeling:manage" ] }, "/historical-identities/{id}/events": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/start-date": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/compare": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/{id}/compare/{access-type}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/identities/invite": { "POST": [ "idn:password-user-invite:manage" ] }, "/identities/{id}/verification/account/send": { "POST": [ "idn:password:user-invite" ] }, "/identities/process": { "POST": [ "idn:identity:process", "idn:identity:manage" ] }, "/identity-attributes": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "POST": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/{name}": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "PUT": [ "idn:identity-profile-attribute:manage" ], "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/bulk-delete": { "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/mail-from-attributes": { "PUT": [ "sp:notification-mail-from-attributes:write" ] }, "/mail-from-attributes/{identity}": { "GET": [ "sp:notification-mail-from-attributes:read" ] }, "/generic-approvals": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-administration:read", "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-administration:read", "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/approve": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/attributes": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/comments": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/reassign": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/reject": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/{id}/cancel": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/config/{id}": { "GET": [ "sp:approvals:read" ] }, "/generic-approvals/config/{id}/{scope}": { "PUT": [ "sp:approvals:write" ], "DELETE": [ "sp:approvals:write" ] }, "/generic-approvals/bulk-approve": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/bulk-reject": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/bulk-cancel": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/bulk-reassign": { "POST": [ "sp:approvals:write" ] }, "/machine-accounts": { "GET": [ "idn:mis-account:read" ] }, "/machine-accounts/{id}": { "GET": [ "idn:mis-account:read" ], "PATCH": [ "idn:mis-account:manage" ] }, "/sources/{sourceId}/machine-classification-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/machine-account-mappings": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/{sourceId}/machine-mappings": { "PUT": [ "idn:sources:manage" ] }, "/sources/{sourceId}/classify": { "POST": [ "idn:account:update" ], "DELETE": [ "idn:account:update" ], "GET": [ "idn:account:update" ] }, "/sources/{sourceId}/declassify": { "POST": [ "idn:account:update" ] }, "/sources/{sourceId}/aggregate-agents": { "POST": [ "idn:mis-agents:aggregate" ] }, "/sources/{sourceId}/subtypes": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/{sourceId}/subtypes/{technicalName}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/subtypes/{subtypeId}": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/accounts/{id}/classify": { "POST": [ "idn:account:update" ] }, "/machine-identity-user-entitlements": { "GET": [ "idn:mis-identity:read" ] }, "/notification-template-defaults": { "GET": [ "idn:notification-template-defaults:read" ] }, "/notification-templates": { "GET": [ "idn:notification-templates:read" ], "POST": [ "idn:notification-templates:create" ] }, "/notification-templates/{id}": { "GET": [ "idn:notification-templates:read" ] }, "/notification-templates/bulk-delete": { "POST": [ "idn:notification-templates:delete" ] }, "/org-config": { "GET": [ "idn:org-configs:read", "idn:org-configs:manage" ], "PATCH": [ "idn:org-configs:manage" ] }, "/org-config/valid-time-zones": { "GET": [ "idn:org-configs:read", "idn:org-configs-user:read" ] }, "/outlier-summaries": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-summaries/latest": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/{outlierId}/contributing-features": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/{outlierId}/feature-details/{contributingFeatureName}/access-items": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/ignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/unignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/export": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-feature-summaries/{outlierFeatureId}": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/parameter-storage/attestation": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/parameter-storage/parameters": { "POST": [ "sp:parameter-storage:manage" ], "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/parameter-storage/parameters/{id}": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ], "PATCH": [ "sp:parameter-storage:manage" ], "DELETE": [ "sp:parameter-storage:manage" ] }, "/parameter-storage/parameters/{id}/references": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/parameter-storage/specification": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/notification-template-context": { "GET": [ "idn:notification-templates:read" ] }, "/notification-preferences": { "GET": [ "idn:notification-preferences:read" ] }, "/notification-preferences/{key}": { "GET": [ "idn:notification-preferences:read" ], "PUT": [ "idn:notification-preferences:create" ] }, "/reassignment-configurations/types": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "POST": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "PUT": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}/{configType}": { "DELETE": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/{identityId}/evaluate/{configType}": { "GET": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/tenant-config": { "GET": [ "idn:reassignment-tenant-configuration:read" ], "PUT": [ "idn:reassignment-tenant-configuration:update" ] }, "/recommendations/request": { "POST": [ "iai:decisions:manage" ] }, "/recommendations/config": { "GET": [ "iai:configuration:read" ], "PUT": [ "iai:configuration:manage" ] }, "/role-insights/requests": { "POST": [ "iai:role-insights" ] }, "/role-insights/requests/{id}": { "GET": [ "iai:role-insights" ] }, "/role-insights/summary": { "GET": [ "iai:role-insights" ] }, "/role-insights": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes/download": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/current-entitlements": { "GET": [ "iai:role-insights" ] }, "/role-insights/{insightId}/entitlement-changes/{entitlementId}/identities": { "GET": [ "iai:role-insights" ] }, "/role-mining-sessions": { "POST": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}": { "PATCH": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/status": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}/applications": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-role-summaries/{potentialRoleId}/entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularity-distribution": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/edit-entitlements": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/identities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}/download": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/provision": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/{sessionId}/potential-roles/{potentialRoleId}/excluded-entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/saved": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/{potentialRoleId}/sources/{sourceId}/identityUsage": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-propagation": { "POST": [ "idn:role-propagation:write" ] }, "/role-propagation/{rolePropagationId}/status": { "GET": [ "idn:role-propagation:read" ] }, "/role-propagation/is-running": { "GET": [ "idn:role-propagation:read" ] }, "/role-propagation/terminate": { "POST": [ "idn:role-propagation:write" ] }, "/role-propagation-config": { "PUT": [ "idn:role-propagation-config:write" ], "GET": [ "idn:role-propagation-config:read" ] }, "/roles/{id}/entitlements": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/send-test-notification": { "POST": [ "idn:notification-templates:create" ] }, "/sim-integrations/{id}": { "PUT": [ "idn:service-desk-integration:manage" ], "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations/{id}/beforeProvisioningRule": { "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/sp-config/export": { "POST": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/export/{id}": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/export/{id}/download": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/import": { "POST": [ "sp:config:manage" ] }, "/sp-config/import/{id}": { "GET": [ "sp:config:manage" ] }, "/sp-config/import/{id}/download": { "GET": [ "sp:config:manage" ] }, "/sp-config/config-objects": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sources/{id}/attribute-sync-config": { "GET": [ "idn:attr-sync-source-config:read", "idn:attr-sync-source-config:manage" ], "PUT": [ "idn:attr-sync-source-config:manage" ] }, "/sources/{id}/synchronize-attributes": { "POST": [ "idn:attr-sync-source-config:manage" ] }, "/sources/{id}/entitlement-request-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/sources/{sourceId}/load-entitlements": { "POST": [ "idn:entitlement:manage" ] }, "/tenant": { "GET": [ "sp:tenant:read" ] }, "/tenant-context": { "GET": [ "idn:tenant-context:read" ], "PATCH": [ "idn:tenant-context:write" ] }, "/triggers": { "GET": [ "sp:trigger-service-subscriptions:read" ] }, "/trigger-subscriptions": { "POST": [ "sp:trigger-service-subscriptions:manage" ], "GET": [ "sp:trigger-service-subscriptions:read", "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/{id}": { "PUT": [ "sp:trigger-service-subscriptions:manage" ], "PATCH": [ "sp:trigger-service-subscriptions:manage" ], "DELETE": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/validate-filter": { "POST": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-invocations/status": { "GET": [ "sp:trigger-service-invocation-status:read", "sp:trigger-service-invocation-status:manage" ] }, "/trigger-invocations/test": { "POST": [ "sp:trigger-service-invocation-status:manage" ] }, "/ui-metadata/tenant": { "GET": [ "idn:ui-access-metadata-page:read" ], "PUT": [ "idn:ui-access-metadata-page:manage" ] }, "/verified-from-addresses": { "GET": [ "idn:notification-templates:read" ], "POST": [ "idn:notification-templates:create" ] }, "/verified-from-addresses/{id}": { "DELETE": [ "idn:notification-templates:delete" ] }, "/verified-domains": { "GET": [ "sp:notification-dkim-attributes:read" ], "POST": [ "sp:notification-verify-domain-dkim:write" ] }, "/workgroups": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "POST": [ "idn:workgroup:manage" ] }, "/workgroups/{id}": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "DELETE": [ "idn:workgroup:manage" ], "PATCH": [ "idn:workgroup:manage" ] }, "/workgroups/bulk-delete": { "POST": [ "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/connections": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/members": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/{workgroupId}/members/bulk-add": { "POST": [ "idn:workgroup:write" ] }, "/workgroups/{workgroupId}/members/bulk-delete": { "POST": [ "idn:workgroup:write" ] }, "/form-definitions": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "DELETE": [ "sp:forms:manage" ], "PATCH": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}/data-source": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/export": { "GET": [ "sp:config:read", "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/forms-action-dynamic-schema": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/import": { "POST": [ "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/{formDefinitionID}/upload": { "POST": [ "sp:forms:manage" ] }, "/form-definitions/{formDefinitionID}/file/{fileID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-instances": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-instances/{formInstanceID}/file/{fileID}": { "GET": [ "sp:forms:manage" ] }, "/form-definitions/predefined-select-options": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/access-request-identity-metrics/{identityId}/requested-objects/{requestedObjectId}/type/{type}": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-approvals:manage" ] }, "/icons/{objectType}/{objectId}": { "PUT": [ "idn:icons:manage" ], "DELETE": [ "idn:icons:manage" ] }, "/suggested-entitlement-descriptions/auto-write-settings": { "GET": [ "idn:sed:read" ], "POST": [ "idn:sed:manage" ], "PATCH": [ "idn:sed:manage" ] }, "/entitlement-recommendations/pending-approvals": { "GET": [ "idn:sed:read" ] }, "/privileged-recommendations": { "GET": [ "idn:privilege-rec:read" ] }, "/entitlement-recommendations/bulk-approve": { "POST": [ "idn:sed:manage" ] }, "/entitlement-recommendations/assign": { "POST": [ "idn:sed:manage" ] }, "/entitlement-recommendations/{id}": { "PATCH": [ "idn:sed:manage" ] }, "/suggested-entitlement-description-batches/{batchId}/stats": { "GET": [ "idn:sed:read" ] }, "/suggested-entitlement-description-batches": { "GET": [ "idn:sed:read" ], "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-approvals": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-assignments": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-descriptions": { "GET": [ "idn:sed:read" ], "PATCH": [ "idn:sed:write" ] }, "/sources/{sourceId}/discover-applications": { "POST": [ "idn:application-discovery:write" ] }, "/source-subtypes/bulk-retrieve": { "POST": [ "idn:sources:manage" ] }, "/source-subtypes": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/source-subtypes/{subtypeId}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/source-subtypes/{subtypeId}/machine-config": { "GET": [ "idn:source-subtypes:read", "idn:source-subtypes:management" ], "PATCH": [ "idn:source-subtypes:delete", "idn:source-subtypes:update", "idn:source-subtypes:management" ] }, "/sources/{sourceId}/approval-config/machine-account-delete": { "GET": [ "idn:source-config:read", "idn:source-config:write" ], "PATCH": [ "idn:source-config:read", "idn:source-config:write" ] }, "/sources/{sourceId}/approval-config/account-delete": { "GET": [ "idn:source-config:read", "idn:source-config:write" ], "PATCH": [ "idn:source-config:read", "idn:source-config:write" ] }, "/discovered-applications": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications-template": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications": { "POST": [ "idn:application-discovery:write" ] }, "/source-apps/{id}": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "PATCH": [ "idn:app-roles:manage" ], "DELETE": [ "idn:app-roles:manage" ] }, "/source-apps/bulk-update": { "POST": [ "idn:app-roles:manage" ] }, "/source-apps/assigned": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "POST": [ "idn:app-roles:manage" ] }, "/source-apps/all": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps/{id}/access-profiles": { "GET": [ "idn:app-roles:manage" ] }, "/source-apps/{id}/access-profiles/bulk-remove": { "POST": [ "idn:app-roles:manage" ] }, "/user-apps/{id}": { "PATCH": [ "idn:app-roles:manage" ] }, "/user-apps/{id}/available-accounts": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps/all": { "GET": [ "idn:app-roles:manage" ] }, "/roles/{id}/access-model-metadata/{attributeKey}/values/{attributeValue}": { "POST": [ "idn:role:update", "idn:role-checked:update" ], "DELETE": [ "idn:role:delete", "idn:role-checked:delete", "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/ids": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/filter": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/query": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update/id": { "GET": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/access-model-metadata/bulk-update": { "GET": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/filter": { "POST": [ "idn:role-unchecked:read", "idn:role-unchecked:manage" ] }, "/criteria/privilege": { "POST": [ "sp:gov-criteria:write" ], "GET": [ "sp:gov-criteria:read" ] }, "/criteria/privilege/{criteriaId}": { "PUT": [ "sp:gov-criteria:write" ], "GET": [ "sp:gov-criteria:read" ], "DELETE": [ "sp:gov-criteria:write" ] }, "/criteria-config/privilege/{criteriaConfigId}": { "PATCH": [ "sp:gov-criteria:write" ], "GET": [ "sp:gov-criteria:read" ] }, "/criteria-config/privilege": { "GET": [ "sp:gov-criteria:read" ] } }, "root": { "/access-model-metadata/v1/attributes": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/v1/attributes/{key}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-model-metadata/v1/attributes/{key}/values": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "POST": [ "idn:access-model-metadata:create" ] }, "/access-model-metadata/v1/attributes/{key}/values/{value}": { "GET": [ "idn:access-model-metadata:read", "idn:access-model-metadata:manage" ], "PATCH": [ "idn:access-model-metadata:update" ] }, "/access-model-metadata/v1/bulk-update/filter": { "POST": [ "idn:entitlement:manage" ] }, "/access-model-metadata/v1/bulk-update/query": { "POST": [ "idn:entitlement:manage" ] }, "/access-model-metadata/v1/bulk-update/ids": { "POST": [ "idn:entitlement:manage" ] }, "/access-profiles/v1": { "GET": [ "idn:access-profile:read" ], "POST": [ "idn:access-profile:manage", "idn:entitlement:read", "idn:identity:read", "idn:sources:read" ] }, "/access-profiles/v1/{id}": { "GET": [ "idn:access-profile:read" ], "PATCH": [ "idn:access-profile:manage" ], "DELETE": [ "idn:access-profile:manage" ] }, "/access-profiles/v1/bulk-delete": { "POST": [ "idn:access-profile:manage" ] }, "/access-profiles/v1/{id}/entitlements": { "GET": [ "idn:access-profile:read" ] }, "/access-profiles/v1/bulk-update-requestable": { "POST": [ "idn:access-profile:manage" ] }, "/access-request-approvals/v1/pending": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/v1/completed": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/v1/{approvalId}/approve": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/v1/{approvalId}/reject": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/v1/{approvalId}/forward": { "POST": [ "idn:access-request-approvals:manage" ] }, "/access-request-approvals/v1/approval-summary": { "GET": [ "idn:access-request-approvals:read" ] }, "/access-request-approvals/v1/{accessRequestId}/approvers": { "GET": [ "idn:access-request-administration:read" ] }, "/access-request-identity-metrics/v1/{identityId}/requested-objects/{requestedObjectId}/type/{type}": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-approvals:manage" ] }, "/access-request-config/v1": { "GET": [ "idn:access-request-config:read" ], "PUT": [ "idn:access-request-config:manage" ] }, "/access-request-config/v2": { "GET": [ "idn:access-request-config:read" ], "PUT": [ "idn:access-request-config:manage" ] }, "/access-requests/v1": { "POST": [ "idn:access-request:manage", "idn:access-request-self:manage" ] }, "/access-requests/v1/cancel": { "POST": [ "idn:access-request:manage" ] }, "/access-requests/v1/bulk-cancel": { "POST": [ "idn:access-request-administration:manage" ] }, "/access-requests/v1/accounts-selection": { "POST": [ "idn:access-request:create" ] }, "/access-request-status/v1": { "GET": [ "idn:access-request-status:read" ] }, "/access-request-administration/v1": { "GET": [ "idn:access-request-administration:read" ] }, "/access-request-approvals/v1/bulk-approve": { "POST": [ "idn:access-request:manage" ] }, "/revocable-objects/v1": { "GET": [ "idn:requestable-objects:read" ] }, "/account-activities/v1": { "GET": [ "sp:scopes:all" ] }, "/account-activities/v1/{id}": { "GET": [ "sp:scopes:all" ] }, "/account-requests/v1/deletion": { "GET": [ "idn:account-requests:read", "idn:account-requests:management" ] }, "/account-requests/v1/account/{accountId}/delete": { "POST": [ "idn:account-requests:create" ] }, "/account-usages/v1/{accountId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/accounts/v1": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "POST": [ "idn:accounts:manage" ] }, "/accounts/v1/{id}": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ], "PATCH": [ "idn:accounts:manage" ], "PUT": [ "idn:accounts:manage" ], "DELETE": [ "idn:accounts:manage" ] }, "/accounts/v1/{id}/entitlements": { "GET": [ "idn:accounts:read", "idn:accounts:manage" ] }, "/accounts/v1/{id}/reload": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/v1/{id}/enable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/v1/{id}/disable": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/v1/{id}/unlock": { "POST": [ "idn:accounts-state:manage" ] }, "/accounts/v1/{id}/remove": { "POST": [ "idn:accounts:manage" ] }, "/identities-accounts/v1/{id}/enable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/v1/{id}/disable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/v1/enable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/identities-accounts/v1/disable": { "POST": [ "idn:accounts-state:manage", "idn:accounts-provisioning:manage" ] }, "/api-usage/v1/count": { "GET": [ "sp:api-usage:read" ] }, "/api-usage/v1/summary": { "GET": [ "sp:api-usage:read" ] }, "/sources/v1/{sourceId}/discover-applications": { "POST": [ "idn:application-discovery:write" ] }, "/discovered-applications/v1": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications-template/v1": { "GET": [ "idn:application-discovery:read" ] }, "/manual-discover-applications/v1": { "POST": [ "idn:application-discovery:write" ] }, "/generic-approvals/v1": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-administration:read", "idn:access-request-approvals:manage" ] }, "/generic-approvals/v1/{id}": { "GET": [ "idn:access-request-approvals:read", "idn:access-request-administration:read", "idn:access-request-approvals:manage" ] }, "/generic-approvals/v1/{id}/approve": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/v1/{id}/attributes": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/v1/{id}/comments": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/v1/{id}/reassign": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/v1/{id}/reject": { "POST": [ "idn:access-request-approvals:manage" ] }, "/generic-approvals/v1/{id}/cancel": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/v1/config/{id}": { "GET": [ "sp:approvals:read" ] }, "/generic-approvals/v1/config/{id}/{scope}": { "PUT": [ "sp:approvals:write" ], "DELETE": [ "sp:approvals:write" ] }, "/generic-approvals/v1/bulk-approve": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/v1/bulk-reject": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/v1/bulk-cancel": { "POST": [ "sp:approvals:write" ] }, "/generic-approvals/v1/bulk-reassign": { "POST": [ "sp:approvals:write" ] }, "/source-apps/v1/{id}": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "PATCH": [ "idn:app-roles:manage" ], "DELETE": [ "idn:app-roles:manage" ] }, "/source-apps/v1/bulk-update": { "POST": [ "idn:app-roles:manage" ] }, "/source-apps/v1/assigned": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps/v1": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ], "POST": [ "idn:app-roles:manage" ] }, "/source-apps/v1/all": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/source-apps/v1/{id}/access-profiles": { "GET": [ "idn:app-roles:manage" ] }, "/source-apps/v1/{id}/access-profiles/bulk-remove": { "POST": [ "idn:app-roles:manage" ] }, "/user-apps/v1/{id}": { "PATCH": [ "idn:app-roles:manage" ] }, "/user-apps/v1/{id}/available-accounts": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps/v1": { "GET": [ "idn:app-roles:read", "idn:app-roles:manage" ] }, "/user-apps/v1/all": { "GET": [ "idn:app-roles:manage" ] }, "/auth-profiles/v1": { "GET": [ "sp:auth-profile:read" ] }, "/auth-profiles/v1/{id}": { "GET": [ "sp:auth-profile:read" ], "PATCH": [ "sp:auth-profile:update" ] }, "/auth-users/v1/{id}": { "GET": [ "sp:auth-user:read" ], "PATCH": [ "sp:auth-user:manage" ] }, "/brandings/v1": { "GET": [ "idn:branding:read" ], "POST": [ "idn:branding:manage" ] }, "/brandings/v1/{name}": { "GET": [ "idn:branding:read" ], "PUT": [ "idn:branding:manage" ], "DELETE": [ "idn:branding:manage" ] }, "/business-applications/v1": { "GET": [ "idn:business-application:read" ], "POST": [ "idn:business-application:create" ] }, "/business-applications/v1/{id}": { "GET": [ "idn:business-application:read" ], "PATCH": [ "idn:business-application:update" ] }, "/campaign-filters/v1": { "POST": [ "idn:campaign-filter:manage" ], "GET": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/v1/{id}": { "GET": [ "idn:campaign-filter:read" ], "POST": [ "idn:campaign-filter:manage" ] }, "/campaign-filters/v1/delete": { "POST": [ "idn:campaign-filter:manage" ] }, "/campaigns/v1": { "GET": [ "idn:campaign:read", "idn:campaign:manage", "idn:campaign-report:read", "idn:campaign-report:manage" ], "POST": [ "idn:campaign:manage", "idn:campaign-filter:read" ] }, "/campaigns/v1/{id}": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PATCH": [ "idn:campaign:read", "idn:campaign:manage" ] }, "/campaigns/v1/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/v1/{id}/activate": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/v1/{id}/complete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/v1/delete": { "POST": [ "idn:campaign:manage" ] }, "/campaigns/v1/{id}/run-remediation-scan": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/v1/{id}/reports": { "GET": [ "idn:campaign-report:read", "idn:campaign-report:manage" ] }, "/campaigns/v1/{id}/run-report/{type}": { "POST": [ "idn:campaign-report:manage" ] }, "/campaigns/v1/reports-configuration": { "GET": [ "idn:campaign:read", "idn:campaign:manage" ], "PUT": [ "idn:campaign:manage" ] }, "/campaign-templates/v1": { "POST": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ] }, "/campaign-templates/v1/{id}": { "PATCH": [ "idn:campaign-template:manage" ], "GET": [ "idn:campaign-template:read", "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/v1/{id}/schedule": { "GET": [ "idn:campaign-template:read" ], "PUT": [ "idn:campaign-template:manage" ], "DELETE": [ "idn:campaign-template:manage" ] }, "/campaign-templates/v1/{id}/generate": { "POST": [ "idn:campaign-template:manage", "idn:campaign-filter:read" ] }, "/certifications/v1/{id}/decision-summary": { "GET": [ "idn:campaign:read" ] }, "/certifications/v1/{id}/identity-summaries": { "GET": [ "idn:campaign:read" ] }, "/certifications/v1/{id}/access-summaries/{type}": { "GET": [ "idn:campaign:read" ] }, "/certifications/v1/{id}/identity-summaries/{identitySummaryId}": { "GET": [ "idn:campaign:read" ] }, "/certifications/v1": { "GET": [ "idn:campaign:read" ] }, "/certifications/v1/{id}": { "GET": [ "idn:campaign:read" ] }, "/certifications/v1/{id}/access-review-items": { "GET": [ "idn:campaign:read" ] }, "/certifications/v1/{id}/decide": { "POST": [ "idn:campaign:manage" ] }, "/certifications/v1/{id}/reassign": { "POST": [ "idn:campaign:manage" ] }, "/certifications/v1/{id}/sign-off": { "POST": [ "idn:campaign:manage" ] }, "/certifications/v1/{certificationId}/access-review-items/{itemId}/permissions": { "GET": [ "idn:campaign:read" ] }, "/certifications/v1/{id}/reviewers": { "GET": [ "idn:campaign:read" ] }, "/certifications/v1/{id}/reassign-async": { "POST": [ "idn:campaign:manage" ] }, "/certification-tasks/v1/{id}": { "GET": [ "idn:campaign:read" ] }, "/certification-tasks/v1": { "GET": [ "idn:campaign:read" ] }, "/sources/v1/{sourceId}/classify": { "POST": [ "idn:account:update" ], "DELETE": [ "idn:account:update" ], "GET": [ "idn:account:update" ] }, "/configuration-hub/v1/object-mappings/{sourceOrg}": { "GET": [ "sp:config-object-mapping:read", "sp:config-object-mapping:manage" ], "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/v1/object-mappings/{sourceOrg}/{objectMappingId}": { "DELETE": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/v1/object-mappings/{sourceOrg}/bulk-create": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/v1/object-mappings/{sourceOrg}/bulk-patch": { "POST": [ "sp:config-object-mapping:manage" ] }, "/configuration-hub/v1/scheduled-actions": { "GET": [ "sp:config-scheduled-action:read", "sp:config-scheduled-action:manage" ], "POST": [ "sp:config-scheduled-action:manage" ] }, "/configuration-hub/v1/scheduled-actions/{id}": { "PATCH": [ "sp:config-scheduled-action:manage" ], "DELETE": [ "sp:config-scheduled-action:manage" ] }, "/configuration-hub/v1/backups/uploads": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "POST": [ "sp:config-backup:manage" ] }, "/configuration-hub/v1/backups/uploads/{id}": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ], "DELETE": [ "sp:config-backup:manage" ] }, "/configuration-hub/v1/backups": { "GET": [ "sp:config-backup:read", "sp:config-backup:manage" ] }, "/configuration-hub/v1/backups/{id}": { "DELETE": [ "sp:config-backup:manage" ] }, "/configuration-hub/v1/drafts": { "GET": [ "sp:config-draft:read", "sp:config-draft:manage" ] }, "/configuration-hub/v1/drafts/{id}": { "DELETE": [ "sp:config-draft:manage" ] }, "/configuration-hub/v1/deploys": { "GET": [ "sp:config-deploy:read", "sp:config-deploy:manage" ], "POST": [ "sp:config-deploy:manage" ] }, "/configuration-hub/v1/deploys/{id}": { "GET": [ "sp:config-deploy:read", "sp:config-deploy:manage" ] }, "/connector-customizers/v1": { "GET": [ "sp:connector:read" ], "POST": [ "sp:connector:manage" ] }, "/connector-customizers/v1/{id}": { "GET": [ "sp:connector:read" ], "PUT": [ "sp:connector:manage" ], "DELETE": [ "sp:connector:manage" ] }, "/connector-customizers/v1/{id}/versions": { "POST": [ "sp:connector:manage" ] }, "/connector-rules/v1": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "POST": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/v1/{id}": { "GET": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ], "PUT": [ "idn:rule-management-connector:manage" ], "DELETE": [ "idn:rule-management-connector:manage" ] }, "/connector-rules/v1/validate": { "POST": [ "idn:rule-management-connector:read", "idn:rule-management-connector:manage" ] }, "/connectors/v1/{scriptName}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "DELETE": [ "idn:connector-config:manage" ], "PATCH": [ "idn:connector-config:manage" ] }, "/connectors/v1": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "POST": [ "idn:connector-config:manage" ] }, "/connectors/v1/{scriptName}/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/v1/{scriptName}/translations/{locale}": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/v1/{scriptName}/source-template": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/connectors/v1/{scriptName}/correlation-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ], "PUT": [ "idn:connector-config:manage" ] }, "/form-definitions/v1": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-definitions/v1/{formDefinitionID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "DELETE": [ "sp:forms:manage" ], "PATCH": [ "sp:forms:manage" ] }, "/form-definitions/v1/{formDefinitionID}/data-source": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/v1/export": { "GET": [ "sp:config:read", "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/v1/forms-action-dynamic-schema": { "POST": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-definitions/v1/import": { "POST": [ "sp:forms:manage", "sp:config:manage" ] }, "/form-definitions/v1/{formDefinitionID}/upload": { "POST": [ "sp:forms:manage" ] }, "/form-definitions/v1/{formDefinitionID}/file/{fileID}": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/form-instances/v1": { "GET": [ "sp:forms:read", "sp:forms:manage" ], "POST": [ "sp:forms:manage" ] }, "/form-instances/v1/{formInstanceID}/file/{fileID}": { "GET": [ "sp:forms:manage" ] }, "/form-definitions/v1/predefined-select-options": { "GET": [ "sp:forms:read", "sp:forms:manage" ] }, "/authorization/v1/custom-user-levels": { "POST": [ "idn:user-level:manage" ], "GET": [ "idn:user-level:manage" ] }, "/authorization/v1/custom-user-levels/{id}/publish": { "POST": [ "idn:user-level:manage" ] }, "/authorization/v1/custom-user-levels/{id}": { "GET": [ "idn:user-level:manage" ], "DELETE": [ "idn:user-level:manage" ], "PATCH": [ "idn:user-level:manage" ] }, "/authorization/v1/authorization-assignable-right-sets": { "GET": [ "idn:user-level:manage" ] }, "/authorization/v1/user-levels/{id}/identities": { "GET": [ "idn:user-level:read", "idn:user-level:manage" ] }, "/authorization/v1/user-levels/get-identity-count": { "POST": [ "idn:user-level:read", "idn:user-level:manage" ] }, "/das/v1/tasks": { "GET": [ "das:task:read", "das:task:manage" ] }, "/das/v1/tasks/{id}": { "GET": [ "das:task:read", "das:task:manage" ], "DELETE": [ "das:task:manage" ] }, "/das/v1/tasks/cancel/{id}": { "POST": [ "das:task:manage" ] }, "/das/v1/tasks/rerun/{id}": { "POST": [ "das:task:manage" ] }, "/das/v1/tasks/schedules": { "GET": [ "das:task:read", "das:task:manage" ], "POST": [ "das:task:manage" ] }, "/das/v1/tasks/schedules/{id}": { "GET": [ "das:task:read", "das:task:manage" ], "PUT": [ "das:task:manage" ], "DELETE": [ "das:task:manage" ] }, "/das/v1/applications": { "POST": [ "das:applications:manage" ], "GET": [ "das:applications:read", "das:applications:manage" ] }, "/das/v1/applications/{id}": { "PUT": [ "das:applications:manage" ], "DELETE": [ "das:applications:manage" ], "GET": [ "das:applications:read", "das:applications:manage" ] }, "/das/identity-collectors/v1": { "GET": [ "das:identity-collectors:read", "das:identity-collectors:manage" ], "POST": [ "das:identity-collectors:manage" ] }, "/das/identity-collectors/v1/{id}": { "PUT": [ "das:identity-collectors:manage" ], "DELETE": [ "das:identity-collectors:manage" ] }, "/das/v1/owners/applications/{appId}": { "GET": [ "das:owners:read", "das:owners:manage" ] }, "/das/v1/owners/resources/{resourceId}": { "GET": [ "das:owners:read", "das:owners:manage" ] }, "/das/v1/owners/{ownerIdentityId}/resources": { "GET": [ "das:owners:read", "das:owners:manage" ] }, "/das/v1/owners/assign": { "POST": [ "das:owners:manage" ] }, "/das/v1/owners/{sourceIdentityId}/reassign/{destinationIdentityId}": { "POST": [ "das:owners:manage" ] }, "/das/v1/owners/reelect": { "POST": [ "das:owners:manage" ] }, "/data-segments/v1/membership/{identityId}": { "GET": [ "idn:data-segment:read" ] }, "/data-segments/v1/user-enabled/{identityId}": { "GET": [ "idn:data-segment:read" ] }, "/data-segments/v1/{segmentId}": { "GET": [ "idn:data-segment:read" ], "POST": [ "idn:data-segment:manage" ], "PATCH": [ "idn:data-segment:manage" ], "DELETE": [ "idn:data-segment:manage" ] }, "/data-segments/v1": { "GET": [ "idn:data-segment:read" ], "POST": [ "idn:data-segment:manage" ] }, "/sources/v1/{sourceId}/declassify": { "POST": [ "idn:account:update" ] }, "/roles/v1/{roleId}/dimensions": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/v1/{roleId}/dimensions/{dimensionId}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/v1/{roleId}/dimensions/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/v1/{roleId}/dimensions/{dimensionId}/access-profiles": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/v1/{roleId}/dimensions/{dimensionId}/entitlements": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/entitlement-connections/v1": { "GET": [ "idn:entitlement-connections:list" ], "PATCH": [ "idn:entitlement-connections:manage" ], "POST": [ "idn:entitlement-connections:manage" ] }, "/entitlement-connections/v1/current-identity": { "GET": [ "idn:entitlement-connections:read" ] }, "/entitlement-connections/v1/{connectionId}": { "PATCH": [ "idn:entitlement-connections:manage" ] }, "/entitlements/v1": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/v1/account/{accountId}/entitlements": { "GET": [ "idn:entitlement:read" ] }, "/entitlements/v1/bulk-update": { "POST": [ "idn:entitlement:update", "idn:source-checked:update" ] }, "/entitlements/v1/{id}": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ], "PATCH": [ "idn:entitlement:manage", "idn:entitlement:update" ] }, "/entitlements/v1/{id}/parents": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/v1/{id}/children": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ] }, "/entitlements/v1/{id}/entitlement-request-config": { "GET": [ "idn:entitlement:read", "idn:entitlement:manage" ], "PUT": [ "idn:entitlement:manage" ] }, "/entitlements/v1/reset/sources/{id}": { "POST": [ "idn:entitlement:manage" ] }, "/entitlements/v1/{id}/access-model-metadata/{attributeKey}/values/{attributeValue}": { "POST": [ "idn:entitlement:manage" ], "DELETE": [ "idn:entitlement:manage" ] }, "/entitlements/v1/aggregate/sources/{id}": { "POST": [ "idn:entitlement:manage" ] }, "/auth-org/v1/network-config": { "GET": [ "sp:auth-org:read" ], "POST": [ "sp:auth-org:manage" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/v1/lockout-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/v1/service-provider-config": { "GET": [ "sp:auth-org:read " ], "PATCH": [ "sp:auth-org:manage" ] }, "/auth-org/v1/session-config": { "GET": [ "sp:auth-org:read" ], "PATCH": [ "sp:auth-org:manage" ] }, "/workgroups/v1": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "POST": [ "idn:workgroup:manage" ] }, "/workgroups/v1/{id}": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ], "DELETE": [ "idn:workgroup:manage" ], "PATCH": [ "idn:workgroup:manage" ] }, "/workgroups/v1/bulk-delete": { "POST": [ "idn:workgroup:manage" ] }, "/workgroups/v1/{workgroupId}/connections": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/v1/{workgroupId}/members": { "GET": [ "idn:workgroup:read", "idn:workgroup:manage" ] }, "/workgroups/v1/{workgroupId}/members/bulk-add": { "POST": [ "idn:workgroup:write" ] }, "/workgroups/v1/{workgroupId}/members/bulk-delete": { "POST": [ "idn:workgroup:write" ] }, "/ai-access-request-recommendations/v1": { "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage" ] }, "/ai-access-request-recommendations/v1/config": { "GET": [ "iai:configuration:read", "iai:configuration:manage" ], "PUT": [ "iai:configuration:read", "iai:configuration:manage" ] }, "/ai-access-request-recommendations/v1/ignored-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/v1/requested-items": { "POST": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ], "GET": [ "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/v1/viewed-items": { "POST": [ "iai:access-request-recommender:manage" ], "GET": [ "iai:access-request-recommender:read", "iai:access-request-recommender:manage", "idn:access-request:manage" ] }, "/ai-access-request-recommendations/v1/viewed-items/bulk-create": { "POST": [ "iai:access-request-recommender:manage" ] }, "/common-access/v1": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "POST": [ "iai:access-modeling:manage" ] }, "/common-access/v1/update-status": { "POST": [ "iai:access-modeling:manage" ] }, "/outlier-summaries/v1": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-summaries/v1/latest": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/v1": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/v1/{outlierId}/contributing-features": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/v1/{outlierId}/feature-details/{contributingFeatureName}/access-items": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outliers/v1/ignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/v1/unignore": { "POST": [ "iai:outliers:manage" ] }, "/outliers/v1/export": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/outlier-feature-summaries/v1/{outlierFeatureId}": { "GET": [ "iai:outliers:read", "iai:outliers:manage" ] }, "/recommendations/v1/request": { "POST": [ "iai:decisions:manage" ] }, "/recommendations/v1/config": { "GET": [ "iai:configuration:read" ], "PUT": [ "iai:configuration:manage" ] }, "/role-mining-sessions/v1": { "POST": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}": { "PATCH": [ "iai:access-modeling:manage" ], "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/status": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-role-summaries": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-role-summaries/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-role-summaries/{potentialRoleId}/applications": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-role-summaries/{potentialRoleId}/entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/entitlement-popularity-distribution": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/edit-entitlements": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/identities": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/export": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/export-async": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/export-async/{exportId}/download": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/provision": { "POST": [ "iai:access-modeling:manage" ] }, "/role-mining-sessions/v1/{sessionId}/potential-roles/{potentialRoleId}/excluded-entitlements": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/v1": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/v1/{potentialRoleId}": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ], "PATCH": [ "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/v1/saved": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/role-mining-potential-roles/v1/{potentialRoleId}/sources/{sourceId}/identityUsage": { "GET": [ "iai:access-modeling:read", "iai:access-modeling:manage" ] }, "/icons/v1/{objectType}/{objectId}": { "PUT": [ "idn:icons:manage" ], "DELETE": [ "idn:icons:manage" ] }, "/identities/v1": { "GET": [ "idn:identity:read", "idn:identity:manage" ] }, "/identities/v1/{id}": { "GET": [ "idn:identity:read", "idn:identity:manage" ], "DELETE": [ "idn:identity:manage" ] }, "/identities/v1/{identityId}/ownership": { "GET": [ "idn:identity:read" ] }, "/identities/v1/{id}/reset": { "POST": [ "idn:identity:manage" ] }, "/identities/v1/{identityId}/role-assignments": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/identities/v1/{identityId}/role-assignments/{assignmentId}": { "GET": [ "idn:identity:read", "idn:identity-direct-report:read", "idn:identity:manage" ] }, "/entitlements/v1/identities/{id}/entitlements": { "GET": [ "idn:entitlement:read" ] }, "/identities/v1/invite": { "POST": [ "idn:password-user-invite:manage" ] }, "/identities/v1/{id}/verification/account/send": { "POST": [ "idn:password:user-invite" ] }, "/identities/v1/process": { "POST": [ "idn:identity:process", "idn:identity:manage" ] }, "/identity-attributes/v1": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "POST": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/v1/{name}": { "GET": [ "idn:identity-profile-attribute:read", "idn:identity-profile-attribute:manage" ], "PUT": [ "idn:identity-profile-attribute:manage" ], "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/identity-attributes/v1/bulk-delete": { "DELETE": [ "idn:identity-profile-attribute:manage" ] }, "/historical-identities/v1": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}/snapshots": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}/snapshot-summary": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}/snapshots/{date}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}/snapshots/{date}/access-items": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}/events": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}/start-date": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}/compare": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/historical-identities/v1/{id}/compare/{access-type}": { "GET": [ "idn:identity-history:read", "idn:identity-history:manage" ] }, "/identity-profiles/v1": { "GET": [ "idn:identity-profile:read" ], "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/v1/bulk-delete": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/v1/export": { "GET": [ "idn:identity-profile:read" ] }, "/identity-profiles/v1/import": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/v1/{identity-profile-id}": { "GET": [ "idn:identity-profile:read" ], "DELETE": [ "idn:identity-profile:manage" ], "PATCH": [ "idn:identity-profile:manage" ] }, "/identity-profiles/v1/{identity-profile-id}/default-identity-attribute-config": { "GET": [ "idn:identity-profile:manage" ] }, "/identity-profiles/v1/{identity-profile-id}/process-identities": { "POST": [ "idn:identity-profile:manage" ] }, "/identity-profiles/v1/identity-preview": { "POST": [ "idn:identity-profile:manage" ] }, "/intelligence/v1/identities": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/v1/identities/{id}/accounts": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/v1/identities/{id}/outliers/rare-access": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/v1/identities/{id}/access-history/access-items": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/v1/identities/{id}/access-history/certifications": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/v1/identities/{id}/non-human-identity-ownership/{category}": { "GET": [ "sp:identity-sec-intel:read" ] }, "/intelligence/v1/response-actions": { "POST": [ "sp:identity-sec-intel:write" ] }, "/intelligence/v1/response-actions/{id}/status": { "GET": [ "sp:identity-sec-intel:read" ] }, "/jit-activation-config/v1/{configType}": { "GET": [ "idn:jit-policy:read", "idn:jit-policy:manage" ], "PATCH": [ "idn:jit-policy:update", "idn:jit-policy:manage" ] }, "/jit-activations/v1/activate": { "POST": [ "idn:jit-activation-workflow:activate", "idn:jit-activation-workflow:manage" ] }, "/jit-activations/v1/deactivate": { "POST": [ "idn:jit-activation-workflow:deactivate", "idn:jit-activation-workflow:manage" ] }, "/jit-activations/v1/extend": { "POST": [ "idn:jit-activation-workflow:extend", "idn:jit-activation-workflow:manage" ] }, "/jit-activation-history/v1": { "GET": [ "idn:jit-activation-history:read" ] }, "/jit-activation-history/v1/current-identity": { "GET": [ "idn:jit-activation-history-self:read" ] }, "/launchers/v1": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "POST": [ "sp:launcher-admin:write" ] }, "/launchers/v1/{launcherID}": { "GET": [ "sp:launcher-admin:read", "sp:launcher-user:read" ], "PUT": [ "sp:launcher-admin:write" ], "DELETE": [ "sp:launcher-admin:delete" ] }, "/launchers/v1/{launcherID}/launch": { "POST": [ "sp:launcher-user:launch" ] }, "/identities/v1/{identity-id}/set-lifecycle-state": { "POST": [ "idn:identity-lifecycle-state:manage" ] }, "/identity-profiles/v1/{identity-profile-id}/lifecycle-states": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "POST": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/identity-profiles/v1/{identity-profile-id}/lifecycle-states/{lifecycle-state-id}": { "GET": [ "idn:identity-profile-lifecycle-state:read" ], "PATCH": [ "idn:identity-profile-lifecycle-state:manage" ], "DELETE": [ "idn:identity-profile-lifecycle-state:manage" ] }, "/accounts/v1/{id}/classify": { "POST": [ "idn:account:update" ] }, "/sources/v1/{sourceId}/machine-account-mappings": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/v1/{sourceId}/machine-mappings": { "PUT": [ "idn:sources:manage" ] }, "/source-subtypes/v1/bulk-retrieve": { "POST": [ "idn:sources:manage" ] }, "/source-subtypes/v1": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/source-subtypes/v1/{subtypeId}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/source-subtypes/v1/{subtypeId}/machine-config": { "GET": [ "idn:source-subtypes:read", "idn:source-subtypes:management" ], "PATCH": [ "idn:source-subtypes:delete", "idn:source-subtypes:update", "idn:source-subtypes:management" ] }, "/machine-accounts/v1": { "GET": [ "idn:mis-account:read" ] }, "/machine-accounts/v1/{id}": { "GET": [ "idn:mis-account:read" ], "PATCH": [ "idn:mis-account:manage" ] }, "/sources/v1/{sourceId}/subtypes": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/v1/{sourceId}/subtypes/{technicalName}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/v1/subtypes/{subtypeId}": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/v1/{sourceId}/machine-classification-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/machine-identities/v1": { "GET": [ "idn:mis-identity:read", "idn:mis-identity:manage" ], "POST": [ "idn:mis-identity:manage" ] }, "/machine-identities/v1/{id}": { "GET": [ "idn:mis-identity:read" ], "PATCH": [ "idn:mis-identity:manage" ], "DELETE": [ "idn:mis-identity:manage" ] }, "/machine-identities/v1/{id}/anomalies": { "GET": [ "idn:mis-identity:read" ] }, "/machine-identities/v1/anomaly-summaries/unsanctioned": { "GET": [ "idn:mis-identity:read" ] }, "/machine-identities/v2": { "GET": [ "idn:mis-identity:read", "idn:mis-identity:manage" ], "POST": [ "idn:mis-identity:manage" ] }, "/machine-identities/v2/{id}": { "GET": [ "idn:mis-identity:read", "idn:mis-identity:manage" ], "PATCH": [ "idn:mis-identity:manage" ], "DELETE": [ "idn:mis-identity:manage" ] }, "/sources/v1/{sourceId}/resources/{resourceId}/correlation-configs": { "GET": [ "idn:sources:read" ] }, "/sources/v1/{sourceId}/resources/{resourceId}/correlation-configs/{configId}": { "GET": [ "idn:sources:read" ], "PATCH": [ "idn:sources:update" ], "DELETE": [ "idn:sources:update" ] }, "/sources/v1/{sourceId}/aggregate-agents": { "POST": [ "idn:mis-agents:aggregate" ] }, "/machine-identity-user-entitlements/v1": { "GET": [ "idn:mis-identity:read" ] }, "/machine-identities/v1/{id}/lifecycle-actions": { "POST": [ "idn:mis-identity:manage" ] }, "/machine-identities/v1/lifecycle-actions": { "GET": [ "sp:scopes:all" ] }, "/machine-identities/v1/lifecycle-actions/{requestId}": { "GET": [ "idn:mis-identity:manage" ] }, "/machine-identities/v1/lifecycle-actions/{requestId}/cancel": { "POST": [ "idn:mis-identity:manage" ] }, "/managed-clients/v1": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clients/v1/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage", "idn:managed-client-status:read", "idn:managed-client-status:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clients/v1/{id}/status": { "GET": [ "idn:managed-client-status:read" ] }, "/managed-clients/v1/{id}/health-indicators": { "GET": [ "idn:remote-client:manage" ] }, "/managed-cluster-types/v1": { "GET": [ "idn:managed-cluster-types:read", "idn:managed-cluster-types:manage" ], "POST": [ "idn:managed-cluster-types:manage" ] }, "/managed-cluster-types/v1/{id}": { "GET": [ "idn:managed-cluster-types:read", "idn:managed-cluster-types:manage" ], "PATCH": [ "idn:managed-cluster-types:manage" ], "DELETE": [ "idn:managed-cluster-types:manage" ] }, "/managed-clusters/v1": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "POST": [ "idn:remote-client:manage" ] }, "/managed-clusters/v1/{id}": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PATCH": [ "idn:remote-client:manage" ], "DELETE": [ "idn:remote-client:manage" ] }, "/managed-clusters/v1/{id}/log-config": { "GET": [ "idn:remote-client:read", "idn:remote-client:manage" ], "PUT": [ "idn:remote-client:manage" ] }, "/managed-clusters/v1/{id}/manualUpgrade": { "POST": [ "idn:managed-cluster-upgrade:manage" ] }, "/mfa/v1/okta-verify/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/v1/duo-web/config": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ], "PUT": [ "idn:mfa-configuration:manage" ] }, "/mfa/v1/kba/config": { "GET": [ "idn:mfa-kba:read" ] }, "/mfa/v1/kba/config/answers": { "POST": [ "idn:mfa-kba:authenticate" ] }, "/mfa/v1/{method}/test": { "GET": [ "idn:mfa-configuration:read", "idn:mfa-configuration:manage" ] }, "/multihosts/v1": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/v1/types": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/v1/{multihostId}": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ], "DELETE": [ "idn:sources:manage", "idn:multihosts-admin:manage" ], "PATCH": [ "idn:multihosts-admin:manage" ] }, "/multihosts/v1/{multihostId}/sources/testConnection": { "POST": [ "idn:multihosts-admin:manage" ] }, "/multihosts/v1/{multihostId}/sources/{sourceId}/testConnection": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/v1/{multihostId}/sources": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/v1/{multiHostId}/sources/errors": { "GET": [ "idn:sources:read", "idn:multihosts-admin:manage" ] }, "/multihosts/v1/{multiHostId}/sources/bulk-delete": { "POST": [ "idn:sources:manage", "idn:multihosts-admin:manage" ] }, "/multihosts/v1/{multihostId}/acctAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/multihosts/v1/{multiHostId}/entitlementAggregationGroups": { "GET": [ "idn:multihosts-admin:manage" ] }, "/non-employee-records/v1": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-records/v1/{id}": { "GET": [ "idn:nelm:read" ], "PUT": [ "idn:nelm:manage" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-records/v1/bulk-delete": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-requests/v1": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-requests/v1/{id}": { "GET": [ "idn:nelm:read" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-requests/v1/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/v1": { "POST": [ "idn:nelm:manage" ], "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/v1/{sourceId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/v1/{id}/non-employees/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/v1/{id}/non-employee-bulk-upload": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-sources/v1/{id}/non-employee-bulk-upload/status": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/v1/{id}/schema-attributes-template/download": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/v1": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/v1/{id}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-approvals/v1/{id}/approve": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/v1/{id}/reject": { "POST": [ "idn:nelm:manage" ] }, "/non-employee-approvals/v1/summary/{requested-for}": { "GET": [ "idn:nelm:read" ] }, "/non-employee-sources/v1/{sourceId}/schema-attributes": { "GET": [ "idn:nelm:read" ], "POST": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/non-employee-sources/v1/{sourceId}/schema-attributes/{attributeId}": { "GET": [ "idn:nelm:read" ], "PATCH": [ "idn:nelm:manage" ], "DELETE": [ "idn:nelm:manage" ] }, "/notification-template-variables/v1/{key}/{medium}": { "GET": [ "idn:notification-templates:read" ] }, "/mail-from-attributes/v1": { "PUT": [ "sp:notification-mail-from-attributes:write" ] }, "/mail-from-attributes/v1/{identity}": { "GET": [ "sp:notification-mail-from-attributes:read" ] }, "/notification-template-defaults/v1": { "GET": [ "idn:notification-template-defaults:read" ] }, "/notification-templates/v1": { "GET": [ "idn:notification-templates:read" ], "POST": [ "idn:notification-templates:create" ] }, "/notification-templates/v1/{id}": { "GET": [ "idn:notification-templates:read" ] }, "/notification-templates/v1/bulk-delete": { "POST": [ "idn:notification-templates:delete" ] }, "/notification-template-context/v1": { "GET": [ "idn:notification-templates:read" ] }, "/notification-preferences/v1": { "GET": [ "idn:notification-preferences:read" ] }, "/notification-preferences/v1/{key}": { "GET": [ "idn:notification-preferences:read" ], "PUT": [ "idn:notification-preferences:create" ] }, "/send-test-notification/v1": { "POST": [ "idn:notification-templates:create" ] }, "/verified-from-addresses/v1": { "GET": [ "idn:notification-templates:read" ], "POST": [ "idn:notification-templates:create" ] }, "/verified-from-addresses/v1/{id}": { "DELETE": [ "idn:notification-templates:delete" ] }, "/verified-domains/v1": { "GET": [ "sp:notification-dkim-attributes:read" ], "POST": [ "sp:notification-verify-domain-dkim:write" ] }, "/oauth-clients/v1": { "GET": [ "sp:oauth-client:read", "sp:oauth-client:manage" ], "POST": [ "sp:oauth-client:manage" ] }, "/oauth-clients/v1/{id}": { "GET": [ "sp:oauth-client:manage", "sp:oauth-client:read" ], "DELETE": [ "sp:oauth-client:manage" ], "PATCH": [ "sp:oauth-client:manage" ] }, "/org-config/v1": { "GET": [ "idn:org-configs:read", "idn:org-configs:manage" ], "PATCH": [ "idn:org-configs:manage" ] }, "/org-config/v1/valid-time-zones": { "GET": [ "idn:org-configs:read", "idn:org-configs-user:read" ] }, "/parameter-storage/v1/attestation": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/parameter-storage/v1/parameters": { "POST": [ "sp:parameter-storage:manage" ], "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/parameter-storage/v1/parameters/{id}": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ], "PATCH": [ "sp:parameter-storage:manage" ], "DELETE": [ "sp:parameter-storage:manage" ] }, "/parameter-storage/v1/parameters/{id}/references": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/parameter-storage/v1/specification": { "GET": [ "sp:parameter-storage:read", "sp:parameter-storage:manage" ] }, "/password-org-config/v1": { "GET": [ "idn:password-org-config:read" ], "PUT": [ "idn:password-org-config:manage" ], "POST": [ "idn:password-org-config:manage" ] }, "/password-dictionary/v1": { "GET": [ "idn:password-dictionary:read", "idn:password-dictionary:manage" ], "PUT": [ "idn:password-dictionary:manage" ] }, "/query-password-info/v1": { "POST": [ "idn:password-info:read" ] }, "/set-password/v1": { "POST": [ "idn:password-change:manage" ] }, "/password-change-status/v1/{id}": { "GET": [ "idn:password-change:read" ] }, "/generate-password-reset-token/v1/digit": { "POST": [ "idn:password-digit-token:create" ] }, "/password-policies/v1/{id}": { "GET": [ "idn:password-policy:read" ], "PUT": [ "idn:password-policy:write" ], "DELETE": [ "idn:password-policy:write" ] }, "/password-policies/v1": { "POST": [ "idn:password-policy:write" ], "GET": [ "idn:password-policy:read" ] }, "/password-sync-groups/v1": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "POST": [ "idn:password-sync-group:manage" ] }, "/password-sync-groups/v1/{id}": { "GET": [ "idn:password-sync-group:read", "idn:password-sync-group:manage" ], "PUT": [ "idn:password-sync-group:manage" ], "DELETE": [ "idn:password-sync-group:manage" ] }, "/personal-access-tokens/v1": { "GET": [ "sp:my-personal-access-tokens:read", "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:read", "sp:all-personal-access-tokens:manage" ], "POST": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/personal-access-tokens/v1/{id}": { "PATCH": [ "sp:my-personal-access-tokens:manage" ], "DELETE": [ "sp:my-personal-access-tokens:manage", "sp:all-personal-access-tokens:manage" ] }, "/criteria/v1/privilege": { "POST": [ "sp:gov-criteria:write" ], "GET": [ "sp:gov-criteria:read" ] }, "/criteria/v1/privilege/{criteriaId}": { "PUT": [ "sp:gov-criteria:write" ], "GET": [ "sp:gov-criteria:read" ], "DELETE": [ "sp:gov-criteria:write" ] }, "/criteria-config/v1/privilege/{criteriaConfigId}": { "PATCH": [ "sp:gov-criteria:write" ], "GET": [ "sp:gov-criteria:read" ] }, "/criteria-config/v1/privilege": { "GET": [ "sp:gov-criteria:read" ] }, "/public-identities/v1": { "GET": [ "sp:scopes:default" ] }, "/public-identities-config/v1": { "GET": [ "idn:public-identity-config:read", "idn:public-identity-config:manage" ], "PUT": [ "idn:public-identity-config:manage" ] }, "/public-machine-identities/v1": { "GET": [ "sp:scopes:default" ] }, "/reports/v1/{taskResultId}/result": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/reports/v1/run": { "POST": [ "sp:report:manage" ] }, "/reports/v1/{id}/cancel": { "POST": [ "sp:report:manage" ] }, "/reports/v1/{taskResultId}": { "GET": [ "sp:report:read", "sp:report:manage" ] }, "/requestable-objects/v1": { "GET": [ "idn:requestable-objects:read" ] }, "/role-insights/v1/requests": { "POST": [ "iai:role-insights" ] }, "/role-insights/v1/requests/{id}": { "GET": [ "iai:role-insights" ] }, "/role-insights/v1/summary": { "GET": [ "iai:role-insights" ] }, "/role-insights/v1": { "GET": [ "iai:role-insights" ] }, "/role-insights/v1/{insightId}": { "GET": [ "iai:role-insights" ] }, "/role-insights/v1/{insightId}/entitlement-changes": { "GET": [ "iai:role-insights" ] }, "/role-insights/v1/{insightId}/entitlement-changes/download": { "GET": [ "iai:role-insights" ] }, "/role-insights/v1/{insightId}/current-entitlements": { "GET": [ "iai:role-insights" ] }, "/role-insights/v1/{insightId}/entitlement-changes/{entitlementId}/identities": { "GET": [ "iai:role-insights" ] }, "/role-propagation/v1": { "POST": [ "idn:role-propagation:write" ] }, "/role-propagation/v1/{rolePropagationId}/status": { "GET": [ "idn:role-propagation:read" ] }, "/role-propagation/v1/is-running": { "GET": [ "idn:role-propagation:read" ] }, "/role-propagation/v1/terminate": { "POST": [ "idn:role-propagation:write" ] }, "/role-propagation-config/v1": { "PUT": [ "idn:role-propagation-config:write" ], "GET": [ "idn:role-propagation-config:read" ] }, "/roles/v1": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/v1/{id}": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ], "PATCH": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ], "DELETE": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/v1/bulk-delete": { "POST": [ "idn:role-unchecked:manage", "idn:role-checked:manage" ] }, "/roles/v1/{id}/assigned-identities": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/v1/{id}/entitlements": { "GET": [ "idn:role-unchecked:read", "idn:role-unchecked:manage", "idn:role-checked:manage", "idn:role-checked:read" ] }, "/roles/v1/{id}/access-model-metadata/{attributeKey}/values/{attributeValue}": { "POST": [ "idn:role:update", "idn:role-checked:update" ], "DELETE": [ "idn:role:delete", "idn:role-checked:delete", "idn:role:update", "idn:role-checked:update" ] }, "/roles/v1/access-model-metadata/bulk-update/ids": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/v1/access-model-metadata/bulk-update/filter": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/v1/access-model-metadata/bulk-update/query": { "POST": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/v1/access-model-metadata/bulk-update/id": { "GET": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/v1/access-model-metadata/bulk-update": { "GET": [ "idn:role:update", "idn:role-checked:update" ] }, "/roles/v1/filter": { "POST": [ "idn:role-unchecked:read", "idn:role-unchecked:manage" ] }, "/saved-searches/v1": { "POST": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ] }, "/saved-searches/v1/{id}": { "PUT": [ "sp:saved-search:manage" ], "GET": [ "sp:saved-search:read" ], "DELETE": [ "sp:saved-search:manage" ] }, "/saved-searches/v1/{id}/execute": { "POST": [ "sp:saved-search:manage" ] }, "/scheduled-searches/v1": { "POST": [ "sp:scheduled-search:manage" ], "GET": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/v1/{id}": { "PUT": [ "sp:scheduled-search:manage" ], "DELETE": [ "sp:scheduled-search:manage" ] }, "/scheduled-searches/v1/{id}/unsubscribe": { "POST": [ "sp:scopes:all" ] }, "/search/v1": { "POST": [ "sp:search:read" ] }, "/search/v1/count": { "POST": [ "sp:search:read" ] }, "/search/v1/aggregate": { "POST": [ "sp:search:read" ] }, "/search/v1/{index}/{id}": { "GET": [ "sp:search:read" ] }, "/accounts/v1/search-attribute-config": { "POST": [ "idn:account-config:manage" ], "GET": [ "idn:account-config:read", "idn:account-config:manage" ] }, "/accounts/v1/search-attribute-config/{name}": { "GET": [ "idn:account-config:read", "idn:account-config:manage" ], "DELETE": [ "idn:account-config:manage" ], "PATCH": [ "idn:account-config:manage" ] }, "/segments/v1": { "POST": [ "idn:segment:manage" ], "GET": [ "idn:segment:read", "idn:segment:manage" ] }, "/segments/v1/{id}": { "GET": [ "idn:segment:read", "idn:segment:manage" ], "DELETE": [ "idn:segment:manage" ], "PATCH": [ "idn:segment:manage" ] }, "/service-desk-integrations/v1": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/v1/{id}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/v1/types": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/v1/templates/{scriptName}": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ] }, "/service-desk-integrations/v1/status-check-configuration": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "PUT": [ "idn:service-desk-integration:manage" ] }, "/ssf/v1/streams": { "POST": [ "sp:ssf-transmitter-streams:manage" ], "GET": [ "sp:ssf-transmitter-streams:manage" ], "PATCH": [ "sp:ssf-transmitter-streams:manage" ], "PUT": [ "sp:ssf-transmitter-streams:manage" ], "DELETE": [ "sp:ssf-transmitter-streams:manage" ] }, "/ssf/v1/streams/status": { "GET": [ "sp:ssf-transmitter-streams:manage" ], "POST": [ "sp:ssf-transmitter-streams:manage" ] }, "/ssf/v1/streams/verify": { "POST": [ "sp:ssf-transmitter-streams:manage" ] }, "/sim-integrations/v1/{id}": { "PUT": [ "idn:service-desk-integration:manage" ], "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "DELETE": [ "idn:service-desk-integration:manage" ], "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations/v1/{id}/beforeProvisioningRule": { "PATCH": [ "idn:service-desk-integration:manage" ] }, "/sim-integrations/v1": { "GET": [ "idn:service-desk-integration:read", "idn:service-desk-integration:manage" ], "POST": [ "idn:service-desk-integration:manage" ] }, "/controls/v1": { "GET": [ "idn:sod-control:read" ], "POST": [ "idn:sod-control:manage" ] }, "/controls/v1/{id}": { "GET": [ "idn:sod-control:read" ], "PUT": [ "idn:sod-control:manage" ], "DELETE": [ "idn:sod-control:manage" ] }, "/sod-policies/v1": { "POST": [ "idn:sod-policy:manage" ], "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ] }, "/sod-policies/v1/{id}": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ], "PATCH": [ "idn:sod-policy:manage" ] }, "/sod-policies/v1/{id}/evaluate": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/v1/{id}/schedule": { "GET": [ "idn:sod-policy:read", "idn:sod-policy:manage" ], "PUT": [ "idn:sod-policy:manage" ], "DELETE": [ "idn:sod-policy:manage" ] }, "/sod-policies/v1/{id}/violation-report/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-policies/v1/{id}/violation-report": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-policies/v1/sod-violation-report-status/{reportResultId}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/v1/run": { "POST": [ "idn:sod-violation:manage" ] }, "/sod-violation-report/v1": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/v1/{reportResultId}/download": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violation-report/v1/{reportResultId}/download/{fileName}": { "GET": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/v1/predict": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/sod-violations/v1/check": { "POST": [ "idn:sod-violation:read", "idn:sod-violation:manage" ] }, "/violations/v1": { "GET": [ "idn:sod-violation:read" ] }, "/my-violations/v1": { "GET": [ "idn:sod-violation:read" ] }, "/violations/v1/{id}": { "GET": [ "idn:sod-violation:read" ] }, "/violations/v1/{id}/controls": { "POST": [ "idn:sod-violation:manage" ] }, "/violations/v1/{id}/reassign": { "POST": [ "idn:sod-violation:manage" ] }, "/source-usages/v1/{sourceId}/status": { "GET": [ "idn:identity-history:manage" ] }, "/source-usages/v1/{sourceId}/summaries": { "GET": [ "idn:identity-history:manage" ] }, "/sources/v1": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/v1/{id}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/v1/{sourceId}/provisioning-policies": { "GET": [ "idn:provisioning-policy:read", "idn:provisioning-policy:manage" ], "POST": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ] }, "/sources/v1/{sourceId}/provisioning-policies/{usageType}": { "GET": [ "idn:provisioning-policy-source:read", "idn:provisioning-policy:read", "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PUT": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PATCH": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "DELETE": [ "idn:provisioning-policy:manage" ] }, "/sources/v2/{sourceId}/provisioning-policies": { "GET": [ "idn:provisioning-policy:read", "idn:provisioning-policy:manage" ], "POST": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ] }, "/sources/v2/{sourceId}/provisioning-policies/{id}": { "GET": [ "idn:provisioning-policy-source:read", "idn:provisioning-policy:read", "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PUT": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "PATCH": [ "idn:provisioning-policy-source-admin-operations:manage", "idn:provisioning-policy:manage" ], "DELETE": [ "idn:provisioning-policy:manage" ] }, "/sources/v1/{sourceId}/provisioning-policies/bulk-update": { "POST": [ "idn:provisioning-policy:manage" ] }, "/sources/v1/{sourceId}/datasets": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:update", "idn:source-schema:create", "idn:sources:manage", "idn:source-schema:manage" ] }, "/sources/v1/{sourceId}/datasets/{datasetId}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:update", "idn:sources:manage" ], "PATCH": [ "idn:sources:update", "idn:sources:manage" ], "DELETE": [ "idn:sources:delete", "idn:source-schema:delete", "idn:sources:manage", "idn:source-schema:manage" ] }, "/sources/v1/{sourceId}/datasets/{datasetId}/aggregate": { "POST": [ "idn:sources:aggregate", "idn:sources:manage" ] }, "/sources/v1/{sourceId}/datasets/{datasetId}/delete-objects": { "POST": [ "idn:sources:aggregate", "idn:sources:manage" ] }, "/sources/v1/{sourceId}/resources": { "GET": [ "idn:sources:read", "idn:source-schema:read", "idn:sources:manage", "idn:source-schema:manage" ], "POST": [ "idn:sources:update", "idn:source-schema:create", "idn:sources:manage", "idn:source-schema:manage" ] }, "/sources/v1/{sourceId}/resources/mappings": { "GET": [ "idn:sources:read", "idn:source-schema:read", "idn:sources:manage", "idn:source-schema:manage" ] }, "/sources/v1/{sourceId}/resources/{resourceId}": { "GET": [ "idn:sources:read", "idn:source-schema:read", "idn:sources:manage", "idn:source-schema:manage" ], "PUT": [ "idn:sources:update", "idn:source-schema:update", "idn:sources:manage", "idn:source-schema:manage" ], "PATCH": [ "idn:sources:update", "idn:source-schema:update", "idn:sources:manage", "idn:source-schema:manage" ], "DELETE": [ "idn:sources:update", "idn:source-schema:delete", "idn:sources:manage", "idn:source-schema:manage" ] }, "/sources/v1/{sourceId}/schemas": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/v1/{sourceId}/schedules": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "POST": [ "idn:sources:manage" ] }, "/sources/v1/{sourceId}/schedules/{scheduleType}": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PATCH": [ "idn:sources:manage" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/v1/{sourceId}/schemas/{schemaId}": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "PUT": [ "idn:source-schema:manage" ], "PATCH": [ "idn:source-schema:manage" ], "DELETE": [ "idn:source-schema:manage" ] }, "/sources/v1/{sourceId}/source-health": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/v1/{id}/schemas/accounts": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/v1/{id}/schemas/entitlements": { "GET": [ "idn:source-schema:read", "idn:source-schema:manage" ], "POST": [ "idn:source-schema:manage" ] }, "/sources/v1/{sourceId}/upload-connector-file": { "POST": [ "idn:sources-admin:manage" ] }, "/sources/v1/{sourceId}/connections": { "GET": [ "idn:sources:read", "idn:sources:manage" ] }, "/sources/v1/{id}/correlation-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/sources/v1/{sourceId}/password-policies": { "GET": [ "idn:password-policy:read" ], "PATCH": [ "idn:sources:manage" ] }, "/sources/v1/{sourceId}/connector/check-connection": { "POST": [ "idn:source-connector:manage" ] }, "/sources/v1/{sourceId}/connector/peek-resource-objects": { "POST": [ "idn:source-connector:manage" ] }, "/sources/v1/{sourceId}/connector/ping-cluster": { "POST": [ "idn:source-connector:manage" ] }, "/sources/v1/{sourceId}/connector/test-configuration": { "POST": [ "idn:source-connector:manage" ] }, "/sources/v1/{id}/connectors/source-config": { "GET": [ "idn:connector-config:read", "idn:connector-config:manage" ] }, "/sources/v1/{sourceId}/native-change-detection-config": { "GET": [ "idn:sources:read" ], "PUT": [ "idn:sources:update" ], "DELETE": [ "idn:sources:manage" ] }, "/sources/v1/{id}/remove-accounts": { "POST": [ "idn:accounts:manage" ] }, "/sources/v1/{id}/load-accounts": { "POST": [ "idn:sources:manage" ] }, "/sources/v1/{id}/load-uncorrelated-accounts": { "POST": [ "idn:sources:manage" ] }, "/sources/v1/{id}/attribute-sync-config": { "GET": [ "idn:attr-sync-source-config:read", "idn:attr-sync-source-config:manage" ], "PUT": [ "idn:attr-sync-source-config:manage" ] }, "/sources/v1/{id}/synchronize-attributes": { "POST": [ "idn:attr-sync-source-config:manage" ] }, "/sources/v1/{id}/entitlement-request-config": { "GET": [ "idn:sources:read", "idn:sources:manage" ], "PUT": [ "idn:sources:manage" ] }, "/sources/v1/{sourceId}/load-entitlements": { "POST": [ "idn:entitlement:manage" ] }, "/sources/v1/{sourceId}/approval-config/machine-account-delete": { "GET": [ "idn:source-config:read", "idn:source-config:write" ], "PATCH": [ "idn:source-config:read", "idn:source-config:write" ] }, "/sources/v1/{sourceId}/approval-config/account-delete": { "GET": [ "idn:source-config:read", "idn:source-config:write" ], "PATCH": [ "idn:source-config:read", "idn:source-config:write" ] }, "/sp-config/v1/export": { "POST": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/v1/export/{id}": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/v1/export/{id}/download": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/sp-config/v1/import": { "POST": [ "sp:config:manage" ] }, "/sp-config/v1/import/{id}": { "GET": [ "sp:config:manage" ] }, "/sp-config/v1/import/{id}/download": { "GET": [ "sp:config:manage" ] }, "/sp-config/v1/config-objects": { "GET": [ "sp:config:read", "sp:config:manage" ] }, "/suggested-entitlement-descriptions/v1/auto-write-settings": { "GET": [ "idn:sed:read" ], "POST": [ "idn:sed:manage" ], "PATCH": [ "idn:sed:manage" ] }, "/entitlement-recommendations/v1/pending-approvals": { "GET": [ "idn:sed:read" ] }, "/privileged-recommendations/v1": { "GET": [ "idn:privilege-rec:read" ] }, "/entitlement-recommendations/v1/bulk-approve": { "POST": [ "idn:sed:manage" ] }, "/entitlement-recommendations/v1/assign": { "POST": [ "idn:sed:manage" ] }, "/entitlement-recommendations/v1/{id}": { "PATCH": [ "idn:sed:manage" ] }, "/suggested-entitlement-description-batches/v1/{batchId}/stats": { "GET": [ "idn:sed:read" ] }, "/suggested-entitlement-description-batches/v1": { "GET": [ "idn:sed:read" ], "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-approvals/v1": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-description-assignments/v1": { "POST": [ "idn:sed:write" ] }, "/suggested-entitlement-descriptions/v1": { "GET": [ "idn:sed:read" ], "PATCH": [ "idn:sed:write" ] }, "/tagged-objects/v1": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tagged-objects/v1/{type}": { "GET": [ "idn:tag:read", "idn:tag:manage" ] }, "/tagged-objects/v1/{type}/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "PUT": [ "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/tagged-objects/v1/bulk-add": { "POST": [ "idn:tag:manage" ] }, "/tagged-objects/v1/bulk-remove": { "POST": [ "idn:tag:manage" ] }, "/tags/v1": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "POST": [ "idn:tag:manage" ] }, "/tags/v1/{id}": { "GET": [ "idn:tag:read", "idn:tag:manage" ], "DELETE": [ "idn:tag:manage" ] }, "/task-status/v1/{id}": { "GET": [ "idn:task-management:read", "idn:task-management:write" ], "PATCH": [ "idn:task-management:write" ] }, "/task-status/v1": { "GET": [ "idn:task-management:read", "idn:task-management:write" ] }, "/tenant/v1": { "GET": [ "sp:tenant:read" ] }, "/tenant-context/v1": { "GET": [ "idn:tenant-context:read" ], "PATCH": [ "idn:tenant-context:write" ] }, "/transforms/v1": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "POST": [ "idn:transform:manage" ] }, "/transforms/v1/{id}": { "GET": [ "idn:transform:read", "idn:transform:manage" ], "PUT": [ "idn:transform:manage" ], "DELETE": [ "idn:transform:manage" ] }, "/triggers/v1": { "GET": [ "sp:trigger-service-subscriptions:read" ] }, "/trigger-subscriptions/v1": { "POST": [ "sp:trigger-service-subscriptions:manage" ], "GET": [ "sp:trigger-service-subscriptions:read", "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/v1/{id}": { "PUT": [ "sp:trigger-service-subscriptions:manage" ], "PATCH": [ "sp:trigger-service-subscriptions:manage" ], "DELETE": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-subscriptions/v1/validate-filter": { "POST": [ "sp:trigger-service-subscriptions:manage" ] }, "/trigger-invocations/v1/status": { "GET": [ "sp:trigger-service-invocation-status:read", "sp:trigger-service-invocation-status:manage" ] }, "/trigger-invocations/v1/test": { "POST": [ "sp:trigger-service-invocation-status:manage" ] }, "/ui-metadata/v1/tenant": { "GET": [ "idn:ui-access-metadata-page:read" ], "PUT": [ "idn:ui-access-metadata-page:manage" ] }, "/work-items/v1": { "GET": [ "sp:scopes:all" ] }, "/work-items/v1/completed": { "GET": [ "sp:scopes:all" ] }, "/work-items/v1/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/v1/completed/count": { "GET": [ "sp:scopes:all" ] }, "/work-items/v1/summary": { "GET": [ "sp:scopes:all" ] }, "/work-items/v1/{id}": { "GET": [ "sp:scopes:all" ], "POST": [ "sp:scopes:all" ] }, "/work-items/v1/{id}/approve/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/v1/{id}/reject/{approvalItemId}": { "POST": [ "sp:scopes:all" ] }, "/work-items/v1/bulk-approve/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/v1/bulk-reject/{id}": { "POST": [ "sp:scopes:all" ] }, "/work-items/v1/{id}/submit-account-selection": { "POST": [ "sp:scopes:all" ] }, "/work-items/v1/{id}/forward": { "POST": [ "sp:scopes:all" ] }, "/reassignment-configurations/v1/types": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/v1": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "POST": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/v1/{identityId}": { "GET": [ "idn:reassignment-configuration:read", "idn:reassignment-configuration:manage" ], "PUT": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/v1/{identityId}/{configType}": { "DELETE": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/v1/{identityId}/evaluate/{configType}": { "GET": [ "idn:reassignment-configuration:manage" ] }, "/reassignment-configurations/v1/tenant-config": { "GET": [ "idn:reassignment-tenant-configuration:read" ], "PUT": [ "idn:reassignment-tenant-configuration:update" ] }, "/workflows/v1": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "POST": [ "sp:workflow:manage" ] }, "/workflows/v1/{id}": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ], "PUT": [ "sp:workflow:manage" ], "PATCH": [ "sp:workflow:manage" ], "DELETE": [ "sp:workflow:manage" ] }, "/workflows/v1/{id}/test": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/v1/{id}/executions": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/v1/{id}": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/v1/{id}/history": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/v1/{id}/history-v2": { "GET": [ "sp:workflow-execution:read", "sp:workflow:manage" ] }, "/workflow-executions/v1/{id}/cancel": { "POST": [ "sp:workflow-execute:external" ] }, "/workflow-library/v1": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/v1/actions": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/v1/triggers": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflow-library/v1/operators": { "GET": [ "sp:workflow:read", "sp:workflow:manage" ] }, "/workflows/v1/{id}/external/oauth-clients": { "POST": [ "sp:workflow:manage" ] }, "/workflows/v1/execute/external/{id}": { "POST": [ "sp:workflow-execute:external" ] }, "/workflows/v1/execute/external/{id}/test": { "POST": [ "sp:workflow-execute:external" ] } } }