Create Access Profile
POST {{baseUrl}}/access-profiles
Use this API to create an access profile. A token with API, ORGADMIN, ROLEADMIN, ROLESUBADMIN, SOURCEADMIN, or SOURCESUBADMIN authority is required to call this API. In addition, a token with only ROLESUBADMIN or SOURCE_SUBADMIN authority must be associated with the access profile's Source. The maximum supported length for the description field is 2000 characters. Longer descriptions will be preserved for existing access profiles. However, any new access profiles as well as any updates to existing descriptions are limited to 2000 characters.
Request Body
{"owner"=>{"type"=>"IDENTITY", "id"=>"2c9180a46faadee4016fb4e018c20639", "name"=>"support"}, "name"=>"Employee-database-read-write", "source"=>{"id"=>"2c91809773dee3610173fdb0b6061ef4", "type"=>"SOURCE", "name"=>"ODS-AD-SOURCE"}, "id"=>"2c91808a7190d06e01719938fcd20792", "description"=>"Collection of entitlements to read/write the employee database", "created"=>"2021-03-01T22:32:58.104Z", "modified"=>"2021-03-02T20:22:28.104Z", "enabled"=>true, "entitlements"=>[{"type"=>"ENTITLEMENT", "id"=>"2c91809773dee32014e13e122092014e", "name"=>"CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"}, {"type"=>"ENTITLEMENT", "id"=>"2c91809773dee32014e13e122092014e", "name"=>"CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"}], "requestable"=>true, "accessRequestConfig"=>{"commentsRequired"=>true, "denialCommentsRequired"=>true, "approvalSchemes"=>[{"approverType"=>"GOVERNANCE_GROUP", "approverId"=>"46c79819-a69f-49a2-becb-12c971ae66c6"}, {"approverType"=>"GOVERNANCE_GROUP", "approverId"=>"46c79819-a69f-49a2-becb-12c971ae66c6"}]}, "revocationRequestConfig"=>{"approvalSchemes"=>[{"approverType"=>"GOVERNANCE_GROUP", "approverId"=>"46c79819-a69f-49a2-becb-12c971ae66c6"}, {"approverType"=>"GOVERNANCE_GROUP", "approverId"=>"46c79819-a69f-49a2-becb-12c971ae66c6"}]}, "segments"=>["f7b1b8a3-5fed-4fd4-ad29-82014e137e19", "29cb6c06-1da8-43ea-8be4-b3125f248f2a"], "provisioningCriteria"=>{"operation"=>"OR", "children"=>[{"operation"=>"AND", "children"=>[{"attribute"=>"dn", "operation"=>"CONTAINS", "value"=>"useast"}, {"attribute"=>"manager", "operation"=>"CONTAINS", "value"=>"Scott.Clark"}]}, {"operation"=>"AND", "children"=>[{"attribute"=>"dn", "operation"=>"EQUALS", "value"=>"Gibson"}, {"attribute"=>"telephoneNumber", "operation"=>"CONTAINS", "value"=>"512"}]}]}}
HEADERS
Key | Datatype | Required | Description |
---|---|---|---|
Content-Type | string | ||
Accept | string |
RESPONSES
status: Created
{"owner":{"type":"IDENTITY","id":"2c9180a46faadee4016fb4e018c20639","name":"support"},"name":"Employee-database-read-write","source":{"id":"2c91809773dee3610173fdb0b6061ef4","type":"SOURCE","name":"ODS-AD-SOURCE"},"id":"2c91808a7190d06e01719938fcd20792","description":"Collection of entitlements to read/write the employee database","created":"2021-03-01T22:32:58.104Z","modified":"2021-03-02T20:22:28.104Z","enabled":true,"entitlements":[{"type":"ENTITLEMENT","id":"2c91809773dee32014e13e122092014e","name":"CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"},{"type":"ENTITLEMENT","id":"2c91809773dee32014e13e122092014e","name":"CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"}],"requestable":true,"accessRequestConfig":{"commentsRequired":true,"denialCommentsRequired":true,"approvalSchemes":[{"approverType":"GOVERNANCE_GROUP","approverId":"46c79819-a69f-49a2-becb-12c971ae66c6"},{"approverType":"GOVERNANCE_GROUP","approverId":"46c79819-a69f-49a2-becb-12c971ae66c6"}]},"revocationRequestConfig":{"approvalSchemes":[{"approverType":"GOVERNANCE_GROUP","approverId":"46c79819-a69f-49a2-becb-12c971ae66c6"},{"approverType":"GOVERNANCE_GROUP","approverId":"46c79819-a69f-49a2-becb-12c971ae66c6"}]},"segments":["f7b1b8a3-5fed-4fd4-ad29-82014e137e19","29cb6c06-1da8-43ea-8be4-b3125f248f2a"],"provisioningCriteria":{"operation":"OR","children":[{"operation":"AND","children":[{"attribute":"dn","operation":"CONTAINS","value":"useast"},{"attribute":"manager","operation":"CONTAINS","value":"Scott.Clark"}]},{"operation":"AND","children":[{"attribute":"dn","operation":"EQUALS","value":"Gibson"},{"attribute":"telephoneNumber","operation":"CONTAINS","value":"512"}]}]}}