Qodex.ai

List grants of a specific app

GET {{HOST}}/admin/v1/Apps/{{appid}}?attributes=grants

There are two ways to do this:

  1. Request the grants attribute of the app
  2. Query Grants yourself

If you request the grants attribute of the App, it contains the essential data: the ID of the Grant, the ID of the grantee, the type of the grantee, the grantMechanism, and so on.

A Grant that specifies as grantee a particular App (and usually a particular AppRole defined by that App) allows that grantee App (Client) to access the resources of the granted App.

  • Oracle Identity Cloud Service supports currently only Grant-to-App of an AppRole defined by another App:
    • An App needs membership in at least one AppRole defined by the server App in order to support legacy, AppID-based association.
    • An App may need memberships in AppRoles defined by the server App to authorize access that OAuth trust enables.

In theory, Oracle Identity Cloud Service could also support a Grant-to-App of another App that doesn't specify an AppRole defined by that other App.

Note that fulfillment of a Grant-to-App does not record the grantee App as a member of the AppRole. Instead, fulfillment records the granted AppRole) in the grantedAppRoles attribute of the grantee App.

See https://docs.oracle.com/en/cloud/paas/identity-cloud/rest-api/appmgmtrelationships.html for more information on understanding application management relationships between Apps, AppRoles, Users, and Groups.

Request Params

KeyDatatypeRequiredDescription
attributesstring

HEADERS

KeyDatatypeRequiredDescription
Authorizationstring

RESPONSES

status: OK

{"displayName":"Demo","isAliasApp":false,"id":"c4b20a6b16e24fec9e3e18322c997297","basedOnTemplate":{"value":"CustomWebAppTemplateId"},"grants":[{"value":"05d5632efb454ee1a110c14760dbde32","grantMechanism":"ADMINISTRATOR_TO_GROUP","granteeType":"Group","granteeId":"d881c0c496b644e8aa81f4879c09d3c5","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/05d5632efb454ee1a110c14760dbde32"},{"value":"5843f7010fd74502870e0f1fc286e94a","grantMechanism":"GROUP_MEMBERSHIP","granteeType":"User","granteeId":"9114eff419c3447b94ed32ad5b50aec9","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/5843f7010fd74502870e0f1fc286e94a"},{"value":"309c47bc3e824346940f0b666f3a3067","grantMechanism":"GROUP_MEMBERSHIP","granteeType":"User","granteeId":"bd90825e45614dbf8856539513c91c3a","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/309c47bc3e824346940f0b666f3a3067"},{"value":"d5f69cd0acaf4d73a09e420115775c0c","grantMechanism":"GROUP_MEMBERSHIP","granteeType":"User","granteeId":"bdd6cd25dca140de8aa9d55af81946a3","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/d5f69cd0acaf4d73a09e420115775c0c"},{"value":"d10d6aaaea254758ac4840ccf3efe535","grantMechanism":"GROUP_MEMBERSHIP","granteeType":"User","granteeId":"ac9f22415aeb4fd9866166b624decb46","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/d10d6aaaea254758ac4840ccf3efe535"},{"value":"12ad5c5ec34c4fbdb3fdfeed3cfa4d74","grantMechanism":"GROUP_MEMBERSHIP","granteeType":"User","granteeId":"64657f954bc7466594eedb1ce7780846","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/12ad5c5ec34c4fbdb3fdfeed3cfa4d74"},{"value":"6f7c95ef6bf944f8954c7fe80097ab3b","grantMechanism":"GROUP_MEMBERSHIP","granteeType":"User","granteeId":"98296b6bd077438a9fe368128fd2faac","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/6f7c95ef6bf944f8954c7fe80097ab3b"},{"value":"ca82aecce8234b6f82e8a73f4b16cb1a","grantMechanism":"ADMINISTRATOR_TO_USER","granteeType":"User","granteeId":"64657f954bc7466594eedb1ce7780846","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/ca82aecce8234b6f82e8a73f4b16cb1a"},{"value":"e7deff8e56294c6690a460a0d57cbc57","grantMechanism":"ADMINISTRATOR_TO_USER","granteeType":"User","granteeId":"ac9f22415aeb4fd9866166b624decb46","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/e7deff8e56294c6690a460a0d57cbc57"},{"value":"2d95fcefd687485db3ffa57a65343917","grantMechanism":"ADMINISTRATOR_TO_USER","granteeType":"User","granteeId":"bdd6cd25dca140de8aa9d55af81946a3","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/2d95fcefd687485db3ffa57a65343917"},{"value":"d6792fc63f174bb49d1fd86ca25919da","grantMechanism":"ADMINISTRATOR_TO_USER","granteeType":"User","granteeId":"bd90825e45614dbf8856539513c91c3a","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/d6792fc63f174bb49d1fd86ca25919da"},{"value":"80cb5b7e713842d59cf0b78f4e1f330c","grantMechanism":"ADMINISTRATOR_TO_USER","granteeType":"User","granteeId":"98296b6bd077438a9fe368128fd2faac","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/80cb5b7e713842d59cf0b78f4e1f330c"},{"value":"33537759ef8a456685cdbd17421d62ea","grantMechanism":"GROUP_MEMBERSHIP","granteeType":"User","granteeId":"24472fea54f143e3aa8ebbf7fd08721a","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/33537759ef8a456685cdbd17421d62ea"},{"value":"e5d28b8927894860a2e8761b66cbab85","grantMechanism":"ADMINISTRATOR_TO_USER","granteeType":"User","granteeId":"9114eff419c3447b94ed32ad5b50aec9","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/e5d28b8927894860a2e8761b66cbab85"}]}