List all of a user's granted approles

GET {{HOST}}/admin/v1/Users/{{userid}}?attributes=urn:ietf:params:scim:schemas:oracle:idcs:extension:user:User:appRoles

Get all AppRoles assigned to a specific User. An App (and optionally any of the AppRoles it defines) can be granted to a User in two ways:

• Directly, when the Grant specifies as grantee a particular User
• Indirectly, when a Grant specifies as grantee a particular Group (of which the User is or becomes a member)

Fulfillment of a Grant of an AppRole to a User doesn't require an Identity Connector Framework Connector (ICF). Because Oracle Identity Cloud Service maintains internally the members of each AppRole, fulfillment simply adds that User as a member of the AppRole. If that User is already a member of that AppRole, this is a NO-OP.

---

The system fulfills (enacts) a Grant to a User by creating an AccountMgmtInfo resource that records the User's access to that App.

If the Grant specifies an AppRole, then fulfillment also adds the grantee User as a member of the specified AppRole (unless that User is already a member of that AppRole).

See https://docs.oracle.com/en/cloud/paas/identity-cloud/rest-api/appmgmtrelationships.html for more information on understanding application management relationships between Apps, AppRoles, Users, and Groups.

Request Params

HEADERS