Read All Roles

GET {{apiPath}}/roles

You can get a list of all the defined roles in the PingOne platform available for assignment. The following sample shows the GET /roles operation to return each platform role and the list of all permissions associated with the role.

RESPONSES

status: OK

{"_links":{"self":{"href":"https://api.pingone.com/v1/roles"}},"_embedded":{"roles":[{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/1813bc13-8d13-4e88-a825-d40bfe82777b"}},"id":"1813bc13-8d13-4e88-a825-d40bfe82777b","name":"Organization Admin","description":"Organization Admin","applicableTo":["ORGANIZATION"],"permissions":[{"id":"advancedservices:read:config","classifier":"config","description":"Retrieve PingOne Advanced Services customer configuration"},{"id":"authz:update:entity","classifier":"entity","description":"Update PingOne Authorize Entity"},{"id":"pingintelligence:create:orchestration","classifier":"orchestration","description":"Creates a Orchestration flow for Ping Intelligence deployment"},{"id":"authz:read:entity","classifier":"entity","description":"Read PingOne Authorize Entity"},{"id":"authz:read:recentdecisions","classifier":"recentdecisions","description":"Read Recent Decisions of a PingOne Authorize Decision Endpoint"},{"id":"orgmgt:read:organization","classifier":"organization","description":"Read organizations"},{"id":"pingenterprise:update:orchestration","classifier":"orchestration","description":"Updates Orchestration flow for Ping Enterprise deployment"},{"id":"pingenterprise:create:orchestration","classifier":"orchestration","description":"Creates a Orchestration flow for Ping Enterprise deployment"},{"id":"orgmgt:read:environment","classifier":"environment","description":"Read environments"},{"id":"pingintelligence:update:orchestration","classifier":"orchestration","description":"Updates Orchestration flow for Ping Intelligence deployment"},{"id":"orgmgt:read:deployment","classifier":"deployment","description":"Read deployment resource"},{"id":"authz:update:tag","classifier":"tag","description":"Create and Update PingOne Authorize Policy Version Tag"},{"id":"authz:create:decisionendpoint","classifier":"decisionendpoint","description":"Create PingOne Authorize Decision Endpoint"},{"id":"advancedservices:delete:environment","classifier":"environment","description":"Delete PingOne Advanced Services environment"},{"id":"authz:create:entity","classifier":"entity","description":"Create PingOne Authorize Entity"},{"id":"authz:test:entity","classifier":"entity","description":"Test PingOne Authorize Entity"},{"id":"authz:update:decisionendpoint","classifier":"decisionendpoint","description":"Update PingOne Authorize Decision Endpoint"},{"id":"authz:delete:entity","classifier":"entity","description":"Delete PingOne Authorize Entity"},{"id":"orgmgt:update:environment","classifier":"environment","description":"Update environment"},{"id":"integrations:read:integration","classifier":"integration","description":"Read an integration in integration catalog"},{"id":"authz:authorize:decisionendpoint","classifier":"decisionendpoint","description":"Request Decision from a PingOne Authorize Decision Endpoint"},{"id":"visualization:create:exploration","classifier":"exploration","description":"Create data exploration"},{"id":"authz:delete:decisionendpointcache","classifier":"decisionendpointcache","description":"Invalidate Cached Services used in Dynamic Authorization"},{"id":"bootstrap:read:bootstrap","classifier":"bootstrap","description":"Read bootstrap"},{"id":"visualization:read:template","classifier":"template","description":"Read data exploration template"},{"id":"pingenterprise:read:orchestration","classifier":"orchestration","description":"Retrieve Orchestration flow for Ping Enterprise deployment"},{"id":"pingenterprise:delete:orchestration","classifier":"orchestration","description":"Deletes Orchestration flow for Ping Enterprise deployment"},{"id":"visualization:read:exploration","classifier":"exploration","description":"Read data exploration"},{"id":"orgmgt:delete:environment","classifier":"environment","description":"Delete environment"},{"id":"orgmgt:promote:environment","classifier":"environment","description":"Promote environment"},{"id":"licensing:update:environmentLicense","classifier":"environmentLicense","description":"Update environment licenses"},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."},{"id":"integrations:delete:integration","classifier":"integration","description":"Delete an integration in integration catalog"},{"id":"authz:read:deploymentpackage","classifier":"deploymentpackage","description":"Read PingOne Authorize Deployment Packages"},{"id":"certmgt:create:key","classifier":"key","description":"Create a new KeyPair"},{"id":"pingintelligence:delete:orchestration","classifier":"orchestration","description":"Deletes Orchestration flow for Ping Intelligence deployment"},{"id":"visualization:read:dashboard","classifier":"dashboard","description":"Read dashboards"},{"id":"pingintelligence:read:orchestration","classifier":"orchestration","description":"Retrieve Orchestration flow for Ping Intelligence deployment"},{"id":"authz:read:version","classifier":"version","description":"Read PingOne Authorize Policy Version"},{"id":"advancedservices:create:orchestration","classifier":"orchestration","description":"Create PingOne Advanced Services Orchestration"},{"id":"authz:read:decisionendpoint","classifier":"decisionendpoint","description":"Read PingOne Authorize Decision Endpoint"},{"id":"orgmgt:create:environment","classifier":"environment","description":"Create environment"},{"id":"licensing:update:mutableProperties","classifier":"mutableProperties","description":"Update licenses' mutable properties"},{"id":"integrations:update:integration","classifier":"integration","description":"Update an integration in integration catalog"},{"id":"licensing:read:license","classifier":"license","description":"Read licenses"},{"id":"orgmgt:create:deployment","classifier":"deployment","description":"Create deployment resource"},{"id":"authz:read:tag","classifier":"tag","description":"Read PingOne Authorize Policy Version Tag"},{"id":"authz:delete:decisionendpoint","classifier":"decisionendpoint","description":"Delete PingOne Authorize Decision Endpoint"},{"id":"authz:delete:tag","classifier":"tag","description":"Delete PingOne Authorize Policy Version Tag"},{"id":"fraud:read:ssoLogin","classifier":"ssoLogin","description":"Read fraud SSO login"},{"id":"bootstrap:create:bootstrap","classifier":"bootstrap","description":"Create bootstrap"},{"id":"advancedservices:read:orchestration","classifier":"orchestration","description":"Retrieve PingOne Advanced Services Orchestration"}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/29ddce68-cd7f-4b2a-b6fc-f7a19553b496"}},"id":"29ddce68-cd7f-4b2a-b6fc-f7a19553b496","name":"Environment Admin","description":"Environment Admin","applicableTo":["ORGANIZATION","ENVIRONMENT"],"permissions":[{"id":"mfa:create:fidoPolicy","classifier":"fidoPolicy","description":"Create a FIDO policy"},{"id":"dir:create:population","classifier":"population","description":"Create populations"},{"id":"delegatedadmin:create:delegatedAdminConfigurations","classifier":"delegatedAdminConfigurations","description":"Create Delegated Admin Configurations"},{"id":"orgmgt:read:organization","classifier":"organization","description":"Read organizations"},{"id":"applications:update:flowPolicyAssignment","classifier":"flowPolicyAssignment","description":"Update flow policy assignments"},{"id":"formBuilder:update:form","classifier":"form","description":"Update a form"},{"id":"idverifications:delete:voicePhraseContent","classifier":"voicePhraseContent","description":"Delete PingOne Verify Voice Phrase Content"},{"id":"orgmgt:read:environment","classifier":"environment","description":"Read environments"},{"id":"langmgt:create:language","classifier":"language","description":"Create a language"},{"id":"osmosis:create:revision","classifier":"revision","description":"create a new configuration for a specific environment"},{"id":"authz:update:tag","classifier":"tag","description":"Create and Update PingOne Authorize Policy Version Tag"},{"id":"dir:read:userSyncedStores","classifier":"userSyncedStores","description":"get user's target store sync status"},{"id":"authz:create:decisionendpoint","classifier":"decisionendpoint","description":"Create PingOne Authorize Decision Endpoint"},{"id":"authz:create:entity","classifier":"entity","description":"Create PingOne Authorize Entity"},{"id":"authz:test:entity","classifier":"entity","description":"Test PingOne Authorize Entity"},{"id":"branding:delete:customDomain","classifier":"customDomain","description":"Delete a custom domain"},{"id":"solutions:update:config","classifier":"config","description":"Update the workflow configuration."},{"id":"authz:update:decisionendpoint","classifier":"decisionendpoint","description":"Update PingOne Authorize Decision Endpoint"},{"id":"osmosis:read:rule","classifier":"rule","description":"Read rule"},{"id":"osmosis:read:mapping","classifier":"mapping","description":"Read mapping"},{"id":"notifications:update:emailDomain","classifier":"emailDomain","description":"Update an email domain"},{"id":"idverifications:update:verifyPolicy","classifier":"verifyPolicy","description":"Update PingOne Verify Policies"},{"id":"risk:create:predictor","classifier":"predictor","description":"Create risk predictors"},{"id":"authn:read:signOnPolicy","classifier":"signOnPolicy","description":"Retrieve sign-on policies"},{"id":"subscriptions:delete:subscription","classifier":"subscription","description":"Delete a subscription"},{"id":"authn:create:signOnPolicy","classifier":"signOnPolicy","description":"Create sign-on policies"},{"id":"dir:create:passwordPolicy","classifier":"passwordPolicy","description":"Create Password Policies"},{"id":"osmosis:delete:store","classifier":"store","description":"delete store"},{"id":"agreements:read:agreement","classifier":"agreement","description":"Read Agreements"},{"id":"risk:create:policy","classifier":"policy","description":"Create risk policies"},{"id":"applicationRoles:read:applicationRole","classifier":"applicationRole","description":"List and read application roles"},{"id":"fraud:create:eventsDetails","classifier":"eventsDetails","description":"Create fraud eventsDetails"},{"id":"mfa:read:fidoPolicy","classifier":"fidoPolicy","description":"Retrieve a FIDO policy"},{"id":"alerting:update:channel","classifier":"channel","description":"Update AlertChannel"},{"id":"certmgt:update:key","classifier":"key","description":"Update a KeyPair"},{"id":"applicationRoles:read:applicationResource","classifier":"applicationResource","description":"List and read application resources"},{"id":"permissions:read:applicationRoleAssignments","classifier":"applicationRoleAssignments","description":"Read roles assigned to applications"},{"id":"fraud:read:evaluation","classifier":"evaluation","description":"Read fraud evaluation"},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."},{"id":"permissions:read:gatewayRoleAssignments","classifier":"gatewayRoleAssignments","description":"Read gateway role assignments"},{"id":"idverifications:delete:voicePhrase","classifier":"voicePhrase","description":"Delete PingOne Verify Voice Phrase"},{"id":"certmgt:create:key","classifier":"key","description":"Create a new KeyPair"},{"id":"permissions:delete:roles","classifier":"roles","description":"Delete Custom Roles"},{"id":"gateways:update:gateway","classifier":"gateway","description":"Update gateway"},{"id":"applications:issue:certificate","classifier":"certificate","description":"Issue a new KDC certificate"},{"id":"provisioning:create:provisioningSyncOrchestration","classifier":"provisioningSyncOrchestration","description":"Create a provisioning sync orchestration in a specific environment"},{"id":"delegatedadmin:delete:delegatedAdminConfigurations","classifier":"delegatedAdminConfigurations","description":"Delete Delegated Admin Configurations"},{"id":"authz:read:decisionendpoint","classifier":"decisionendpoint","description":"Read PingOne Authorize Decision Endpoint"},{"id":"applications:create:signOnPolicyAssignment","classifier":"signOnPolicyAssignment","description":"Create a sign-on policy assignment"},{"id":"delegatedadmin:update:delegatedAdminConfigurations","classifier":"delegatedAdminConfigurations","description":"Update Delegated Admin Configurations"},{"id":"authz:read:apiServerDeployment","classifier":"apiServerDeployment","description":"Read API Service deployment status"},{"id":"applicationRoles:create:applicationResource","classifier":"applicationResource","description":"Create application resources"},{"id":"identityProviders:update:identityProvider","classifier":"identityProvider","description":"Update Identity Provider information"},{"id":"applicationRoles:read:applicationRoleAssignment","classifier":"applicationRoleAssignment","description":"List application role assignments"},{"id":"langmgt:delete:language","classifier":"language","description":"Delete a language"},{"id":"resources:update:secret","classifier":"secret","description":"Generate a new client secret for a resource"},{"id":"agreements:create:agreement","classifier":"agreement","description":"Create Agreement"},{"id":"dir:read:groupSyncedRules","classifier":"groupSyncedRules","description":"get group's provisioning rule sync status"},{"id":"licensing:read:license","classifier":"license","description":"Read licenses"},{"id":"osmosis:check:connection","classifier":"connection","description":"check external sass connection"},{"id":"applications:delete:application","classifier":"application","description":"Delete an application's OIDC settings"},{"id":"resources:read:resource","classifier":"resource","description":"Retrieve resources from an environment"},{"id":"risk:read:policy","classifier":"policy","description":"Read risk policies"},{"id":"applications:update:grant","classifier":"grant","description":"Update a single resource access grant for an application"},{"id":"applicationRoles:delete:applicationRoleAssignment","classifier":"applicationRoleAssignment","description":"Unassign application roles"},{"id":"dir:delete:passwordPolicy","classifier":"passwordPolicy","description":"Delete Password Policies"},{"id":"applications:delete:pushCredentials","classifier":"pushCredentials","description":"Delete an application's push credentials information"},{"id":"pec:delete:product","classifier":"product","description":"Delete PingID product"},{"id":"solutions:read:config","classifier":"config","description":"Retrieve the workflow configuration."},{"id":"applicationRoles:delete:applicationRoleEntry","classifier":"applicationRoleEntry","description":"Remove application role entries"},{"id":"idverifications:delete:verifyPolicy","classifier":"verifyPolicy","description":"Delete PingOne Verify Policies"},{"id":"notifications:create:templateContent","classifier":"templateContent","description":"Create a notification template's content"},{"id":"mfa:create:oathToken","classifier":"oathToken","description":"Create an OATH Token"},{"id":"applicationRoles:read:applicationRoleEntry","classifier":"applicationRoleEntry","description":"List application role entries"},{"id":"mfa:delete:deviceAuthenticationPolicy","classifier":"deviceAuthenticationPolicy","description":"Delete device authentication policy"},{"id":"notifications:delete:notificationsPolicy","classifier":"notificationsPolicy","description":"Delete notifications policy"},{"id":"authz:read:recentdecisions","classifier":"recentdecisions","description":"Read Recent Decisions of a PingOne Authorize Decision Endpoint"},{"id":"audit_reporting:read:activity","classifier":"activity","description":"Get Audit Activity"},{"id":"branding:update:brandingSettings","classifier":"brandingSettings","description":"Update branding settings"},{"id":"osmosis:update:store","classifier":"store","description":"update store"},{"id":"subscriptions:create:subscription","classifier":"subscription","description":"Create a subscription"},{"id":"branding:create:customDomain","classifier":"customDomain","description":"Create a custom domain"},{"id":"alerting:delete:channel","classifier":"channel","description":"Delete AlertChannel"},{"id":"advancedservices:delete:environment","classifier":"environment","description":"Delete PingOne Advanced Services environment"},{"id":"mfa:update:mfaSettings","classifier":"mfaSettings","description":"Update MFA settings"},{"id":"authn:update:signOnPolicy","classifier":"signOnPolicy","description":"Update sign-on policies"},{"id":"integrations:read:integration","classifier":"integration","description":"Read an integration in integration catalog"},{"id":"mfa:update:oathToken","classifier":"oathToken","description":"Update an OATH Token"},{"id":"authz:authorize:decisionendpoint","classifier":"decisionendpoint","description":"Request Decision from a PingOne Authorize Decision Endpoint"},{"id":"visualization:create:exploration","classifier":"exploration","description":"Create data exploration"},{"id":"applicationRoles:create:applicationRoleEntry","classifier":"applicationRoleEntry","description":"Add application role entries"},{"id":"externalServices:read:secrets","classifier":"secrets","description":"Read external service secrets"},{"id":"formBuilder:read:form","classifier":"form","description":"Read or list forms"},{"id":"authz:delete:decisionendpointcache","classifier":"decisionendpointcache","description":"Invalidate Cached Services used in Dynamic Authorization"},{"id":"fraud:create:feedback","classifier":"feedback","description":"Create fraud feedback"},{"id":"permissions:create:roles","classifier":"roles","description":"Create Custom Roles"},{"id":"visualization:read:template","classifier":"template","description":"Read data exploration template"},{"id":"applicationRoles:create:applicationPermission","classifier":"applicationPermission","description":"Create application permissions"},{"id":"pingenterprise:read:orchestration","classifier":"orchestration","description":"Retrieve Orchestration flow for Ping Enterprise deployment"},{"id":"applicationRoles:create:applicationRole","classifier":"applicationRole","description":"Create application roles"},{"id":"applications:create:pushCredentials","classifier":"pushCredentials","description":"Create new push credentials for an application"},{"id":"mfa:update:deviceAuthenticationPolicy","classifier":"deviceAuthenticationPolicy","description":"Update device authentication policy"},{"id":"applications:delete:signOnPolicyAssignment","classifier":"signOnPolicyAssignment","description":"Delete sign-on policy assignments"},{"id":"identityProviders:delete:identityProvider","classifier":"identityProvider","description":"Delete an Identity Provider"},{"id":"applicationRoles:delete:applicationRole","classifier":"applicationRole","description":"Delete application roles"},{"id":"image:read:image","classifier":"image","description":"Retrieve an image"},{"id":"osmosis:delete:mapping","classifier":"mapping","description":"delete mapping"},{"id":"visualization:read:exploration","classifier":"exploration","description":"Read data exploration"},{"id":"solutions:read:flow","classifier":"flow","description":"Retrieve all available workflows."},{"id":"certmgt:update:krp","classifier":"krp","description":"Update a Key Rotation Policy (KRP)"},{"id":"idverifications:read:voicePhraseContent","classifier":"voicePhraseContent","description":"Read PingOne Verify Voice Phrase Content"},{"id":"authz:read:deploymentpackage","classifier":"deploymentpackage","description":"Read PingOne Authorize Deployment Packages"},{"id":"resources:update:attribute","classifier":"attribute","description":"Update attributes in a resource"},{"id":"certmgt:read:key","classifier":"key","description":"Read a KeyPair, excluding private key portion"},{"id":"certmgt:create:krp","classifier":"krp","description":"Create a Key Rotation Policy (KRP)"},{"id":"alerting:create:channel","classifier":"channel","description":"Create AlertChannel"},{"id":"visualization:read:dashboard","classifier":"dashboard","description":"Read dashboards"},{"id":"dir:read:group","classifier":"group","description":"Read Group"},{"id":"idverifications:update:document","classifier":"document","description":"Update PingOne Verify Document"},{"id":"risk:delete:policy","classifier":"policy","description":"Delete risk policies"},{"id":"authz:read:version","classifier":"version","description":"Read PingOne Authorize Policy Version"},{"id":"subscriptions:update:subscription","classifier":"subscription","description":"Update a subscription"},{"id":"flow:execute:flowDefinition","classifier":"flowDefinition","description":"flow execution permission"},{"id":"risk:update:policy","classifier":"policy","description":"Update risk policies"},{"id":"solutions:read:token","classifier":"token","description":"Retrieve a DaVinci access token."},{"id":"identityProviders:read:identityProvider","classifier":"identityProvider","description":"Retrieve Identity Provider information"},{"id":"resources:create:attribute","classifier":"attribute","description":"Create attributes in a resource"},{"id":"authz:delete:tag","classifier":"tag","description":"Delete PingOne Authorize Policy Version Tag"},{"id":"notifications:update:templateContent","classifier":"templateContent","description":"Update a notification template's content"},{"id":"applications:create:application","classifier":"application","description":"Create an application's OIDC settings"},{"id":"externalServices:update:secrets","classifier":"secrets","description":"Update external service secrets"},{"id":"mfa:create:deviceAuthenticationPolicy","classifier":"deviceAuthenticationPolicy","description":"Create device authentication policy"},{"id":"idverifications:get:document","classifier":"document","description":"Read PingOne Verify Document"},{"id":"dir:update:population","classifier":"population","description":"Update populations"},{"id":"flowPolicies:read:flowPolicy","classifier":"flowPolicy","description":"Retrieve flow policies"},{"id":"fraud:read:session","classifier":"session","description":"Read fraud session"},{"id":"resources:update:scope","classifier":"scope","description":"Update scopes in a resource"},{"id":"idverifications:delete:document","classifier":"document","description":"Delete PingOne Verify Document"},{"id":"notifications:create:emailDomain","classifier":"emailDomain","description":"Create an email domain"},{"id":"osmosis:read:plan","classifier":"plan","description":"Read plan"},{"id":"advancedservices:read:orchestration","classifier":"orchestration","description":"Retrieve PingOne Advanced Services Orchestration"},{"id":"notifications:delete:notificationsSettings","classifier":"notificationsSettings","description":"Reset notifications settings"},{"id":"formBuilder:update:recaptchaV2Config","classifier":"recaptchaV2Config","description":"Update a reCAPTCHA V2 config"},{"id":"authz:read:entity","classifier":"entity","description":"Read PingOne Authorize Entity"},{"id":"resources:create:resource","classifier":"resource","description":"Create resources on an environment"},{"id":"risk:update:predictor","classifier":"predictor","description":"Update risk predictors"},{"id":"notifications:read:templateContent","classifier":"templateContent","description":"Retrieve a notification template's content"},{"id":"applications:update:pushCredentials","classifier":"pushCredentials","description":"Update application's push credentials information"},{"id":"idverifications:create:verifyPolicy","classifier":"verifyPolicy","description":"Create PingOne Verify Policies"},{"id":"pingenterprise:update:orchestration","classifier":"orchestration","description":"Updates Orchestration flow for Ping Enterprise deployment"},{"id":"authz:deploy:apiServerDeployment","classifier":"apiServerDeployment","description":"Deploy API Services"},{"id":"formBuilder:delete:recaptchaV2Config","classifier":"recaptchaV2Config","description":"Delete a reCAPTCHA V2 config"},{"id":"image:create:image","classifier":"image","description":"Create an image"},{"id":"fraud:read:eventsDetails","classifier":"eventsDetails","description":"Read fraud eventsDetails"},{"id":"resources:delete:scope","classifier":"scope","description":"Delete scopes from a resource"},{"id":"branding:create:theme","classifier":"theme","description":"Create a theme"},{"id":"formBuilder:read:recaptchaV2Config","classifier":"recaptchaV2Config","description":"Read a reCAPTCHA V2 config"},{"id":"idverifications:create:document","classifier":"document","description":"Create PingOne Verify Document"},{"id":"mfa:update:fidoPolicy","classifier":"fidoPolicy","description":"Update a FIDO policy"},{"id":"delegatedadmin:read:delegatedAdminConfigurations","classifier":"delegatedAdminConfigurations","description":"Read Delegated Admin Configurations"},{"id":"authz:delete:apiServer","classifier":"apiServer","description":"Delete API Services"},{"id":"certmgt:read:certificate","classifier":"certificate","description":"Read a certificate"},{"id":"orgmgt:update:environment","classifier":"environment","description":"Update environment"},{"id":"applications:read:grant","classifier":"grant","description":"Retrieve a single resource access grant for an application"},{"id":"permissions:read:roles","classifier":"roles","description":"Read Custom Roles"},{"id":"permissions:update:roles","classifier":"roles","description":"Update Custom Roles"},{"id":"externalServices:delete:externalService","classifier":"externalService","description":"Delete an external service"},{"id":"agreements:update:agreement","classifier":"agreement","description":"Update Agreement"},{"id":"solutions:create:config","classifier":"config","description":"Create the workflow configuration."},{"id":"branding:update:customDomain","classifier":"customDomain","description":"Update a custom domain"},{"id":"formBuilder:create:form","classifier":"form","description":"Create a form"},{"id":"flow:delete:flowDefinition","classifier":"flowDefinition","description":"Delete a flow definition"},{"id":"permissions:delete:gatewayRoleAssignments","classifier":"gatewayRoleAssignments","description":"Delete gateway role assignments"},{"id":"branding:delete:theme","classifier":"theme","description":"Delete a theme"},{"id":"externalServices:create:externalService","classifier":"externalService","description":"Create an external service"},{"id":"permissions:update:gatewayRoleAssignments","classifier":"gatewayRoleAssignments","description":"Update gateway role assignments"},{"id":"dir:delete:population","classifier":"population","description":"Delete populations"},{"id":"resources:delete:resource","classifier":"resource","description":"Delete resources from an environment"},{"id":"flow:read:flowDefinition","classifier":"flowDefinition","description":"Read a flow definition"},{"id":"subscriptions:read:subscription","classifier":"subscription","description":"Read a subscription"},{"id":"authn:delete:signOnPolicy","classifier":"signOnPolicy","description":"Delete sign-on policies"},{"id":"orgmgt:promote:environment","classifier":"environment","description":"Promote environment"},{"id":"dir:read:passwordPolicy","classifier":"passwordPolicy","description":"Read Password Policies"},{"id":"applications:delete:grant","classifier":"grant","description":"Delete a single resource access grant for an application"},{"id":"applicationRoles:create:applicationRoleAssignment","classifier":"applicationRoleAssignment","description":"Assign application roles"},{"id":"resources:create:scope","classifier":"scope","description":"Create scopes in a resource"},{"id":"applications:update:application","classifier":"application","description":"Update an application's OIDC settings"},{"id":"applications:read:secret","classifier":"secret","description":"Retrieve an application’s client secret"},{"id":"notifications:delete:emailDomain","classifier":"emailDomain","description":"Delete an email domain"},{"id":"enduseruiconfig:read:configs","classifier":"configs","description":"Read End User UI Configurations"},{"id":"permissions:update:applicationRoleAssignments","classifier":"applicationRoleAssignments","description":"Update roles assigned to applications"},{"id":"idverifications:create:voicePhraseContent","classifier":"voicePhraseContent","description":"Create PingOne Verify Voice Phrase Content"},{"id":"applicationRoles:update:applicationResource","classifier":"applicationResource","description":"Update application resources"},{"id":"certmgt:delete:krp","classifier":"krp","description":"Delete a Key Rotation Policy (KRP)"},{"id":"resources:read:scope","classifier":"scope","description":"Retrieve scopes from a resource"},{"id":"branding:read:brandingSettings","classifier":"brandingSettings","description":"Read or list branding settings"},{"id":"applicationRoles:update:applicationRole","classifier":"applicationRole","description":"Update application roles"},{"id":"mfa:create:fidoDeviceMetadata","classifier":"fidoDeviceMetadata","description":"Create Custom FIDO Device Metadata"},{"id":"pingintelligence:read:orchestration","classifier":"orchestration","description":"Retrieve Orchestration flow for Ping Intelligence deployment"},{"id":"advancedservices:create:orchestration","classifier":"orchestration","description":"Create PingOne Advanced Services Orchestration"},{"id":"certmgt:read:krp","classifier":"krp","description":"Read Key Rotation Policies (KRP)"},{"id":"mfa:delete:oathToken","classifier":"oathToken","description":"Delete an OATH Token"},{"id":"resources:delete:attribute","classifier":"attribute","description":"Delete attributes from a resource"},{"id":"dir:read:population","classifier":"population","description":"Read populations"},{"id":"authz:read:apiServer","classifier":"apiServer","description":"Retrieve API Services"},{"id":"applications:read:pushCredentials","classifier":"pushCredentials","description":"Retrieve application's push credentials information"},{"id":"alerting:read:channel","classifier":"channel","description":"Read AlertChannels"},{"id":"orgmgt:create:deployment","classifier":"deployment","description":"Create deployment resource"},{"id":"authz:read:tag","classifier":"tag","description":"Read PingOne Authorize Policy Version Tag"},{"id":"certmgt:delete:certificate","classifier":"certificate","description":"Deletes a certificate"},{"id":"applications:read:application","classifier":"application","description":"Retrieve an application's OIDC settings"},{"id":"notifications:update:notificationsSettings","classifier":"notificationsSettings","description":"Update notifications settings"},{"id":"flow:create:flowDefinition","classifier":"flowDefinition","description":"Create a flow definition"},{"id":"resources:read:attribute","classifier":"attribute","description":"Retrieve attributes from a resource"},{"id":"idverifications:read:voicePhrase","classifier":"voicePhrase","description":"Read PingOne Verify Voice Phrase"},{"id":"applicationRoles:update:applicationPermission","classifier":"applicationPermission","description":"Update application permissions"},{"id":"notifications:create:notification","classifier":"notification","description":"Create a notification"},{"id":"certmgt:create:certificate","classifier":"certificate","description":"Create a certificate"},{"id":"authz:update:entity","classifier":"entity","description":"Update PingOne Authorize Entity"},{"id":"notifications:read:notificationsPolicy","classifier":"notificationsPolicy","description":"Retrieve notifications policy"},{"id":"dir:delete:schema","classifier":"schema","description":"Delete schemas"},{"id":"branding:update:branding","classifier":"branding","description":"Create and update branding"},{"id":"mfa:delete:mfaSettings","classifier":"mfaSettings","description":"Reset MFA settings"},{"id":"risk:delete:predictor","classifier":"predictor","description":"Delete risk predictors"},{"id":"applications:create:flowPolicyAssignment","classifier":"flowPolicyAssignment","description":"Create a flow policy assignment"},{"id":"branding:update:theme","classifier":"theme","description":"Update a theme"},{"id":"osmosis:delete:rule","classifier":"rule","description":"delete rule"},{"id":"osmosis:update:plan","classifier":"plan","description":"update plan"},{"id":"certmgt:update:certificate","classifier":"certificate","description":"Update a certificate"},{"id":"idverifications:create:voicePhrase","classifier":"voicePhrase","description":"Create PingOne Verify Voice Phrase"},{"id":"langmgt:update:language","classifier":"language","description":"Update a language"},{"id":"notifications:read:emailDomain","classifier":"emailDomain","description":"Read or list email domains"},{"id":"osmosis:read:store","classifier":"store","description":"Read store"},{"id":"pingintelligence:update:orchestration","classifier":"orchestration","description":"Updates Orchestration flow for Ping Intelligence deployment"},{"id":"applications:update:signOnPolicyAssignment","classifier":"signOnPolicyAssignment","description":"Update sign-on policy assignments"},{"id":"orgmgt:read:deployment","classifier":"deployment","description":"Read deployment resource"},{"id":"osmosis:update:mapping","classifier":"mapping","description":"update mapping"},{"id":"idverifications:update:voicePhrase","classifier":"voicePhrase","description":"Update PingOne Verify Voice Phrase"},{"id":"idverifications:read:verifyPolicy","classifier":"verifyPolicy","description":"Read PingOne Verify Policies"},{"id":"authz:delete:entity","classifier":"entity","description":"Delete PingOne Authorize Entity"},{"id":"idverifications:update:voicePhraseContent","classifier":"voicePhraseContent","description":"Update PingOne Verify Voice Phrase Content"},{"id":"osmosis:update:rule","classifier":"rule","description":"update rule"},{"id":"applicationRoles:read:applicationPermission","classifier":"applicationPermission","description":"List application permissions"},{"id":"dir:update:schema","classifier":"schema","description":"Update schemas"},{"id":"notifications:delete:templateContent","classifier":"templateContent","description":"Deletes a notification template's content"},{"id":"identityProviders:create:identityProvider","classifier":"identityProvider","description":"Create new Identity Provider"},{"id":"dir:read:schema","classifier":"schema","description":"Read schemas"},{"id":"notifications:read:template","classifier":"template","description":"Retrieve a notification template"},{"id":"notifications:create:notificationsPolicy","classifier":"notificationsPolicy","description":"Create notifications policy"},{"id":"externalServices:read:externalService","classifier":"externalService","description":"Read a external service(s)"},{"id":"applications:read:signOnPolicyAssignment","classifier":"signOnPolicyAssignment","description":"Retrieve sign-on policy assignments"},{"id":"gateways:create:gateway","classifier":"gateway","description":"Create gateway"},{"id":"applications:delete:flowPolicyAssignment","classifier":"flowPolicyAssignment","description":"Delete flow policy assignments"},{"id":"mfa:read:mfaSettings","classifier":"mfaSettings","description":"Retrieve MFA settings"},{"id":"langmgt:read:language","classifier":"language","description":"Read or list languages"},{"id":"mfa:read:fidoDeviceMetadata","classifier":"fidoDeviceMetadata","description":"Retrieve FIDO Device Metadata"},{"id":"branding:read:customDomain","classifier":"customDomain","description":"Read or list custom domains"},{"id":"mfa:read:oathToken","classifier":"oathToken","description":"Retrieve an OATH Token"},{"id":"fraud:read:feedback","classifier":"feedback","description":"Read fraud feedback"},{"id":"dir:update:passwordPolicy","classifier":"passwordPolicy","description":"Update Password Policies"},{"id":"authz:create:apiServer","classifier":"apiServer","description":"Create API Services"},{"id":"notifications:read:notificationsSettings","classifier":"notificationsSettings","description":"Read notifications settings"},{"id":"mfa:read:deviceAuthenticationPolicy","classifier":"deviceAuthenticationPolicy","description":"Retrieve device authentication policy"},{"id":"applications:update:secret","classifier":"secret","description":"Generate a new client secret"},{"id":"certmgt:delete:key","classifier":"key","description":"Deletes a KeyPair"},{"id":"risk:read:predictor","classifier":"predictor","description":"Read risk predictors"},{"id":"resources:update:resource","classifier":"resource","description":"Update resources on an environment"},{"id":"externalServices:invoke:externalService","classifier":"externalService","description":"Invoke an external service request"},{"id":"pec:create:product","classifier":"product","description":"Create PingID product"},{"id":"externalServices:update:externalService","classifier":"externalService","description":"Update an external service"},{"id":"applicationRoles:delete:applicationResource","classifier":"applicationResource","description":"Delete application resources"},{"id":"provisioning:get:connectionSensitiveConfiguration","classifier":"connectionSensitiveConfiguration","description":"Get connection sensitive configuration"},{"id":"mfa:delete:fidoDeviceMetadata","classifier":"fidoDeviceMetadata","description":"Delete Custom FIDO Device Metadata"},{"id":"flow:update:flowDefinition","classifier":"flowDefinition","description":"Update a flow definition"},{"id":"osmosis:get:revision","classifier":"revision","description":"get configuration for a specific environment"},{"id":"osmosis:delete:plan","classifier":"plan","description":"delete plan"},{"id":"branding:read:theme","classifier":"theme","description":"Read or list themes"},{"id":"branding:delete:branding","classifier":"branding","description":"Delete branding"},{"id":"provisioning:update:provisioningSyncOrchestration","classifier":"provisioningSyncOrchestration","description":"Update a provisioning sync orchestration in a specific environment"},{"id":"applicationRoles:delete:applicationPermission","classifier":"applicationPermission","description":"Delete application permissions"},{"id":"authz:update:apiServer","classifier":"apiServer","description":"Update API Services"},{"id":"gateways:read:gateway","classifier":"gateway","description":"Read gateways"},{"id":"gateways:delete:gateway","classifier":"gateway","description":"Delete gateway"},{"id":"agreements:delete:agreement","classifier":"agreement","description":"Delete Agreement"},{"id":"applications:read:flowPolicyAssignment","classifier":"flowPolicyAssignment","description":"Retrieve flow policy assignments"},{"id":"resources:read:secret","classifier":"secret","description":"Retrieve a resource’s client secret"},{"id":"applications:create:grant","classifier":"grant","description":"Create a new resource access grant for an application"},{"id":"image:delete:image","classifier":"image","description":"Delete an image"},{"id":"fraud:read:ssoLogin","classifier":"ssoLogin","description":"Read fraud SSO login"},{"id":"mfa:delete:fidoPolicy","classifier":"fidoPolicy","description":"Delete a FIDO policy"},{"id":"notifications:update:notificationsPolicy","classifier":"notificationsPolicy","description":"Update notifications policy"},{"id":"delegatedadmin:read:delegatedAdminSdkToken","classifier":"delegatedAdminSdkToken","description":"Read Delegated Admin SdkToken"},{"id":"formBuilder:delete:form","classifier":"form","description":"Delete a form"}],"canAssign":[{"id":"7aba580c-5ec7-4b26-987d-85f462767455"}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/0bd9c966-7664-4ac1-b059-0ff9293908e2"}},"id":"0bd9c966-7664-4ac1-b059-0ff9293908e2","name":"Identity Data Admin","description":"Identity Data Admin","applicableTo":["POPULATION","ENVIRONMENT"],"permissions":[{"id":"fraud:read:cluster","classifier":"cluster","description":"Read fraud clusters"},{"id":"idverifications:create:verifyPolicy","classifier":"verifyPolicy","description":"Create PingOne Verify Policies"},{"id":"orgmgt:read:organization","classifier":"organization","description":"Read organizations"},{"id":"scim:read:user","classifier":"user","description":"Read users via SCIM"},{"id":"image:create:image","classifier":"image","description":"Create an image"},{"id":"fraud:read:eventsDetails","classifier":"eventsDetails","description":"Read fraud eventsDetails"},{"id":"agreements:update:oauthConsent","classifier":"oauthConsent","description":"Update OAuth Consent"},{"id":"idverifications:delete:voicePhraseContent","classifier":"voicePhraseContent","description":"Delete PingOne Verify Voice Phrase Content"},{"id":"orgmgt:read:environment","classifier":"environment","description":"Read environments"},{"id":"devices:update:seenDevice","classifier":"seenDevice","description":"Update seen device"},{"id":"idverifications:create:document","classifier":"document","description":"Create PingOne Verify Document"},{"id":"agreements:read:userConsent","classifier":"userConsent","description":"Read User Consents"},{"id":"dir:read:userSyncedStores","classifier":"userSyncedStores","description":"get user's target store sync status"},{"id":"dir:read:userPassword","classifier":"userPassword","description":"Read a user's password state"},{"id":"risk:update:evaluation","classifier":"evaluation","description":"Update risk evaluations"},{"id":"ldapGateway:execute:directLdap","classifier":"directLdap","description":"Perform direct LDAP operations through the LDAP gateway"},{"id":"certmgt:read:certificate","classifier":"certificate","description":"Read a certificate"},{"id":"mfa:create:createTestDevice","classifier":"createTestDevice","description":"Ability to create device designated for tests"},{"id":"scim:delete:user","classifier":"user","description":"Delete users via SCIM"},{"id":"authn:delete:sessions","classifier":"sessions","description":"Delete a user's sessions"},{"id":"idverifications:update:verifyPolicy","classifier":"verifyPolicy","description":"Update PingOne Verify Policies"},{"id":"authn:create:sessions","classifier":"sessions","description":"Create new anonymous or user sessions"},{"id":"permissions:read:roles","classifier":"roles","description":"Read Custom Roles"},{"id":"permissions:update:roles","classifier":"roles","description":"Update Custom Roles"},{"id":"dir:validate:userPassword","classifier":"userPassword","description":"Validate a user's password"},{"id":"mfa:update:device","classifier":"device","description":"Update user's device"},{"id":"permissions:read:userRoleAssignments","classifier":"userRoleAssignments","description":"Read roles assigned to users"},{"id":"fraud:update:feedback","classifier":"feedback","description":"Update fraud feedback"},{"id":"devices:delete:seenDevice","classifier":"seenDevice","description":"Delete seen device"},{"id":"scim:read:schema","classifier":"schema","description":"Read schemas via SCIM"},{"id":"dir:recover:userPassword","classifier":"userPassword","description":"Recover a user's password"},{"id":"applicationRoles:read:applicationRole","classifier":"applicationRole","description":"List and read application roles"},{"id":"dir:unlock:userAccount","classifier":"userAccount","description":"Unlock User Account"},{"id":"fraud:create:eventsDetails","classifier":"eventsDetails","description":"Create fraud eventsDetails"},{"id":"dir:read:passwordPolicy","classifier":"passwordPolicy","description":"Read Password Policies"},{"id":"applicationRoles:create:applicationRoleAssignment","classifier":"applicationRoleAssignment","description":"Assign application roles"},{"id":"applicationRoles:read:applicationResource","classifier":"applicationResource","description":"List and read application resources"},{"id":"dir:delete:userLinkedAccounts","classifier":"userLinkedAccounts","description":"Delete linked accounts for users"},{"id":"fraud:read:evaluation","classifier":"evaluation","description":"Read fraud evaluation"},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."},{"id":"agreements:create:oauthConsent","classifier":"oauthConsent","description":"Create OAuth Consent"},{"id":"idverifications:delete:voicePhrase","classifier":"voicePhrase","description":"Delete PingOne Verify Voice Phrase"},{"id":"scim:create:user","classifier":"user","description":"Create users via SCIM"},{"id":"devices:create:seenDevice","classifier":"seenDevice","description":"Create seen device"},{"id":"idverifications:get:referenceData","classifier":"referenceData","description":"Read PingOne Verify Reference Data"},{"id":"permissions:delete:roles","classifier":"roles","description":"Delete Custom Roles"},{"id":"dir:read:userLinkedAccounts","classifier":"userLinkedAccounts","description":"Read linked accounts for users"},{"id":"idverifications:read:verifyTransactions","classifier":"verifyTransactions","description":"Read PingOne Verify Transaction(s)"},{"id":"idverifications:create:voicePhraseContent","classifier":"voicePhraseContent","description":"Create PingOne Verify Voice Phrase Content"},{"id":"applicationRoles:update:applicationResource","classifier":"applicationResource","description":"Update application resources"},{"id":"dir:reset:userPassword","classifier":"userPassword","description":"Reset a user's password"},{"id":"risk:create:evaluation","classifier":"evaluation","description":"Create risk evaluations"},{"id":"applicationRoles:update:applicationRole","classifier":"applicationRole","description":"Update application roles"},{"id":"dir:update:userVerifyStatus","classifier":"userVerifyStatus","description":"Update user's verifyStatus"},{"id":"fraud:read:analytics","classifier":"analytics","description":"Read fraud analytics"},{"id":"mfa:authenticate:device","classifier":"device","description":"Authenticate using a device"},{"id":"mfa:delete:pairingKey","classifier":"pairingKey","description":"Delete a user's pairing key information"},{"id":"credentialsIssuance:update:credentials","classifier":"credentials","description":"Update credential type or issue credential to a user"},{"id":"dir:delete:group","classifier":"group","description":"Delete Group"},{"id":"applicationRoles:create:applicationResource","classifier":"applicationResource","description":"Create application resources"},{"id":"authn:read:sessions","classifier":"sessions","description":"Read a user's sessions"},{"id":"agreements:read:oauthConsent","classifier":"oauthConsent","description":"Read OAuth Consents"},{"id":"applicationRoles:read:applicationRoleAssignment","classifier":"applicationRoleAssignment","description":"List application role assignments"},{"id":"dir:read:population","classifier":"population","description":"Read populations"},{"id":"permissions:read:groupRoleAssignments","classifier":"groupRoleAssignments","description":"Read group role assignments"},{"id":"permissions:delete:groupRoleAssignments","classifier":"groupRoleAssignments","description":"Delete group role assignments"},{"id":"dir:read:groupSyncedRules","classifier":"groupSyncedRules","description":"get group's provisioning rule sync status"},{"id":"licensing:read:license","classifier":"license","description":"Read licenses"},{"id":"risk:read:policy","classifier":"policy","description":"Read risk policies"},{"id":"applicationRoles:delete:applicationRoleAssignment","classifier":"applicationRoleAssignment","description":"Unassign application roles"},{"id":"dir:update:group","classifier":"group","description":"Update Group"},{"id":"idverifications:get:verifiedUserData","classifier":"verifiedUserData","description":"Get PingOne Verify Verified User Data"},{"id":"pingid:read:integration","classifier":"integration","description":"Read PingID user integrations(services)"},{"id":"idverifications:read:voicePhrase","classifier":"voicePhrase","description":"Read PingOne Verify Voice Phrase"},{"id":"applicationRoles:update:applicationPermission","classifier":"applicationPermission","description":"Update application permissions"},{"id":"dir:delete:groupMembership","classifier":"groupMembership","description":"Delete Group Membership"},{"id":"dir:update:user","classifier":"user","description":"Update users"},{"id":"dir:read:user","classifier":"user","description":"Read users"},{"id":"applicationRoles:delete:applicationRoleEntry","classifier":"applicationRoleEntry","description":"Remove application role entries"},{"id":"idverifications:delete:verifiedUserData","classifier":"verifiedUserData","description":"Delete PingOne Verify Verified User Data"},{"id":"idverifications:delete:verifyPolicy","classifier":"verifyPolicy","description":"Delete PingOne Verify Policies"},{"id":"fraud:create:evaluation","classifier":"evaluation","description":"Create fraud evaluation"},{"id":"applicationRoles:read:applicationRoleEntry","classifier":"applicationRoleEntry","description":"List application role entries"},{"id":"authn:update:sessions","classifier":"sessions","description":"Update anonymous or user sessions"},{"id":"audit_reporting:read:activity","classifier":"activity","description":"Get Audit Activity"},{"id":"idverifications:create:voicePhrase","classifier":"voicePhrase","description":"Create PingOne Verify Voice Phrase"},{"id":"dir:read:groupMembership","classifier":"groupMembership","description":"Read Group Membership"},{"id":"agreements:create:userConsent","classifier":"userConsent","description":"Create User Consent"},{"id":"permissions:create:groupRoleAssignments","classifier":"groupRoleAssignments","description":"Create group role assignments"},{"id":"dir:set:userPassword","classifier":"userPassword","description":"Set a user's cleartext or pre-encoded password"},{"id":"dir:update:userIdentityProvider","classifier":"userIdentityProvider","description":"Update user's identity provider"},{"id":"pingid:delete:user","classifier":"user","description":"Reset PingID user"},{"id":"notifications:reset:userQuota","classifier":"userQuota","description":"Reset notifications quota"},{"id":"orgmgt:read:deployment","classifier":"deployment","description":"Read deployment resource"},{"id":"idverifications:update:voicePhrase","classifier":"voicePhrase","description":"Update PingOne Verify Voice Phrase"},{"id":"credentialsIssuance:create:issuerProfile","classifier":"issuerProfile","description":"Define Credential Issuer Profile"},{"id":"idverifications:read:verifyPolicy","classifier":"verifyPolicy","description":"Read PingOne Verify Policies"},{"id":"pingid:update:integration","classifier":"integration","description":"Update PingID user integration(service)"},{"id":"dir:lock:userAccount","classifier":"userAccount","description":"Lock User Account"},{"id":"idverifications:update:voicePhraseContent","classifier":"voicePhraseContent","description":"Update PingOne Verify Voice Phrase Content"},{"id":"applicationRoles:read:applicationPermission","classifier":"applicationPermission","description":"List application permissions"},{"id":"idverifications:delete:verifyTransactions","classifier":"verifyTransactions","description":"Delete PingOne Verify Transaction"},{"id":"ldapGateway:validate:userPassword","classifier":"userPassword","description":"Validate user credentials via LDAP gateway"},{"id":"visualization:create:exploration","classifier":"exploration","description":"Create data exploration"},{"id":"devices:update:userSeenDevice","classifier":"userSeenDevice","description":"Update user's seen device"},{"id":"dir:read:schema","classifier":"schema","description":"Read schemas"},{"id":"applicationRoles:create:applicationRoleEntry","classifier":"applicationRoleEntry","description":"Add application role entries"},{"id":"dir:delete:user","classifier":"user","description":"Delete users"},{"id":"dir:update:userEnabled","classifier":"userEnabled","description":"Update user's enabled status"},{"id":"mfa:create:device","classifier":"device","description":"Create user's device"},{"id":"prediction:create:prediction","classifier":"prediction","description":"Create a prediction"},{"id":"fraud:create:feedback","classifier":"feedback","description":"Create fraud feedback"},{"id":"credentialsIssuance:read:credentials","classifier":"credentials","description":"Read a credential type or issue credential to a user"},{"id":"permissions:create:roles","classifier":"roles","description":"Create Custom Roles"},{"id":"visualization:read:template","classifier":"template","description":"Read data exploration template"},{"id":"idverifications:delete:referenceData","classifier":"referenceData","description":"Delete PingOne Verify Reference Data"},{"id":"riskDetection:create:evaluation","classifier":"evaluation","description":"Create detection evaluations for risk service"},{"id":"applicationRoles:create:applicationPermission","classifier":"applicationPermission","description":"Create application permissions"},{"id":"applicationRoles:create:applicationRole","classifier":"applicationRole","description":"Create application roles"},{"id":"mfa:read:device","classifier":"device","description":"Retrieve user's device"},{"id":"dir:verify:user","classifier":"user","description":"Verify a user using a verification code"},{"id":"applicationRoles:delete:applicationRole","classifier":"applicationRole","description":"Delete application roles"},{"id":"image:read:image","classifier":"image","description":"Retrieve an image"},{"id":"fraud:read:feedback","classifier":"feedback","description":"Read fraud feedback"},{"id":"visualization:read:exploration","classifier":"exploration","description":"Read data exploration"},{"id":"agreements:delete:userConsent","classifier":"userConsent","description":"Delete User Consents"},{"id":"fraud:update:cluster","classifier":"cluster","description":"Update fraud clusters"},{"id":"idverifications:create:verifyTransactions","classifier":"verifyTransactions","description":"Create PingOne Verify Transaction"},{"id":"credentialsIssuance:read:issuerProfile","classifier":"issuerProfile","description":"Read Credential Issuer Profile"},{"id":"idverifications:read:voicePhraseContent","classifier":"voicePhraseContent","description":"Read PingOne Verify Voice Phrase Content"},{"id":"risk:read:evaluation","classifier":"evaluation","description":"Read risk evaluations"},{"id":"credentialsIssuance:update:issuerProfile","classifier":"issuerProfile","description":"Update Credential Issuer Profile"},{"id":"credentialsIssuance:create:credentials","classifier":"credentials","description":"Create credential type or issue credential to a user"},{"id":"idverifications:update:verifyTransactions","classifier":"verifyTransactions","description":"Update PingOne Verify Transaction"},{"id":"risk:read:predictor","classifier":"predictor","description":"Read risk predictors"},{"id":"dir:unlock:userPassword","classifier":"userPassword","description":"Unlock a user's password"},{"id":"devices:create:userSeenDevice","classifier":"userSeenDevice","description":"Create user's seen device"},{"id":"mfa:create:pairingKey","classifier":"pairingKey","description":"Create new pairing key for a user"},{"id":"visualization:read:dashboard","classifier":"dashboard","description":"Read dashboards"},{"id":"applicationRoles:delete:applicationResource","classifier":"applicationResource","description":"Delete application resources"},{"id":"dir:read:group","classifier":"group","description":"Read Group"},{"id":"idverifications:update:document","classifier":"document","description":"Update PingOne Verify Document"},{"id":"scim:update:user","classifier":"user","description":"Update users via SCIM"},{"id":"dir:update:userMfaEnabled","classifier":"userMfaEnabled","description":"Update user's mfaEnabled status"},{"id":"devices:read:seenDevice","classifier":"seenDevice","description":"Read seen device"},{"id":"ldapGateway:validate:kerberos","classifier":"kerberos","description":"Validate user credentials using Kerberos"},{"id":"devices:read:userSeenDevice","classifier":"userSeenDevice","description":"Read user's seen device"},{"id":"radiusGateway:read:session","classifier":"session","description":"Read RADIUS session associated with the environment"},{"id":"dir:create:userLinkedAccounts","classifier":"userLinkedAccounts","description":"Create linked accounts for users"},{"id":"mfa:read:pairingKey","classifier":"pairingKey","description":"Retrieve a user's pairing key information"},{"id":"dir:create:user","classifier":"user","description":"Create users"},{"id":"applicationRoles:delete:applicationPermission","classifier":"applicationPermission","description":"Delete application permissions"},{"id":"identityProviders:read:identityProvider","classifier":"identityProvider","description":"Retrieve Identity Provider information"},{"id":"mfa:delete:device","classifier":"device","description":"Delete user's device"},{"id":"pingid:read:activity","classifier":"activity","description":"Read PingID user last activity"},{"id":"dir:create:groupMembership","classifier":"groupMembership","description":"Create Group Membership"},{"id":"idverifications:get:document","classifier":"document","description":"Read PingOne Verify Document"},{"id":"image:delete:image","classifier":"image","description":"Delete an image"},{"id":"fraud:read:ssoLogin","classifier":"ssoLogin","description":"Read fraud SSO login"},{"id":"permissions:update:userRoleAssignments","classifier":"userRoleAssignments","description":"Update roles assigned to users"},{"id":"dir:import:user","classifier":"user","description":"Import users"},{"id":"agreements:update:userConsent","classifier":"userConsent","description":"Update User Consent"},{"id":"fraud:read:session","classifier":"session","description":"Read fraud session"},{"id":"dir:create:group","classifier":"group","description":"Create Group"},{"id":"idverifications:delete:document","classifier":"document","description":"Delete PingOne Verify Document"},{"id":"dir:forceChange:userPassword","classifier":"userPassword","description":"Force a user to change password at next login"}],"canAssign":[{"id":"ce00e15f-f845-4df1-abf3-fdc4ff4e176c"}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/b5057d0d-7281-47f6-9398-8a7e4cb71397"}},"id":"b5057d0d-7281-47f6-9398-8a7e4cb71397","name":"Client Application Developer","description":"Client Application Developer","applicableTo":["ENVIRONMENT"],"permissions":[{"id":"solutions:read:config","classifier":"config","description":"Retrieve the workflow configuration."},{"id":"fraud:read:cluster","classifier":"cluster","description":"Read fraud clusters"},{"id":"resources:create:resource","classifier":"resource","description":"Create resources on an environment"},{"id":"applications:update:pushCredentials","classifier":"pushCredentials","description":"Update application's push credentials information"},{"id":"applications:create:flowPolicyAssignment","classifier":"flowPolicyAssignment","description":"Create a flow policy assignment"},{"id":"applicationRoles:read:applicationRoleEntry","classifier":"applicationRoleEntry","description":"List application role entries"},{"id":"orgmgt:read:organization","classifier":"organization","description":"Read organizations"},{"id":"applications:update:flowPolicyAssignment","classifier":"flowPolicyAssignment","description":"Update flow policy assignments"},{"id":"authz:deploy:apiServerDeployment","classifier":"apiServerDeployment","description":"Deploy API Services"},{"id":"image:create:image","classifier":"image","description":"Create an image"},{"id":"resources:delete:scope","classifier":"scope","description":"Delete scopes from a resource"},{"id":"orgmgt:read:environment","classifier":"environment","description":"Read environments"},{"id":"formBuilder:read:recaptchaV2Config","classifier":"recaptchaV2Config","description":"Read a reCAPTCHA V2 config"},{"id":"applications:update:signOnPolicyAssignment","classifier":"signOnPolicyAssignment","description":"Update sign-on policy assignments"},{"id":"orgmgt:read:deployment","classifier":"deployment","description":"Read deployment resource"},{"id":"authz:delete:apiServer","classifier":"apiServer","description":"Delete API Services"},{"id":"solutions:update:config","classifier":"config","description":"Update the workflow configuration."},{"id":"certmgt:read:certificate","classifier":"certificate","description":"Read a certificate"},{"id":"integrations:read:integration","classifier":"integration","description":"Read an integration in integration catalog"},{"id":"applications:read:grant","classifier":"grant","description":"Retrieve a single resource access grant for an application"},{"id":"applicationRoles:read:applicationPermission","classifier":"applicationPermission","description":"List application permissions"},{"id":"authn:read:signOnPolicy","classifier":"signOnPolicy","description":"Retrieve sign-on policies"},{"id":"identityProviders:create:identityProvider","classifier":"identityProvider","description":"Create new Identity Provider"},{"id":"visualization:create:exploration","classifier":"exploration","description":"Create data exploration"},{"id":"dir:read:schema","classifier":"schema","description":"Read schemas"},{"id":"formBuilder:read:form","classifier":"form","description":"Read or list forms"},{"id":"applications:read:signOnPolicyAssignment","classifier":"signOnPolicyAssignment","description":"Retrieve sign-on policy assignments"},{"id":"applications:delete:flowPolicyAssignment","classifier":"flowPolicyAssignment","description":"Delete flow policy assignments"},{"id":"visualization:read:template","classifier":"template","description":"Read data exploration template"},{"id":"pingenterprise:read:orchestration","classifier":"orchestration","description":"Retrieve Orchestration flow for Ping Enterprise deployment"},{"id":"applications:create:pushCredentials","classifier":"pushCredentials","description":"Create new push credentials for an application"},{"id":"applicationRoles:read:applicationRole","classifier":"applicationRole","description":"List and read application roles"},{"id":"applications:delete:signOnPolicyAssignment","classifier":"signOnPolicyAssignment","description":"Delete sign-on policy assignments"},{"id":"branding:read:customDomain","classifier":"customDomain","description":"Read or list custom domains"},{"id":"identityProviders:delete:identityProvider","classifier":"identityProvider","description":"Delete an Identity Provider"},{"id":"resources:delete:resource","classifier":"resource","description":"Delete resources from an environment"},{"id":"image:read:image","classifier":"image","description":"Retrieve an image"},{"id":"flow:read:flowDefinition","classifier":"flowDefinition","description":"Read a flow definition"},{"id":"visualization:read:exploration","classifier":"exploration","description":"Read data exploration"},{"id":"applications:delete:grant","classifier":"grant","description":"Delete a single resource access grant for an application"},{"id":"applicationRoles:read:applicationResource","classifier":"applicationResource","description":"List and read application resources"},{"id":"resources:create:scope","classifier":"scope","description":"Create scopes in a resource"},{"id":"permissions:read:applicationRoleAssignments","classifier":"applicationRoleAssignments","description":"Read roles assigned to applications"},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."},{"id":"solutions:read:flow","classifier":"flow","description":"Retrieve all available workflows."},{"id":"applications:update:application","classifier":"application","description":"Update an application's OIDC settings"},{"id":"applications:read:secret","classifier":"secret","description":"Retrieve an application’s client secret"},{"id":"authz:create:apiServer","classifier":"apiServer","description":"Create API Services"},{"id":"enduseruiconfig:read:configs","classifier":"configs","description":"Read End User UI Configurations"},{"id":"applications:update:secret","classifier":"secret","description":"Generate a new client secret"},{"id":"resources:update:attribute","classifier":"attribute","description":"Update attributes in a resource"},{"id":"permissions:update:applicationRoleAssignments","classifier":"applicationRoleAssignments","description":"Update roles assigned to applications"},{"id":"certmgt:read:key","classifier":"key","description":"Read a KeyPair, excluding private key portion"},{"id":"resources:update:resource","classifier":"resource","description":"Update resources on an environment"},{"id":"visualization:read:dashboard","classifier":"dashboard","description":"Read dashboards"},{"id":"resources:read:scope","classifier":"scope","description":"Retrieve scopes from a resource"},{"id":"dir:read:group","classifier":"group","description":"Read Group"},{"id":"branding:read:brandingSettings","classifier":"brandingSettings","description":"Read or list branding settings"},{"id":"pingintelligence:read:orchestration","classifier":"orchestration","description":"Retrieve Orchestration flow for Ping Intelligence deployment"},{"id":"applications:create:signOnPolicyAssignment","classifier":"signOnPolicyAssignment","description":"Create a sign-on policy assignment"},{"id":"branding:read:theme","classifier":"theme","description":"Read or list themes"},{"id":"authz:read:apiServerDeployment","classifier":"apiServerDeployment","description":"Read API Service deployment status"},{"id":"solutions:read:token","classifier":"token","description":"Retrieve a DaVinci access token."},{"id":"identityProviders:update:identityProvider","classifier":"identityProvider","description":"Update Identity Provider information"},{"id":"applicationRoles:read:applicationRoleAssignment","classifier":"applicationRoleAssignment","description":"List application role assignments"},{"id":"resources:delete:attribute","classifier":"attribute","description":"Delete attributes from a resource"},{"id":"resources:update:secret","classifier":"secret","description":"Generate a new client secret for a resource"},{"id":"dir:read:population","classifier":"population","description":"Read populations"},{"id":"authz:update:apiServer","classifier":"apiServer","description":"Update API Services"},{"id":"authz:read:apiServer","classifier":"apiServer","description":"Retrieve API Services"},{"id":"applications:read:pushCredentials","classifier":"pushCredentials","description":"Retrieve application's push credentials information"},{"id":"identityProviders:read:identityProvider","classifier":"identityProvider","description":"Retrieve Identity Provider information"},{"id":"licensing:read:license","classifier":"license","description":"Read licenses"},{"id":"applications:delete:application","classifier":"application","description":"Delete an application's OIDC settings"},{"id":"resources:read:resource","classifier":"resource","description":"Retrieve resources from an environment"},{"id":"applications:update:grant","classifier":"grant","description":"Update a single resource access grant for an application"},{"id":"applications:read:application","classifier":"application","description":"Retrieve an application's OIDC settings"},{"id":"resources:create:attribute","classifier":"attribute","description":"Create attributes in a resource"},{"id":"applications:read:flowPolicyAssignment","classifier":"flowPolicyAssignment","description":"Retrieve flow policy assignments"},{"id":"applications:create:application","classifier":"application","description":"Create an application's OIDC settings"},{"id":"resources:read:secret","classifier":"secret","description":"Retrieve a resource’s client secret"},{"id":"applications:create:grant","classifier":"grant","description":"Create a new resource access grant for an application"},{"id":"image:delete:image","classifier":"image","description":"Delete an image"},{"id":"fraud:read:ssoLogin","classifier":"ssoLogin","description":"Read fraud SSO login"},{"id":"flowPolicies:read:flowPolicy","classifier":"flowPolicy","description":"Retrieve flow policies"},{"id":"applications:delete:pushCredentials","classifier":"pushCredentials","description":"Delete an application's push credentials information"},{"id":"resources:update:scope","classifier":"scope","description":"Update scopes in a resource"},{"id":"resources:read:attribute","classifier":"attribute","description":"Retrieve attributes from a resource"},{"id":"advancedservices:read:orchestration","classifier":"orchestration","description":"Retrieve PingOne Advanced Services Orchestration"}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/ce00e15f-f845-4df1-abf3-fdc4ff4e176c"}},"id":"ce00e15f-f845-4df1-abf3-fdc4ff4e176c","name":"Identity Data Read Only","description":"Identity Data Read Only","applicableTo":["POPULATION","ENVIRONMENT"],"permissions":[{"id":"dir:read:user","classifier":"user","description":"Read users"},{"id":"fraud:read:cluster","classifier":"cluster","description":"Read fraud clusters"},{"id":"applicationRoles:read:applicationRoleEntry","classifier":"applicationRoleEntry","description":"List application role entries"},{"id":"orgmgt:read:organization","classifier":"organization","description":"Read organizations"},{"id":"scim:read:user","classifier":"user","description":"Read users via SCIM"},{"id":"fraud:read:eventsDetails","classifier":"eventsDetails","description":"Read fraud eventsDetails"},{"id":"audit_reporting:read:activity","classifier":"activity","description":"Get Audit Activity"},{"id":"dir:read:groupMembership","classifier":"groupMembership","description":"Read Group Membership"},{"id":"orgmgt:read:environment","classifier":"environment","description":"Read environments"},{"id":"orgmgt:read:deployment","classifier":"deployment","description":"Read deployment resource"},{"id":"agreements:read:userConsent","classifier":"userConsent","description":"Read User Consents"},{"id":"dir:read:userSyncedStores","classifier":"userSyncedStores","description":"get user's target store sync status"},{"id":"idverifications:read:verifyPolicy","classifier":"verifyPolicy","description":"Read PingOne Verify Policies"},{"id":"dir:read:userPassword","classifier":"userPassword","description":"Read a user's password state"},{"id":"certmgt:read:certificate","classifier":"certificate","description":"Read a certificate"},{"id":"applicationRoles:read:applicationPermission","classifier":"applicationPermission","description":"List application permissions"},{"id":"permissions:read:roles","classifier":"roles","description":"Read Custom Roles"},{"id":"visualization:create:exploration","classifier":"exploration","description":"Create data exploration"},{"id":"dir:read:schema","classifier":"schema","description":"Read schemas"},{"id":"permissions:read:userRoleAssignments","classifier":"userRoleAssignments","description":"Read roles assigned to users"},{"id":"credentialsIssuance:read:credentials","classifier":"credentials","description":"Read a credential type or issue credential to a user"},{"id":"visualization:read:template","classifier":"template","description":"Read data exploration template"},{"id":"mfa:read:device","classifier":"device","description":"Retrieve user's device"},{"id":"scim:read:schema","classifier":"schema","description":"Read schemas via SCIM"},{"id":"applicationRoles:read:applicationRole","classifier":"applicationRole","description":"List and read application roles"},{"id":"image:read:image","classifier":"image","description":"Retrieve an image"},{"id":"fraud:read:feedback","classifier":"feedback","description":"Read fraud feedback"},{"id":"visualization:read:exploration","classifier":"exploration","description":"Read data exploration"},{"id":"dir:read:passwordPolicy","classifier":"passwordPolicy","description":"Read Password Policies"},{"id":"applicationRoles:read:applicationResource","classifier":"applicationResource","description":"List and read application resources"},{"id":"fraud:read:evaluation","classifier":"evaluation","description":"Read fraud evaluation"},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."},{"id":"credentialsIssuance:read:issuerProfile","classifier":"issuerProfile","description":"Read Credential Issuer Profile"},{"id":"idverifications:read:voicePhraseContent","classifier":"voicePhraseContent","description":"Read PingOne Verify Voice Phrase Content"},{"id":"risk:read:evaluation","classifier":"evaluation","description":"Read risk evaluations"},{"id":"dir:read:userLinkedAccounts","classifier":"userLinkedAccounts","description":"Read linked accounts for users"},{"id":"risk:read:predictor","classifier":"predictor","description":"Read risk predictors"},{"id":"idverifications:read:verifyTransactions","classifier":"verifyTransactions","description":"Read PingOne Verify Transaction(s)"},{"id":"visualization:read:dashboard","classifier":"dashboard","description":"Read dashboards"},{"id":"dir:read:group","classifier":"group","description":"Read Group"},{"id":"fraud:read:analytics","classifier":"analytics","description":"Read fraud analytics"},{"id":"devices:read:seenDevice","classifier":"seenDevice","description":"Read seen device"},{"id":"devices:read:userSeenDevice","classifier":"userSeenDevice","description":"Read user's seen device"},{"id":"radiusGateway:read:session","classifier":"session","description":"Read RADIUS session associated with the environment"},{"id":"mfa:read:pairingKey","classifier":"pairingKey","description":"Retrieve a user's pairing key information"},{"id":"authn:read:sessions","classifier":"sessions","description":"Read a user's sessions"},{"id":"agreements:read:oauthConsent","classifier":"oauthConsent","description":"Read OAuth Consents"},{"id":"applicationRoles:read:applicationRoleAssignment","classifier":"applicationRoleAssignment","description":"List application role assignments"},{"id":"dir:read:population","classifier":"population","description":"Read populations"},{"id":"permissions:read:groupRoleAssignments","classifier":"groupRoleAssignments","description":"Read group role assignments"},{"id":"dir:read:groupSyncedRules","classifier":"groupSyncedRules","description":"get group's provisioning rule sync status"},{"id":"licensing:read:license","classifier":"license","description":"Read licenses"},{"id":"identityProviders:read:identityProvider","classifier":"identityProvider","description":"Retrieve Identity Provider information"},{"id":"risk:read:policy","classifier":"policy","description":"Read risk policies"},{"id":"pingid:read:activity","classifier":"activity","description":"Read PingID user last activity"},{"id":"fraud:read:ssoLogin","classifier":"ssoLogin","description":"Read fraud SSO login"},{"id":"fraud:read:session","classifier":"session","description":"Read fraud session"},{"id":"pingid:read:integration","classifier":"integration","description":"Read PingID user integrations(services)"},{"id":"idverifications:read:voicePhrase","classifier":"voicePhrase","description":"Read PingOne Verify Voice Phrase"}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/7aba580c-5ec7-4b26-987d-85f462767455"}},"id":"7aba580c-5ec7-4b26-987d-85f462767455","name":"Configuration Read Only","description":"Configuration Read Only","applicableTo":["ORGANIZATION","ENVIRONMENT"],"permissions":[{"id":"solutions:read:config","classifier":"config","description":"Retrieve the workflow configuration."},{"id":"notifications:read:notificationsPolicy","classifier":"notificationsPolicy","description":"Retrieve notifications policy"},{"id":"authz:read:entity","classifier":"entity","description":"Read PingOne Authorize Entity"},{"id":"notifications:read:templateContent","classifier":"templateContent","description":"Retrieve a notification template's content"},{"id":"applicationRoles:read:applicationRoleEntry","classifier":"applicationRoleEntry","description":"List application role entries"},{"id":"authz:read:recentdecisions","classifier":"recentdecisions","description":"Read Recent Decisions of a PingOne Authorize Decision Endpoint"},{"id":"orgmgt:read:organization","classifier":"organization","description":"Read organizations"},{"id":"fraud:read:eventsDetails","classifier":"eventsDetails","description":"Read fraud eventsDetails"},{"id":"audit_reporting:read:activity","classifier":"activity","description":"Get Audit Activity"},{"id":"orgmgt:read:environment","classifier":"environment","description":"Read environments"},{"id":"formBuilder:read:recaptchaV2Config","classifier":"recaptchaV2Config","description":"Read a reCAPTCHA V2 config"},{"id":"notifications:read:emailDomain","classifier":"emailDomain","description":"Read or list email domains"},{"id":"osmosis:read:store","classifier":"store","description":"Read store"},{"id":"delegatedadmin:read:delegatedAdminConfigurations","classifier":"delegatedAdminConfigurations","description":"Read Delegated Admin Configurations"},{"id":"orgmgt:read:deployment","classifier":"deployment","description":"Read deployment resource"},{"id":"dir:read:userSyncedStores","classifier":"userSyncedStores","description":"get user's target store sync status"},{"id":"idverifications:read:verifyPolicy","classifier":"verifyPolicy","description":"Read PingOne Verify Policies"},{"id":"certmgt:read:certificate","classifier":"certificate","description":"Read a certificate"},{"id":"osmosis:read:rule","classifier":"rule","description":"Read rule"},{"id":"integrations:read:integration","classifier":"integration","description":"Read an integration in integration catalog"},{"id":"osmosis:read:mapping","classifier":"mapping","description":"Read mapping"},{"id":"applications:read:grant","classifier":"grant","description":"Retrieve a single resource access grant for an application"},{"id":"applicationRoles:read:applicationPermission","classifier":"applicationPermission","description":"List application permissions"},{"id":"authn:read:signOnPolicy","classifier":"signOnPolicy","description":"Retrieve sign-on policies"},{"id":"permissions:read:roles","classifier":"roles","description":"Read Custom Roles"},{"id":"visualization:create:exploration","classifier":"exploration","description":"Create data exploration"},{"id":"dir:read:schema","classifier":"schema","description":"Read schemas"},{"id":"externalServices:read:secrets","classifier":"secrets","description":"Read external service secrets"},{"id":"notifications:read:template","classifier":"template","description":"Retrieve a notification template"},{"id":"formBuilder:read:form","classifier":"form","description":"Read or list forms"},{"id":"externalServices:read:externalService","classifier":"externalService","description":"Read a external service(s)"},{"id":"agreements:read:agreement","classifier":"agreement","description":"Read Agreements"},{"id":"applications:read:signOnPolicyAssignment","classifier":"signOnPolicyAssignment","description":"Retrieve sign-on policy assignments"},{"id":"visualization:read:template","classifier":"template","description":"Read data exploration template"},{"id":"pingenterprise:read:orchestration","classifier":"orchestration","description":"Retrieve Orchestration flow for Ping Enterprise deployment"},{"id":"applicationRoles:read:applicationRole","classifier":"applicationRole","description":"List and read application roles"},{"id":"mfa:read:mfaSettings","classifier":"mfaSettings","description":"Retrieve MFA settings"},{"id":"langmgt:read:language","classifier":"language","description":"Read or list languages"},{"id":"mfa:read:fidoDeviceMetadata","classifier":"fidoDeviceMetadata","description":"Retrieve FIDO Device Metadata"},{"id":"branding:read:customDomain","classifier":"customDomain","description":"Read or list custom domains"},{"id":"mfa:read:oathToken","classifier":"oathToken","description":"Retrieve an OATH Token"},{"id":"image:read:image","classifier":"image","description":"Retrieve an image"},{"id":"mfa:read:fidoPolicy","classifier":"fidoPolicy","description":"Retrieve a FIDO policy"},{"id":"flow:read:flowDefinition","classifier":"flowDefinition","description":"Read a flow definition"},{"id":"subscriptions:read:subscription","classifier":"subscription","description":"Read a subscription"},{"id":"fraud:read:feedback","classifier":"feedback","description":"Read fraud feedback"},{"id":"visualization:read:exploration","classifier":"exploration","description":"Read data exploration"},{"id":"dir:read:passwordPolicy","classifier":"passwordPolicy","description":"Read Password Policies"},{"id":"applicationRoles:read:applicationResource","classifier":"applicationResource","description":"List and read application resources"},{"id":"permissions:read:applicationRoleAssignments","classifier":"applicationRoleAssignments","description":"Read roles assigned to applications"},{"id":"fraud:read:evaluation","classifier":"evaluation","description":"Read fraud evaluation"},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."},{"id":"solutions:read:flow","classifier":"flow","description":"Retrieve all available workflows."},{"id":"applications:read:secret","classifier":"secret","description":"Retrieve an application’s client secret"},{"id":"permissions:read:gatewayRoleAssignments","classifier":"gatewayRoleAssignments","description":"Read gateway role assignments"},{"id":"notifications:read:notificationsSettings","classifier":"notificationsSettings","description":"Read notifications settings"},{"id":"enduseruiconfig:read:configs","classifier":"configs","description":"Read End User UI Configurations"},{"id":"mfa:read:deviceAuthenticationPolicy","classifier":"deviceAuthenticationPolicy","description":"Retrieve device authentication policy"},{"id":"idverifications:read:voicePhraseContent","classifier":"voicePhraseContent","description":"Read PingOne Verify Voice Phrase Content"},{"id":"authz:read:deploymentpackage","classifier":"deploymentpackage","description":"Read PingOne Authorize Deployment Packages"},{"id":"certmgt:read:key","classifier":"key","description":"Read a KeyPair, excluding private key portion"},{"id":"risk:read:predictor","classifier":"predictor","description":"Read risk predictors"},{"id":"visualization:read:dashboard","classifier":"dashboard","description":"Read dashboards"},{"id":"resources:read:scope","classifier":"scope","description":"Retrieve scopes from a resource"},{"id":"dir:read:group","classifier":"group","description":"Read Group"},{"id":"branding:read:brandingSettings","classifier":"brandingSettings","description":"Read or list branding settings"},{"id":"pingintelligence:read:orchestration","classifier":"orchestration","description":"Retrieve Orchestration flow for Ping Intelligence deployment"},{"id":"authz:read:version","classifier":"version","description":"Read PingOne Authorize Policy Version"},{"id":"authz:read:decisionendpoint","classifier":"decisionendpoint","description":"Read PingOne Authorize Decision Endpoint"},{"id":"certmgt:read:krp","classifier":"krp","description":"Read Key Rotation Policies (KRP)"},{"id":"branding:read:theme","classifier":"theme","description":"Read or list themes"},{"id":"authz:read:apiServerDeployment","classifier":"apiServerDeployment","description":"Read API Service deployment status"},{"id":"solutions:read:token","classifier":"token","description":"Retrieve a DaVinci access token."},{"id":"applicationRoles:read:applicationRoleAssignment","classifier":"applicationRoleAssignment","description":"List application role assignments"},{"id":"dir:read:population","classifier":"population","description":"Read populations"},{"id":"authz:read:apiServer","classifier":"apiServer","description":"Retrieve API Services"},{"id":"dir:read:groupSyncedRules","classifier":"groupSyncedRules","description":"get group's provisioning rule sync status"},{"id":"applications:read:pushCredentials","classifier":"pushCredentials","description":"Retrieve application's push credentials information"},{"id":"identityProviders:read:identityProvider","classifier":"identityProvider","description":"Retrieve Identity Provider information"},{"id":"licensing:read:license","classifier":"license","description":"Read licenses"},{"id":"alerting:read:channel","classifier":"channel","description":"Read AlertChannels"},{"id":"resources:read:resource","classifier":"resource","description":"Retrieve resources from an environment"},{"id":"gateways:read:gateway","classifier":"gateway","description":"Read gateways"},{"id":"risk:read:policy","classifier":"policy","description":"Read risk policies"},{"id":"authz:read:tag","classifier":"tag","description":"Read PingOne Authorize Policy Version Tag"},{"id":"applications:read:application","classifier":"application","description":"Retrieve an application's OIDC settings"},{"id":"applications:read:flowPolicyAssignment","classifier":"flowPolicyAssignment","description":"Retrieve flow policy assignments"},{"id":"resources:read:secret","classifier":"secret","description":"Retrieve a resource’s client secret"},{"id":"fraud:read:ssoLogin","classifier":"ssoLogin","description":"Read fraud SSO login"},{"id":"flowPolicies:read:flowPolicy","classifier":"flowPolicy","description":"Retrieve flow policies"},{"id":"fraud:read:session","classifier":"session","description":"Read fraud session"},{"id":"delegatedadmin:read:delegatedAdminSdkToken","classifier":"delegatedAdminSdkToken","description":"Read Delegated Admin SdkToken"},{"id":"resources:read:attribute","classifier":"attribute","description":"Retrieve attributes from a resource"},{"id":"idverifications:read:voicePhrase","classifier":"voicePhrase","description":"Read PingOne Verify Voice Phrase"},{"id":"osmosis:read:plan","classifier":"plan","description":"Read plan"},{"id":"advancedservices:read:orchestration","classifier":"orchestration","description":"Retrieve PingOne Advanced Services Orchestration"}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/c65f13f5-f42c-4ffc-aa3a-4858d4ac3f6d"}},"id":"c65f13f5-f42c-4ffc-aa3a-4858d4ac3f6d","name":"PingFederate Administrator","description":"PingFederate Administrator","applicableTo":["ORGANIZATION","ENVIRONMENT"],"permissions":[{"id":"pingfederate:admin:system","classifier":"system","description":"Configure partner connections and most system settings, except the management of local accounts and the handling of local keys and certificates."},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/ec21ef32-0885-4210-8fe3-247bc2f40e7d"}},"id":"ec21ef32-0885-4210-8fe3-247bc2f40e7d","name":"PingFederate Expression Administrator","description":"PingFederate Expression Administrator","applicableTo":["ORGANIZATION","ENVIRONMENT"],"permissions":[{"id":"pingfederate:admin:system","classifier":"system","description":"Configure partner connections and most system settings, except the management of local accounts and the handling of local keys and certificates."},{"id":"pingfederate:admin:expressions","classifier":"expressions","description":"Map user attributes by using the expression language, Object-Graph Navigation Language (OGNL)."},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."}],"canAssign":[{"id":"c65f13f5-f42c-4ffc-aa3a-4858d4ac3f6d"}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/03643153-e396-4c35-b527-ac05b43a64fb"}},"id":"03643153-e396-4c35-b527-ac05b43a64fb","name":"PingFederate Crypto Administrator","description":"PingFederate Crypto Administrator","applicableTo":["ORGANIZATION","ENVIRONMENT"],"permissions":[{"id":"pingfederate:admin:crypto","classifier":"crypto","description":"Manage local keys and certificates."},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/6f6793ad-4a5a-421b-8867-406ebee618de"}},"id":"6f6793ad-4a5a-421b-8867-406ebee618de","name":"PingFederate User Administrator","description":"PingFederate User Administrator","applicableTo":["ORGANIZATION","ENVIRONMENT"],"permissions":[{"id":"pingfederate:admin:auditor","classifier":"auditor","description":"View-only permissions for all administrative functions."},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."},{"id":"pingfederate:admin:users","classifier":"users","description":"Create users, deactivate users, change or reset passwords, and install replacement license keys."}],"canAssign":[{"id":"b812ab8e-8fbc-45a9-b965-136849148040"}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/b812ab8e-8fbc-45a9-b965-136849148040"}},"id":"b812ab8e-8fbc-45a9-b965-136849148040","name":"PingFederate Auditor","description":"PingFederate Auditor","applicableTo":["ORGANIZATION","ENVIRONMENT"],"permissions":[{"id":"pingfederate:admin:auditor","classifier":"auditor","description":"View-only permissions for all administrative functions."},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/168d545c-8337-4a34-8426-9c173d60e331"}},"id":"168d545c-8337-4a34-8426-9c173d60e331","name":"DaVinci Admin","description":"DaVinci Admin","applicableTo":["ORGANIZATION","ENVIRONMENT"],"permissions":[{"id":"langmgt:read:language","classifier":"language","description":"Read or list languages"},{"id":"formBuilder:update:recaptchaV2Config","classifier":"recaptchaV2Config","description":"Update a reCAPTCHA V2 config"},{"id":"davinci:delete:dvFlows","classifier":"dvFlows","description":"Delete DaVinci flows"},{"id":"davinci:update:constructs","classifier":"constructs","description":"Update DaVinci variables"},{"id":"davinci:read:dvFlows","classifier":"dvFlows","description":"Read DaVinci flows"},{"id":"davinci:delete:connections","classifier":"connections","description":"Delete DaVinci connections"},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."},{"id":"orgmgt:read:organization","classifier":"organization","description":"Read organizations"},{"id":"formBuilder:delete:recaptchaV2Config","classifier":"recaptchaV2Config","description":"Delete a reCAPTCHA V2 config"},{"id":"formBuilder:update:form","classifier":"form","description":"Update a form"},{"id":"orgmgt:read:environment","classifier":"environment","description":"Read environments"},{"id":"formBuilder:read:recaptchaV2Config","classifier":"recaptchaV2Config","description":"Read a reCAPTCHA V2 config"},{"id":"langmgt:update:language","classifier":"language","description":"Update a language"},{"id":"davinci:create:connections","classifier":"connections","description":"Create DaVinci connections"},{"id":"branding:read:brandingSettings","classifier":"brandingSettings","description":"Read or list branding settings"},{"id":"davinci:create:constructs","classifier":"constructs","description":"Create DaVinci variables"},{"id":"davinci:create:dvFlows","classifier":"dvFlows","description":"Create DaVinci flows"},{"id":"davinci:deploy:dvFlows","classifier":"dvFlows","description":"Deploy DaVinci flows"},{"id":"orgmgt:read:deployment","classifier":"deployment","description":"Read deployment resource"},{"id":"davinci:update:dvFlows","classifier":"dvFlows","description":"Update DaVinci flows"},{"id":"branding:read:theme","classifier":"theme","description":"Read or list themes"},{"id":"davinci:update:connections","classifier":"connections","description":"Update DaVinci connections"},{"id":"davinci:delete:constructs","classifier":"constructs","description":"Delete DaVinci variables"},{"id":"licensing:read:license","classifier":"license","description":"Read licenses"},{"id":"davinci:read:constructs","classifier":"constructs","description":"Read DaVinci variables"},{"id":"dir:read:schema","classifier":"schema","description":"Read schemas"},{"id":"davinci:read:connections","classifier":"connections","description":"Read DaVinci connections"},{"id":"formBuilder:read:form","classifier":"form","description":"Read or list forms"},{"id":"formBuilder:create:form","classifier":"form","description":"Create a form"},{"id":"formBuilder:delete:form","classifier":"form","description":"Delete a form"}],"canAssign":[{"id":"e23fed81-8c98-4c20-b823-8d29514ab5f6"}]},{"_links":{"self":{"href":"https://api.pingone.com/v1/roles/e23fed81-8c98-4c20-b823-8d29514ab5f6"}},"id":"e23fed81-8c98-4c20-b823-8d29514ab5f6","name":"DaVinci Admin Read Only","description":"DaVinci Admin Read Only","applicableTo":["ORGANIZATION","ENVIRONMENT"],"permissions":[{"id":"orgmgt:read:deployment","classifier":"deployment","description":"Read deployment resource"},{"id":"langmgt:read:language","classifier":"language","description":"Read or list languages"},{"id":"branding:read:theme","classifier":"theme","description":"Read or list themes"},{"id":"davinci:read:dvFlows","classifier":"dvFlows","description":"Read DaVinci flows"},{"id":"globalregistry:read:console","classifier":"console","description":"Access to PingOne administrator console."},{"id":"licensing:read:license","classifier":"license","description":"Read licenses"},{"id":"orgmgt:read:organization","classifier":"organization","description":"Read organizations"},{"id":"davinci:read:constructs","classifier":"constructs","description":"Read DaVinci variables"},{"id":"dir:read:schema","classifier":"schema","description":"Read schemas"},{"id":"davinci:read:connections","classifier":"connections","description":"Read DaVinci connections"},{"id":"formBuilder:read:form","classifier":"form","description":"Read or list forms"},{"id":"orgmgt:read:environment","classifier":"environment","description":"Read environments"},{"id":"formBuilder:read:recaptchaV2Config","classifier":"recaptchaV2Config","description":"Read a reCAPTCHA V2 config"},{"id":"branding:read:brandingSettings","classifier":"brandingSettings","description":"Read or list branding settings"}]}]},"count":13,"size":13}