Access Control

The following are Autonomous Identity access control endpoints:

POST /

Get access control decision data for actioned user entitlements.

Endpoint

/api/accessControl

Authorization

Bearer Token <JWT-value>

Body

{
	"outputType": "csv"
}

Example Request

curl --location --request POST '/api/accessControl' \
--header 'Content-Type: application/json' \
--data-raw '{
	"outputType": "csv"
}'

Example Response

i{
    "data": [
        {
            "is_processed": false,
            "entitlement": "tildeNon-Union_Construction_II",
            "user": "george.perez",
            "date_created": "2020-06-16T05:00:22.133Z",
            "role_owner_decision": -1,
            "manager_decision": 1,
            "is_archived": false,
            "manager": "bob.rodgers",
            "manager_date_created": "2020-06-19T07:51:05.533Z",
            "role_owner": "-1",
            "role_owner_auto_certify_reason": null,
            "role_owner_auto_request_reason": null,
            "role_owner_date_created": "1970-01-01T00:00:00.000Z",
            "user_score": null,
            "justification": []
        },
        {
            "is_processed": false,
            "entitlement": "tildeNon-Union_Construction_II",
            "user": "george.perez",
            "date_created": "2020-06-16T05:00:22.133Z",
            "role_owner_decision": -1,
            "manager_decision": 2,
            "is_archived": false,
            "manager": "bob.rodgers",
            "manager_date_created": "2020-06-19T07:50:52.424Z",
            "role_owner": "-1",
            "role_owner_auto_certify_reason": null,
            "role_owner_auto_request_reason": null,
            "role_owner_date_created": "1970-01-01T00:00:00.000Z",
            "user_score": null,
            "justification": []
        }
    ],
    "count": 2
}

POST /(get auto certification data)

Get the auto certification data.

Endpoint

/api/accessControl

Authorization

Bearer Token <JWT-value>

Body

{"get_auto_certify": true, "get_auto_request": true}

Example Request

curl --location --request POST '/api/accessControl' \
--header 'Content-Type: application/json' \
--data-raw '{"get_auto_certify": true, "get_auto_request": true}'

POST revokeAccess

Revoke access.

Endpoint

/api/accessControl/revokeAccess

Authorization

Bearer Token <JWT-value>

Body

{
	"manager": "Christy.Cronin",
	"user": "bloggs",
	"entitlement":"11dbc180-5b86-11e8-957d-37bffaeb9f3a"
}

Example Request

curl --location --request POST '/api//accessControl/revokeAccess' \
--header 'Content-Type: application/json' \
--data-raw '{
	"manager": "Christy.Cronin",
	"user": "bloggs",
	"entitlement":"11dbc180-5b86-11e8-957d-37bffaeb9f3a"
}'

POST batchCertifyAccess

Batch certify access.

Endpoint

/api/accessControl/batchCertifyAccess

Authorization

Bearer Token <JWT-value>

Body

{
	"roleOwner": "david.elliott",
	"entitlement": "030ac799-3a51-4a5d-9c58-3deb02081dd5",
	"users": [
		"1111",
		"34534535"
	]
}

Example Request

curl --location --request POST '/api//accessControl/batchCertifyAccess' \
--header 'Content-Type: application/json' \
--data-raw '{
	"roleOwner": "david.elliott",
	"entitlement": "030ac799-3a51-4a5d-9c58-3deb02081dd5",
	"users": [
		"1111",
		"34534535"
	]
}'

POST autoCertifyRequestAccess

Auto-certify request access.

Endpoint

/api/accessControl/autoCertifyRequestAccess

Authorization

Bearer Token <JWT-value>

Body

{
	"roleOwner":"admin",
	"is_auto_request":true,
	"auto_request_reason":"string",
	"is_auto_certify":true,
	"auto_certify_reason":"string",
	"entitlement":"11dbc180-5b86-11e8-957d-37bffaeb9f3",
	"users": [
		"alphabetti",
		"george"
	],
    "justification": [
    	"JOBCODE_NAME_Bad Engineer",
    	"LINE_OF_BUSINESS_Testing"
    ]
}

Example Request

curl --location --request POST '/api//accessControl/autoCertifyRequestAccess' \
--header 'Content-Type: application/json' \
--data-raw '{
	"roleOwner":"admin",
	"is_auto_request":true,
	"auto_request_reason":"string",
	"is_auto_certify":true,
	"auto_certify_reason":"string",
	"entitlement":"11dbc180-5b86-11e8-957d-37bffaeb9f3",
	"users": [
		"alphabetti",
		"george"
	],
    "justification": [
    	"JOBCODE_NAME_Bad Engineer",
    	"LINE_OF_BUSINESS_Testing"
    ]
}'

POST cancelAutoCertifyRequest

Revoke access.

Endpoint

/api/accessControl/cancelAutoCertifyRequest

Authorization

Bearer Token <JWT-value>

Body

{
	"roleOwner": "david.elliott",
	"entitlement": "WEB_user_Contrusction Affairs Admin_7HQ",
	"users": [
		"elizabeth.saiz"
	],
	"is_auto_request": true
}

Example Request

curl --location --request POST '/api/accessControl/cancelAutoCertifyRequest' \
--header 'Content-Type: application/json' \
--data-raw '{
	"roleOwner": "david.elliott",
	"entitlement": "WEB_user_Contrusction Affairs Admin_7HQ",
	"users": [
		"elizabeth.saiz"
	],
	"is_auto_request": true
}'