List all grants of a specific app for a specific user

GET {{HOST}}/admin/v1/Users/{{userid}}?attributes=urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User:grants[appId eq "{{appid}}"]

The system fulfills (enacts) a Grant to a User by creating an AccountMgmtInfo resource that records the User's access to that App.

If the Grant specifies an AppRole, then fulfillment also adds the grantee User as a member of the specified AppRole (unless that User is already a member of that AppRole).


A Grant says that someone (the grantor) says that someone (a grantee) should have something (access to an App, and optionally an entitlement within that App).

  • The grantor is typically an administrator (but could also be some component of the system).
  • The grantee is typically a User, but could also be a Group or another App.
  • The granted App may be accompanied by an entitlement defined by that App.
    • In general, an entitlement can be any specific value of any specific attribute of the App-specific identity. (A ManagedApp has its own identity-repository, so it defines the attributes for its own identities.)
    • One special case of an entitlement is membership in an AppRole defined by the App. (Granting an AppRole defined by the App necessarily grants access to the App.)

See https://docs.oracle.com/en/cloud/paas/identity-cloud/rest-api/appmgmtrelationships.html for more information on understanding application management relationships between Apps, AppRoles, Users, and Groups.

Request Params

KeyDatatypeRequiredDescription
attributesstring

HEADERS

KeyDatatypeRequiredDescription
Authorizationstring
Content-Typestring

RESPONSES

status: OK

{"schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse"],"totalResults":12,"Resources":[{"id":"9114eff419c3447b94ed32ad5b50aec9","userName":"john.doe@oracle.com","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"de6e9f90110f46c9a6ea57552e4e687c","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/de6e9f90110f46c9a6ea57552e4e687c"}]}},{"id":"98296b6bd077438a9fe368128fd2faac","userName":"admin@oracle.com","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"ADMINISTRATOR_TO_USER","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"80cb5b7e713842d59cf0b78f4e1f330c","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/80cb5b7e713842d59cf0b78f4e1f330c"},{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"352841cb3bd9450aac4a4ff79b76e51b","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/352841cb3bd9450aac4a4ff79b76e51b"}]}},{"id":"64657f954bc7466594eedb1ce7780846","userName":"Agold","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"e93fc163bcbe451a8301e6afad1e9f61","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/e93fc163bcbe451a8301e6afad1e9f61"}]}},{"id":"bd90825e45614dbf8856539513c91c3a","userName":"SWasher","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"ADMINISTRATOR_TO_USER","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"d6792fc63f174bb49d1fd86ca25919da","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/d6792fc63f174bb49d1fd86ca25919da"},{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"f07471de1a0841cc8c1d98091f52924d","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/f07471de1a0841cc8c1d98091f52924d"}]}},{"id":"ac9f22415aeb4fd9866166b624decb46","userName":"BJones","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"bcfc4ba4815742aeb35dde72fd86127f","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/bcfc4ba4815742aeb35dde72fd86127f"}]}},{"id":"bdd6cd25dca140de8aa9d55af81946a3","userName":"JSmith","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"ADMINISTRATOR_TO_USER","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"2d95fcefd687485db3ffa57a65343917","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/2d95fcefd687485db3ffa57a65343917"},{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"6139fe907b0748fea11be61ab0015b77","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/6139fe907b0748fea11be61ab0015b77"}]}},{"id":"24472fea54f143e3aa8ebbf7fd08721a","userName":"john.doe@example.com","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"ed144a995b5b476397267f564d1b8905","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/ed144a995b5b476397267f564d1b8905"}]}},{"id":"00b6a6fab20240378475233a9a394409","userName":"xhanel@example.com","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"89c15a685040472ea160efef537e0de8","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/89c15a685040472ea160efef537e0de8"}]}},{"id":"574b453f17654b8a9306f264ce790338","userName":"fredmilson@example.com","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"3434cc9ec44746da89848ea8d5a6324c","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/3434cc9ec44746da89848ea8d5a6324c"}]}},{"id":"65f00dc1418641caa52fffd8e70420e6","userName":"aahmlek@example.com","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"93aa36605a7141fbb5f8411febc7536f","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/93aa36605a7141fbb5f8411febc7536f"}]}},{"id":"8b34155f8bf647cbb1d90984cdb5df3c","userName":"smorrison@example.com","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"b297aafbda4a4454a3329f6e311d06e6","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/b297aafbda4a4454a3329f6e311d06e6"}]}},{"id":"bbaf0c5b82d242fcb4676eb27bf3f18a","userName":"rholt@example.com","urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User":{"grants":[{"grantMechanism":"GROUP_MEMBERSHIP","appId":"c4b20a6b16e24fec9e3e18322c997297","value":"7302738694064c0a92329e4afafb6f45","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Grants/7302738694064c0a92329e4afafb6f45"}]}}],"startIndex":1,"itemsPerPage":50}