@equinor/fusion-services 0.2.0

package/src/roles/v1/openapi.json

@@ -0,0 +1 @@
+{"components":{"schemas":{"AccessRequirement":{"properties":{"code":{"type":"string"},"description":{"type":"string"},"outcome":{"type":["null","string"]},"wasEvaluated":{"type":"boolean"}},"required":["code","description","outcome","wasEvaluated"],"type":"object"},"AccessRoleIdentifier":{"description":"Id or name","properties":{"accessRoleId":{"format":"uuid","type":["null","string"]},"accessRoleName":{"type":["null","string"]},"originalIdentifier":{"type":["null","string"]}},"type":"string"},"AccessRoleMapping":{"description":"Maps an access role to a role or claimable role with a reason.","properties":{"accessRoleIdentifier":{"$ref":"#/components/schemas/AccessRoleIdentifier"},"reason":{"description":"Reason for including this access role in the mapping.","type":"string"}},"type":"object"},"AccountIdentifier":{"description":"Id or mail","properties":{"mail":{"type":["null","string"]},"originalIdentifier":{"type":["null","string"]},"type":{"$ref":"#/components/schemas/IdentifierType"},"uniqueId":{"format":"uuid","type":["null","string"]}},"type":"string"},"ActivateAssignedClaimableRoleRequest":{"description":"Request body for activating (claiming) an assigned claimable role.","properties":{"hours":{"description":"Duration in hours for which the activation should be valid.","format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"reason":{"description":"Reason for activating the claimable role.","type":"string"}},"type":"object"},"AddClaimableRoleAccessRoleRequest":{"description":"Request body for adding access role mappings to a claimable role.","properties":{"accessRoleMappings":{"description":"Access role mappings to add. At least one is required.","items":{"$ref":"#/components/schemas/AccessRoleMapping"},"type":"array"}},"type":"object"},"AddRoleAccessRoleRequest":{"description":"Request body for adding access role mappings to a role.","properties":{"accessRoleMappings":{"description":"Access role mappings to add. At least one is required.","items":{"$ref":"#/components/schemas/AccessRoleMapping"},"type":"array"}},"type":"object"},"ApiAccessRole":{"description":"Represents an access role.","properties":{"description":{"description":"Description of the access role.","type":"string"},"id":{"description":"Unique identifier of the access role.","format":"uuid","type":"string"},"name":{"description":"Name of the access role.","type":"string"},"scopeType":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiScopeType"}]}},"type":"object"},"ApiAccessRoleAssignment":{"description":"Represents an assignment of an access role to an account.","properties":{"accessRole":{"$ref":"#/components/schemas/ApiAccessRole"},"assignedTo":{"$ref":"#/components/schemas/ApiAccount"},"claimableRoleAssignment":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiSimpleClaimableRoleAssignment"}]},"externalIdentifier":{"description":"Identifier in the originating system, if any.","type":["null","string"]},"id":{"description":"Unique identifier of the assignment.","format":"uuid","type":"string"},"isActive":{"description":"Whether the assignment is currently active.","type":"boolean"},"reason":{"description":"Reason for the assignment.","type":"string"},"roleAssignment":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiSimpleRoleAssignment"}]},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiScope"}]},"source":{"description":"The origin system that created this assignment, if any.","type":["null","string"]},"tags":{"description":"Labels attached to the assignment.","items":{"type":"string"},"type":"array"},"type":{"description":"Assignment type (e.g. \"Direct\" or \"Inherited\").","type":"string"},"validFrom":{"description":"Date from which the assignment is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which the assignment is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiAccessRoleMapping":{"description":"Maps an access role to a role or claimable role, with the reason for inclusion.","properties":{"accessRole":{"$ref":"#/components/schemas/ApiAccessRole"},"reason":{"description":"Reason this access role is granted through the mapping.","type":"string"}},"type":"object"},"ApiAccount":{"description":"The owner account.","properties":{"accountClassification":{"description":"Account classification, if available.","type":["null","string"]},"accountType":{"description":"Account type (e.g. Employee, Consultant, ExternalHire).","type":"string"},"azureUniqueId":{"description":"Azure Active Directory unique object ID, if known.","format":"uuid","type":["null","string"]},"displayName":{"description":"Display name.","type":"string"},"mail":{"description":"Email address, if available.","type":["null","string"]},"upn":{"description":"User principal name (UPN), if available.","type":["null","string"]}},"type":"object"},"ApiAccountAccessRole":{"description":"The access role assigned, including system information.","properties":{"description":{"description":"Description of the access role.","type":"string"},"id":{"description":"Unique identifier of the access role.","format":"uuid","type":"string"},"name":{"description":"Name of the access role.","type":"string"},"scopeType":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiScopeType"}]},"system":{"$ref":"#/components/schemas/ApiSimpleSystem"}},"type":"object"},"ApiAccountAccessRoleAssignment":{"description":"Represents an access role assignment as seen from an account context.","properties":{"accessRole":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiAccountAccessRole"}]},"assignedTo":{"$ref":"#/components/schemas/ApiAccount"},"claimableRoleAssignment":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiSimpleClaimableRoleAssignment"}]},"externalIdentifier":{"description":"Identifier in the originating system, if any.","type":["null","string"]},"id":{"description":"Unique identifier of the assignment.","format":"uuid","type":"string"},"isActive":{"description":"Whether the assignment is currently active.","type":"boolean"},"reason":{"description":"Reason for the assignment.","type":"string"},"roleAssignment":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiSimpleRoleAssignment"}]},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiScope"}]},"source":{"description":"The origin system that created this assignment, if any.","type":["null","string"]},"tags":{"description":"Labels attached to the assignment.","items":{"type":"string"},"type":"array"},"type":{"description":"Assignment type (e.g. \"Direct\" or \"Inherited\").","type":"string"},"validFrom":{"description":"Date from which the assignment is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which the assignment is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiAccountActiveAccessRoleAssignment":{"description":"Represents a currently active access role assignment for an account.","properties":{"accessRoleName":{"description":"Name of the access role.","type":"string"},"activeToDate":{"description":"Date and time the activation expires, if any.","format":"date-time","type":["null","string"]},"assignmentType":{"description":"Assignment type (e.g. \"Direct\" or \"Inherited\").","type":"string"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiScopeValues"}]},"systemName":{"description":"Name of the system the access role belongs to.","type":"string"}},"type":"object"},"ApiAccountClaimableRoleAssignment":{"description":"Represents a claimable role assignment as seen from an account context, including audit fields.","properties":{"activeTo":{"description":"Date and time until which the claimed role is active, if any.","format":"date-time","type":["null","string"]},"assignedTo":{"$ref":"#/components/schemas/ApiAccount"},"claimableRole":{"$ref":"#/components/schemas/ApiSimpleClaimableRole"},"createdBy":{"$ref":"#/components/schemas/ApiAccount"},"createdDate":{"description":"Date and time this assignment was created.","format":"date-time","type":"string"},"externalIdentifier":{"description":"Identifier in the originating system, if any.","type":["null","string"]},"id":{"description":"Unique identifier of the assignment.","format":"uuid","type":"string"},"isActive":{"description":"Whether the claimable role is currently active (claimed).","type":"boolean"},"reason":{"description":"Reason for the assignment.","type":"string"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiClaimableRoleScope"}]},"source":{"description":"The origin system that created this assignment, if any.","type":["null","string"]},"tags":{"description":"Labels attached to the assignment.","items":{"type":"string"},"type":"array"},"type":{"description":"Assignment type (e.g. \"Direct\" or \"Inherited\").","type":"string"},"validFrom":{"description":"Date from which the assignment is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which the assignment is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiAccountRoleAssignment":{"description":"Represents a role assignment as seen from an account context, including audit fields.","properties":{"assignedTo":{"$ref":"#/components/schemas/ApiAccount"},"createdBy":{"$ref":"#/components/schemas/ApiAccount"},"createdDate":{"description":"Date and time this assignment was created.","format":"date-time","type":"string"},"externalIdentifier":{"description":"Identifier in the originating system, if any.","type":["null","string"]},"id":{"description":"Unique identifier of the role assignment.","format":"uuid","type":"string"},"reason":{"description":"Reason for the assignment.","type":"string"},"role":{"$ref":"#/components/schemas/ApiSimpleRole"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiRoleScope"}]},"source":{"description":"The origin system that created this assignment, if any.","type":["null","string"]},"tags":{"description":"Labels attached to the assignment.","items":{"type":"string"},"type":"array"},"type":{"description":"Assignment type (e.g. \"Direct\" or \"Inherited\").","type":"string"},"validFrom":{"description":"Date from which the assignment is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which the assignment is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiBindingExecutionRecord":{"description":"Represents a recorded execution of a role binding reconciliation run.","properties":{"assignedUserIds":{"description":"IDs of users who received role assignments during this execution.","items":{"format":"uuid","type":"string"},"type":"array"},"bindingType":{"description":"Binding type that was executed (e.g. \"EntraGroup\" or \"OrgChart\").","type":"string"},"claimableRolesAffected":{"description":"Names of claimable roles affected during this execution.","items":{"type":"string"},"type":"array"},"errorMessage":{"description":"Error message if the execution failed, if any.","type":["null","string"]},"executedAt":{"description":"Date and time the execution ran.","format":"date-time","type":"string"},"id":{"description":"Unique identifier of the execution record.","format":"uuid","type":"string"},"metadata":{"description":"Additional JSON metadata about the execution, if any.","type":["null","string"]},"outcome":{"description":"Outcome of the execution (e.g. \"Success\", \"Failed\").","type":"string"},"removedUserIds":{"description":"IDs of users whose role assignments were removed during this execution.","items":{"format":"uuid","type":"string"},"type":"array"},"rolesAffected":{"description":"Names of roles affected during this execution.","items":{"type":"string"},"type":"array"},"sourceSystem":{"description":"The source system that triggered the execution.","type":"string"},"triggerType":{"description":"What triggered the execution (e.g. \"Scheduled\", \"Manual\").","type":"string"}},"type":"object"},"ApiBindingNotificationRecord":{"description":"Represents a recorded notification event received from an external binding source.","properties":{"bindingType":{"description":"Binding type this notification relates to (e.g. \"EntraGroup\").","type":"string"},"errorMessage":{"description":"Error message if processing failed, if any.","type":["null","string"]},"id":{"description":"Unique identifier of the notification record.","format":"uuid","type":"string"},"metadata":{"description":"Additional JSON metadata about the notification, if any.","type":["null","string"]},"notificationType":{"description":"Type of notification event.","type":"string"},"processingResult":{"description":"Result of processing the notification (e.g. \"Processed\", \"Ignored\").","type":"string"},"receivedAt":{"description":"Date and time the notification was received.","format":"date-time","type":"string"},"sourceSystem":{"description":"The source system that sent the notification.","type":"string"}},"type":"object"},"ApiClaimableAccessRoleMapping":{"description":"Maps an access role to a claimable role, with the reason for inclusion.","properties":{"accessRole":{"$ref":"#/components/schemas/ApiAccessRole"},"reason":{"description":"Reason this access role is granted through the claimable role.","type":["null","string"]}},"type":"object"},"ApiClaimableRole":{"description":"Represents a claimable role with full details including access role mappings and audit fields.","properties":{"accessRoleMappings":{"description":"Access role mappings granted when this claimable role is activated, when expanded.","items":{"$ref":"#/components/schemas/ApiClaimableAccessRoleMapping"},"type":["null","array"]},"createdBy":{"$ref":"#/components/schemas/ApiAccount"},"createdDate":{"description":"Date and time this claimable role was created.","format":"date-time","type":"string"},"description":{"description":"Description of the claimable role.","type":"string"},"displayName":{"description":"Human-readable display name.","type":"string"},"id":{"description":"Unique identifier of the claimable role.","format":"uuid","type":"string"},"name":{"description":"Name of the claimable role.","type":"string"},"system":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiSimpleSystem"}]},"updatedBy":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiAccount"}]},"updatedDate":{"description":"Date and time this claimable role was last updated, if any. Omitted when null.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiClaimableRoleAssignment":{"description":"Represents an assignment of a claimable role to an account.","properties":{"activeTo":{"description":"Date and time until which the claimed role is active, if any.","format":"date-time","type":["null","string"]},"assignedTo":{"$ref":"#/components/schemas/ApiAccount"},"claimableRole":{"$ref":"#/components/schemas/ApiSimpleClaimableRole"},"externalIdentifier":{"description":"Identifier in the originating system, if any.","type":["null","string"]},"id":{"description":"Unique identifier of the assignment.","format":"uuid","type":"string"},"isActive":{"description":"Whether the claimable role is currently active (claimed).","type":"boolean"},"reason":{"description":"Reason for the assignment.","type":"string"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiClaimableRoleScope"}]},"source":{"description":"The origin system that created this assignment, if any.","type":["null","string"]},"tags":{"description":"Labels attached to the assignment.","items":{"type":"string"},"type":"array"},"type":{"description":"Assignment type (e.g. \"Direct\" or \"Inherited\").","type":"string"},"validFrom":{"description":"Date from which the assignment is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which the assignment is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiClaimableRoleAssignmentActivation":{"description":"Represents an activation record for a claimable role assignment.","properties":{"activatedBy":{"$ref":"#/components/schemas/ApiAccount"},"activationDate":{"description":"Date and time the claimable role was activated.","format":"date-time","type":"string"},"activeToDate":{"description":"Date and time the activation expires.","format":"date-time","type":"string"},"id":{"description":"Unique identifier of the activation record.","format":"uuid","type":"string"},"reason":{"description":"Reason provided when claiming the role.","type":"string"}},"type":"object"},"ApiClaimableRoleScope":{"description":"Scope restricting the assignment, if any. Omitted when null.","properties":{"isGlobal":{"description":"Whether this is a global (non-scoped) assignment.","type":"boolean"},"scopeTypeIdentifier":{"description":"Scope type identifier (e.g. \"project\", \"contract\"), if any.","type":["null","string"]},"value":{"description":"Scope value, if any.","type":["null","string"]}},"required":["isGlobal","value"],"type":"object"},"ApiConsolidatedAssignmentEntry":{"description":"Represents a single contributing assignment entry in a consolidated role assignment view.","properties":{"externalIdentifier":{"description":"Identifier in the originating system, if any. Omitted when null.","type":["null","string"]},"id":{"description":"Unique identifier of this assignment entry.","format":"uuid","type":"string"},"reason":{"description":"Reason for this assignment entry.","type":"string"},"source":{"description":"The origin system that created this entry, if any. Omitted when null.","type":["null","string"]},"validFrom":{"description":"Date from which this entry is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which this entry is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiConsolidatedClaimableRoleAssignment":{"description":"Represents a consolidated view of all claimable role assignments for an account and claimable role combination.","properties":{"activeTo":{"description":"Date and time until which the claimed role is active, if any.","format":"date-time","type":["null","string"]},"assignedTo":{"$ref":"#/components/schemas/ApiAccount"},"assignments":{"description":"Individual assignment entries contributing to this consolidated record, when expanded.","items":{"$ref":"#/components/schemas/ApiConsolidatedAssignmentEntry"},"type":["null","array"]},"claimableRole":{"$ref":"#/components/schemas/ApiConsolidatedClaimableRoleRef"},"id":{"description":"Unique identifier of the consolidated assignment.","format":"uuid","type":"string"},"isActive":{"description":"Whether the claimable role is currently active (claimed).","type":"boolean"},"reasons":{"description":"All reasons contributing to this consolidated assignment.","items":{"type":"string"},"type":"array"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiClaimableRoleScope"}]},"type":{"description":"Assignment type (e.g. \"Direct\" or \"Inherited\").","type":"string"},"validFrom":{"description":"Effective start date of the consolidated assignment, if any. Omitted when null.","format":"date-time","type":["null","string"]},"validTo":{"description":"Effective end date of the consolidated assignment, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiConsolidatedClaimableRoleRef":{"description":"The claimable role assigned.","properties":{"description":{"description":"Description of the claimable role.","type":"string"},"displayName":{"description":"Human-readable display name of the claimable role.","type":"string"},"id":{"description":"Unique identifier of the claimable role.","format":"uuid","type":"string"},"name":{"description":"Name of the claimable role.","type":"string"}},"type":"object"},"ApiConsolidatedRoleAssignment":{"description":"Represents a consolidated view of all role assignments for an account and role combination.","properties":{"assignedTo":{"$ref":"#/components/schemas/ApiAccount"},"assignments":{"description":"Individual assignment entries contributing to this consolidated record, when expanded.","items":{"$ref":"#/components/schemas/ApiConsolidatedAssignmentEntry"},"type":["null","array"]},"id":{"description":"Unique identifier of the consolidated assignment.","format":"uuid","type":"string"},"reasons":{"description":"All reasons contributing to this consolidated assignment.","items":{"type":"string"},"type":"array"},"role":{"$ref":"#/components/schemas/ApiSimpleRole"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiRoleScope"}]},"type":{"description":"Assignment type (e.g. \"Direct\" or \"Inherited\").","type":"string"},"validFrom":{"description":"Effective start date of the consolidated assignment, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Effective end date of the consolidated assignment, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiExtendedAccessRole":{"description":"Represents an access role with extended details including system information.","properties":{"description":{"description":"Description of the access role.","type":"string"},"id":{"description":"Unique identifier of the access role.","format":"uuid","type":"string"},"name":{"description":"Name of the access role.","type":"string"},"scopeType":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiScopeType"}]},"system":{"$ref":"#/components/schemas/ApiSimpleSystem"}},"type":"object"},"ApiExtendedClaimableRoleAssignmentActivation":{"description":"Represents an activation record for a claimable role assignment with the full assignment details included.","properties":{"activatedBy":{"$ref":"#/components/schemas/ApiAccount"},"activationDate":{"description":"Date and time the claimable role was activated.","format":"date-time","type":"string"},"activeToDate":{"description":"Date and time the activation expires.","format":"date-time","type":"string"},"claimableRoleAssignment":{"$ref":"#/components/schemas/ApiSimpleClaimableRoleAssignment"},"id":{"description":"Unique identifier of the activation record.","format":"uuid","type":"string"},"reason":{"description":"Reason provided when claiming the role.","type":"string"}},"type":"object"},"ApiOwner":{"description":"Represents a system owner with the reason for ownership.","properties":{"account":{"$ref":"#/components/schemas/ApiAccount"},"reason":{"description":"Reason this account is registered as an owner.","type":"string"}},"type":"object"},"ApiPagedCollectionOfApiAccessRoleAssignment":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiAccessRoleAssignment"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiAccountAccessRoleAssignment":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiAccountAccessRoleAssignment"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiAccountClaimableRoleAssignment":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiAccountClaimableRoleAssignment"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiAccountRoleAssignment":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiAccountRoleAssignment"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiBindingExecutionRecord":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiBindingExecutionRecord"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiBindingNotificationRecord":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiBindingNotificationRecord"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiClaimableRole":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiClaimableRole"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiClaimableRoleAssignment":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiClaimableRoleAssignment"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiClaimableRoleAssignmentActivation":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiClaimableRoleAssignmentActivation"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiExtendedAccessRole":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiExtendedAccessRole"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiExtendedClaimableRoleAssignmentActivation":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiExtendedClaimableRoleAssignmentActivation"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiRole":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiRole"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiRoleAssignment":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiRoleAssignment"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPagedCollectionOfApiSystem":{"properties":{"count":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"nextPage":{"type":["null","string"]},"prevPage":{"type":["null","string"]},"totalCount":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]},"value":{"items":{"$ref":"#/components/schemas/ApiSystem"},"type":"array"}},"required":["totalCount"],"type":"object"},"ApiPurgeBindingResult":{"description":"Response model for purge operations indicating the number of records deleted.","properties":{"deletedCount":{"description":"The number of records deleted during the purge operation.","format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["integer","string"]}},"type":"object"},"ApiRole":{"description":"Represents a role with full details including access role mappings and audit fields.","properties":{"accessRoleMappings":{"description":"Access role mappings granted to holders of this role, when expanded.","items":{"$ref":"#/components/schemas/ApiAccessRoleMapping"},"type":["null","array"]},"createdBy":{"$ref":"#/components/schemas/ApiAccount"},"createdDate":{"description":"Date and time this role was created.","format":"date-time","type":"string"},"description":{"description":"Description of the role.","type":"string"},"displayName":{"description":"Human-readable display name.","type":"string"},"id":{"description":"Unique identifier of the role.","format":"uuid","type":"string"},"name":{"description":"Name of the role.","type":"string"},"system":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiSimpleSystem"}]},"updatedBy":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiAccount"}]},"updatedDate":{"description":"Date and time this role was last updated, if any. Omitted when null.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiRoleAssignment":{"description":"Represents an assignment of a role to an account.","properties":{"assignedTo":{"$ref":"#/components/schemas/ApiAccount"},"externalIdentifier":{"description":"Identifier in the originating system, if any.","type":["null","string"]},"id":{"description":"Unique identifier of the role assignment.","format":"uuid","type":"string"},"reason":{"description":"Reason for the assignment.","type":"string"},"role":{"$ref":"#/components/schemas/ApiSimpleRole"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiRoleScope"}]},"source":{"description":"The origin system that created this assignment, if any.","type":["null","string"]},"tags":{"description":"Labels attached to the assignment.","items":{"type":"string"},"type":"array"},"type":{"description":"Assignment type (e.g. \"Direct\" or \"Inherited\").","type":"string"},"validFrom":{"description":"Date from which the assignment is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which the assignment is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiRoleBindingConfiguration":{"description":"Represents a role binding configuration that maps an external source system to role assignments.","properties":{"binding":{"additionalProperties":{"items":{"items":{},"type":"array"},"type":"array"},"description":"Binding configuration payload. Shape depends on .","type":"object"},"description":{"description":"Description of this binding configuration.","type":"string"},"id":{"description":"Unique identifier of the role binding configuration.","format":"uuid","type":"string"},"identifier":{"description":"Human-readable identifier for this binding configuration.","type":"string"},"isDeleted":{"description":"Whether this binding configuration has been soft-deleted.","type":"boolean"},"reason":{"description":"Reason this binding was created.","type":"string"},"sourceSystem":{"description":"The source system that manages this binding.","type":"string"},"system":{"description":"The system this binding belongs to.","type":"string"},"type":{"description":"Binding type (e.g. \"EntraGroup\" or \"OrgChart\").","type":"string"},"version":{"description":"Schema version of the binding configuration.","type":"string"}},"type":"object"},"ApiRoleBindingConfigurationStatus":{"description":"Represents the execution status of a role binding configuration.","properties":{"createdDate":{"description":"Date and time the status record was created.","format":"date-time","type":"string"},"errorMessage":{"description":"Error message if the last execution failed, if any.","type":["null","string"]},"id":{"description":"Unique identifier of the status record.","format":"uuid","type":"string"},"identifier":{"description":"Identifier of the associated role binding configuration.","type":"string"},"status":{"description":"Current status (e.g. \"Pending\", \"Active\", \"Failed\").","type":"string"},"updatedDate":{"description":"Date and time the status was last updated, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ApiRoleScope":{"description":"Scope restricting the assignment, if any. Omitted when null.","properties":{"isGlobal":{"description":"Whether this is a global (non-scoped) assignment.","type":"boolean"},"scopeTypeIdentifier":{"description":"Scope type identifier (e.g. \"project\", \"contract\"), if any.","type":["null","string"]},"value":{"description":"Scope value, if any.","type":["null","string"]}},"required":["isGlobal","value"],"type":"object"},"ApiScope":{"description":"Scope restricting the assignment, if any. Omitted when null.","properties":{"isGlobal":{"description":"Whether this is a global (non-scoped) assignment.","type":"boolean"},"type":{"description":"Scope type identifier (e.g. \"project\", \"contract\"), if any.","type":["null","string"]},"value":{"description":"Scope value, if any.","type":["null","string"]}},"required":["isGlobal","value"],"type":"object"},"ApiScopeType":{"description":"Represents a scope type that categorises assignments (e.g. project, contract, system).","properties":{"description":{"description":"Description of the scope type, if any.","type":["null","string"]},"id":{"description":"Unique identifier of the scope type.","format":"uuid","type":"string"},"name":{"description":"Name of the scope type.","type":"string"}},"type":"object"},"ApiScopeValues":{"description":"Resolved scope values for this assignment, if any.","properties":{"isGlobal":{"description":"Whether the assignment is global (not restricted to a specific entity).","type":"boolean"},"type":{"description":"Scope type identifier (e.g. \"project\", \"contract\"), if any.","type":["null","string"]},"values":{"description":"Resolved scope values (e.g. project IDs or contract IDs), if any.","items":{"type":"string"},"type":["null","array"]}},"required":["values"],"type":"object"},"ApiSimpleClaimableRole":{"description":"The claimable role that is assigned.","properties":{"accessRoleMappings":{"description":"Access role mappings granted when this claimable role is activated, if expanded.","items":{"$ref":"#/components/schemas/ApiClaimableAccessRoleMapping"},"type":["null","array"]},"description":{"description":"Description of the claimable role.","type":"string"},"displayName":{"description":"Human-readable display name of the claimable role.","type":"string"},"id":{"description":"Unique identifier of the claimable role.","format":"uuid","type":"string"},"name":{"description":"Name of the claimable role.","type":"string"},"system":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiSimpleSystem"}]}},"type":"object"},"ApiSimpleClaimableRoleAssignment":{"description":"The claimable role assignment that triggered this access role assignment, if any. Omitted when null.","properties":{"claimableRole":{"$ref":"#/components/schemas/ApiSimpleClaimableRole"},"id":{"description":"Unique identifier of the claimable role assignment.","format":"uuid","type":"string"}},"type":"object"},"ApiSimpleRole":{"description":"The role that is assigned.","properties":{"description":{"description":"Description of the role.","type":"string"},"displayName":{"description":"Human-readable display name of the role.","type":"string"},"id":{"description":"Unique identifier of the role.","format":"uuid","type":"string"},"name":{"description":"Name of the role.","type":"string"},"system":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ApiSimpleSystem"}]}},"type":"object"},"ApiSimpleRoleAssignment":{"description":"The role assignment that triggered this access role assignment, if any. Omitted when null.","properties":{"id":{"description":"Unique identifier of the role assignment.","format":"uuid","type":"string"},"role":{"$ref":"#/components/schemas/ApiSimpleRole"}},"type":"object"},"ApiSimpleSystem":{"description":"The system this role belongs to, if any.","properties":{"id":{"description":"Unique identifier of the system.","format":"uuid","type":"string"},"name":{"description":"Name of the system.","type":"string"}},"type":"object"},"ApiSubscriptionType":{"enum":["Transient","Persistent"],"type":"string"},"ApiSystem":{"description":"Represents a system with its owners.","properties":{"description":{"description":"Description of the system.","type":"string"},"id":{"description":"Unique identifier of the system.","format":"uuid","type":"string"},"name":{"description":"Name of the system.","type":"string"},"owners":{"description":"Owners of the system.","items":{"$ref":"#/components/schemas/ApiOwner"},"type":"array"}},"type":"object"},"AssignAccessRoleRequest":{"description":"Request body for assigning an access role to an account.","properties":{"accountIdentifier":{"description":"Identifier of the account to assign the access role to (mail or Azure unique ID).","type":"string"},"externalIdentifier":{"description":"Identifier in the originating system.","type":"string"},"reason":{"description":"Reason for the assignment.","type":"string"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/Scope"}]},"source":{"description":"The origin system creating this assignment.","type":"string"},"tags":{"description":"Labels to attach to the assignment, if any.","items":{"type":"string"},"type":["null","array"]},"type":{"description":"Assignment type (\"Direct\" or \"Inherited\").","type":"string"},"validFrom":{"description":"Date from which the assignment is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which the assignment is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"AssignClaimableRoleRequest":{"description":"Request body for assigning a claimable role to an account.","properties":{"accountIdentifier":{"description":"Identifier of the account to assign the claimable role to (mail or Azure unique ID).","type":"string"},"externalIdentifier":{"description":"Identifier in the originating system, if any.","type":["null","string"]},"reason":{"description":"Reason for the assignment.","type":"string"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/RequestClaimableRoleScope"}]},"source":{"description":"The origin system creating this assignment, if any.","type":["null","string"]},"tags":{"description":"Labels to attach to the assignment, if any.","items":{"type":"string"},"type":["null","array"]},"type":{"description":"Assignment type (\"Direct\" or \"Inherited\"). Inferred from if omitted.","type":["null","string"]},"validFrom":{"description":"Date from which the assignment is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which the assignment is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"AssignRoleRequest":{"description":"Request body for assigning a role to an account.","properties":{"accountIdentifier":{"description":"Identifier of the account to assign the role to (mail or Azure unique ID).","type":"string"},"externalIdentifier":{"description":"Identifier in the originating system, if any.","type":["null","string"]},"reason":{"description":"Reason for the assignment.","type":"string"},"scope":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/RequestRoleScope"}]},"source":{"description":"The origin system creating this assignment, if any.","type":["null","string"]},"tags":{"description":"Labels to attach to the assignment, if any.","items":{"type":"string"},"type":["null","array"]},"type":{"description":"Assignment type (\"Direct\" or \"Inherited\"). Inferred from if omitted.","type":["null","string"]},"validFrom":{"description":"Date from which the assignment is valid, if any.","format":"date-time","type":["null","string"]},"validTo":{"description":"Date until which the assignment is valid, if any.","format":"date-time","type":["null","string"]}},"type":"object"},"ClaimableRoleBinding":{"description":"A claimable role to assign when the EntraGroup binding is reconciled.","properties":{"name":{"description":"Claimable role name.","type":"string"},"scope":{"$ref":"#/components/schemas/ScopeBinding"},"type":{"description":"\"Scoped\" or \"Global\".","type":["null","string"]}},"required":["name"],"type":"object"},"CreateAccessRoleRequest":{"description":"Request body for creating a new access role.","properties":{"description":{"description":"Description of the access role.","type":"string"},"name":{"description":"Name of the access role (URL-safe characters only).","type":"string"},"scopeTypeIdentifier":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ScopeTypeIdentifier"}]}},"type":"object"},"CreateBindingExecutionRecordRequest":{"description":"Request body for recording a role binding execution run.","properties":{"assignedUserIds":{"description":"IDs of users who received assignments during this execution.","items":{"format":"uuid","type":"string"},"type":"array"},"claimableRolesAffected":{"description":"Names of claimable roles affected during this execution.","items":{"type":"string"},"type":"array"},"errorMessage":{"description":"Error message if the execution failed, if any.","type":["null","string"]},"executedAt":{"description":"Date and time the execution ran (must not be in the future).","format":"date-time","type":"string"},"metadata":{"description":"Optional JSON metadata about the execution.","type":["null","string"]},"outcome":{"description":"Outcome of the execution (e.g. \"Success\", \"Failed\").","type":"string"},"removedUserIds":{"description":"IDs of users whose assignments were removed during this execution.","items":{"format":"uuid","type":"string"},"type":"array"},"rolesAffected":{"description":"Names of roles affected during this execution.","items":{"type":"string"},"type":"array"},"triggerType":{"description":"What triggered the execution (e.g. \"Scheduled\", \"Manual\").","type":"string"}},"type":"object"},"CreateBindingExecutionRecordResponse":{"description":"Response model for creating a binding execution record.","properties":{"id":{"description":"The ID of the newly created execution record.","format":"uuid","type":"string"}},"type":"object"},"CreateBindingNotificationRecordRequest":{"description":"Request body for recording a binding notification event received from an external source.","properties":{"errorMessage":{"description":"Error message if processing failed, if any.","type":["null","string"]},"metadata":{"description":"Optional JSON metadata about the notification.","type":["null","string"]},"notificationType":{"description":"Type of notification event.","type":"string"},"processingResult":{"description":"Result of processing the notification (e.g. \"Processed\", \"Ignored\").","type":"string"},"receivedAt":{"description":"Date and time the notification was received (must not be in the future).","format":"date-time","type":"string"}},"type":"object"},"CreateBindingNotificationRecordResponse":{"description":"Response model for creating a binding notification record.","properties":{"id":{"description":"The ID of the newly created notification record.","format":"uuid","type":"string"}},"type":"object"},"CreateClaimableRoleRequest":{"description":"Request body for creating a new claimable role.","properties":{"accessRoleMappings":{"description":"Access role mappings granted when this claimable role is activated. At least one required.","items":{"$ref":"#/components/schemas/AccessRoleMapping"},"type":"array"},"description":{"description":"Description of the claimable role.","type":"string"},"displayName":{"description":"Human-readable display name.","type":"string"},"name":{"description":"Name of the claimable role (URL-safe characters only).","type":"string"},"systemIdentifier":{"description":"Identifier of the system this claimable role belongs to, if any.","type":["null","string"]}},"type":"object"},"CreateRoleBindingConfigurationRequest":{"description":"Request body for creating a new role binding configuration.","properties":{"binding":{"description":"Binding configuration. Shape depends on the `type` field:\n\n- `EntraGroup` — use the **EntraGroupBinding** schema (Entra ID group with roles and claimable roles)\n- `OrgChart` — use the **OrgChartBinding** schema (position-based rule profiles)","oneOf":[{"$ref":"#/components/schemas/EntraGroupBinding"},{"$ref":"#/components/schemas/OrgChartBinding"}],"type":["null","object"]},"description":{"description":"Description of this binding configuration.","type":"string"},"identifier":{"description":"Human-readable identifier for this binding configuration.","type":"string"},"reason":{"description":"Reason this binding is being created.","type":"string"},"sourceSystem":{"description":"Name of the source system that will manage this binding.","type":"string"},"system":{"description":"Name of the system this binding belongs to.","type":"string"},"type":{"description":"Binding type — \"EntraGroup\" or \"OrgChart\".","type":"string"},"version":{"description":"Schema version of the binding (e.g. \"1.0\").","type":"string"}},"type":"object"},"CreateRoleRequest":{"description":"Request body for creating a new role.","properties":{"accessRoleMappings":{"description":"Access role mappings granted to holders of this role.","items":{"$ref":"#/components/schemas/AccessRoleMapping"},"type":"array"},"description":{"description":"Description of the role.","type":"string"},"displayName":{"description":"Human-readable display name.","type":"string"},"name":{"description":"Name of the role (URL-safe characters only).","type":"string"},"systemIdentifier":{"description":"Identifier of the system this role belongs to, if any.","type":["null","string"]}},"type":"object"},"CreateScopeTypeRequest":{"description":"Request body for creating a new scope type.","properties":{"description":{"description":"Description of the scope type.","type":"string"},"name":{"description":"Name of the scope type (URL-safe characters only).","type":"string"}},"type":"object"},"DeleteRoleAssignmentsRequest":{"description":"Request body for bulk-deleting role assignments.","properties":{"roleAssignmentIds":{"description":"IDs of role assignments to delete. At least one and at most 100 required.","items":{"format":"uuid","type":"string"},"type":"array"}},"type":"object"},"EntraGroup":{"description":"Reference to an Entra ID (Azure AD) group.","properties":{"id":{"description":"Azure AD group object ID.","format":"uuid","type":"string"},"name":{"description":"Display name of the group.","type":["null","string"]}},"required":["id"],"type":"object"},"EntraGroupBinding":{"description":"Binding configuration for an Entra ID (Azure AD) group. Maps group membership to role and claimable-role assignments.","properties":{"claimableRoles":{"description":"Claimable roles to offer to members of the group.","items":{"$ref":"#/components/schemas/ClaimableRoleBinding"},"type":["null","array"]},"group":{"$ref":"#/components/schemas/EntraGroup"},"roles":{"description":"Roles to assign to members of the group.","items":{"$ref":"#/components/schemas/RoleBinding"},"type":["null","array"]},"version":{"description":"Schema version (e.g. \"1.0\").","type":"string"}},"required":["version","group"],"type":"object"},"ExpressionType":{"enum":["Empty","Group","FilterValue"],"type":"string"},"ForbiddenItem":{"properties":{"accessRequirements":{"items":{"$ref":"#/components/schemas/AccessRequirement"},"type":"array"},"code":{"type":"string"},"message":{"type":"string"}},"required":["code","message","accessRequirements"],"type":"object"},"FusionForbiddenResponse":{"properties":{"error":{"$ref":"#/components/schemas/ForbiddenItem"}},"required":["error"],"type":"object"},"IdentifierType":{"enum":["UniqueId","Mail"],"type":"string"},"ODataExpandItem":{"additionalProperties":false,"properties":{"field":{"type":["null","string"]},"hasSelect":{"readOnly":true,"type":"boolean"},"select":{"items":{"type":"string"},"type":["null","array"]}},"type":"object"},"ODataExpression":{"additionalProperties":false,"properties":{"hasFilters":{"readOnly":true,"type":"boolean"},"type":{"$ref":"#/components/schemas/ExpressionType"}},"type":"object"},"ODataOrderByOption":{"additionalProperties":false,"properties":{"direction":{"$ref":"#/components/schemas/SortDirection"},"field":{"type":["null","string"]}},"type":"object"},"ODataQueryParams":{"additionalProperties":false,"properties":{"expand":{"items":{"$ref":"#/components/schemas/ODataExpandItem"},"type":["null","array"]},"filter":{"$ref":"#/components/schemas/ODataExpression"},"hasExpand":{"readOnly":true,"type":"boolean"},"hasExpandSelect":{"readOnly":true,"type":"boolean"},"hasFilter":{"readOnly":true,"type":"boolean"},"hasOrderBy":{"readOnly":true,"type":"boolean"},"hasSearch":{"readOnly":true,"type":"boolean"},"hasSelect":{"readOnly":true,"type":"boolean"},"isEmpty":{"readOnly":true,"type":"boolean"},"orderBy":{"items":{"$ref":"#/components/schemas/ODataOrderByOption"},"type":["null","array"]},"search":{"type":["null","string"]},"select":{"items":{"type":"string"},"type":["null","array"]},"skip":{"format":"int32","type":["null","integer"]},"top":{"format":"int32","type":["null","integer"]}},"type":"object"},"OrgChartAssignEntry":{"description":"A role or claimable-role assignment produced by a matching OrgChart rule.","properties":{"name":{"description":"Role or claimable role name.","type":"string"},"scope":{"$ref":"#/components/schemas/OrgChartScope"},"type":{"description":"\"Scoped\" or \"Global\".","type":["null","string"]}},"required":["name"],"type":"object"},"OrgChartAssignment":{"description":"Roles and claimable roles assigned when an OrgChart rule matches.","properties":{"claimableRoles":{"description":"Claimable roles to offer for self-assignment when the rule matches.","items":{"$ref":"#/components/schemas/OrgChartAssignEntry"},"type":["null","array"]},"roles":{"description":"Roles to assign directly when the rule matches.","items":{"$ref":"#/components/schemas/OrgChartAssignEntry"},"type":["null","array"]}},"type":"object"},"OrgChartBinding":{"description":"Binding configuration for position-based org chart rules. Maps org chart positions to role assignments via configurable profiles.","properties":{"context":{"$ref":"#/components/schemas/OrgChartContext"},"profiles":{"description":"One or more profiles, each containing rules that map positions to role assignments.","items":{"$ref":"#/components/schemas/OrgChartProfile"},"type":"array"},"syncInterval":{"description":"How frequently the binding is reconciled. \"nightly\" or \"hourly\". Defaults to \"nightly\".","type":["null","string"]},"version":{"description":"Schema version (e.g. \"1.0\").","type":"string"}},"required":["version","profiles"],"type":"object"},"OrgChartContext":{"description":"Optional context settings controlling how positions are resolved during OrgChart binding reconciliation.","properties":{"allowLegacyPmtFallback":{"description":"When true, positions whose ParentPositionId equals the DirectorPositionId are treated as PMT members even when IsProjectManagementTeam is false.","type":"boolean"},"orgProjectIds":{"description":"When set, only these org project IDs are processed. When null or empty, all org projects are processed.","items":{"format":"uuid","type":"string"},"type":["null","array"]},"projectResolver":{"description":"How the target project is resolved. \"ProjectMaster\" resolves via the Fusion Context API; \"OrgProjectId\" uses the org project ID directly.","type":["null","string"]}},"type":["null","object"]},"OrgChartMatchCriteria":{"description":"Criteria for selecting org chart positions to apply an OrgChart rule to.","properties":{"basePositionIds":{"description":"Required when match is \"BasePositionId\". One or more base position IDs to match.","items":{"format":"uuid","type":"string"},"type":["null","array"]},"match":{"description":"How positions are selected. Valid values: \"BasePositionId\", \"ProjectDirector\", \"PmtMember\", \"ProjectMember\".","type":"string"}},"required":["match"],"type":"object"},"OrgChartProfile":{"description":"A named collection of OrgChart rules evaluated independently during binding reconciliation.","properties":{"name":{"description":"Human-readable label used in diagnostics and audit.","type":"string"},"rules":{"description":"Rules evaluated independently within this profile.","items":{"$ref":"#/components/schemas/OrgChartRule"},"type":"array"}},"required":["name"],"type":"object"},"OrgChartRule":{"description":"A single matching rule within an OrgChart profile.","properties":{"assign":{"$ref":"#/components/schemas/OrgChartAssignment"},"when":{"$ref":"#/components/schemas/OrgChartMatchCriteria"}},"required":["when","assign"],"type":"object"},"OrgChartScope":{"description":"Scope applied to a role or claimable-role assignment produced by the OrgChart binding.","properties":{"isGlobal":{"description":"When true, the assignment applies globally rather than to a specific entity instance.","type":"boolean"},"scopeTypeIdentifier":{"description":"Scope type (e.g. \"project\", \"contract\", \"system\").","type":"string"},"valueTemplate":{"description":"Template for the scope value. Supported placeholders: {projectMasterId}, {orgProjectId}, {contractId}.","type":"string"}},"required":["scopeTypeIdentifier","valueTemplate"],"type":"object"},"OwnerInfo":{"description":"Identifies a system owner and the reason for their ownership.","properties":{"accountIdentifier":{"$ref":"#/components/schemas/AccountIdentifier"},"reason":{"description":"Reason this account is an owner of the system.","type":"string"}},"type":"object"},"PatchPropertyOfDateTimeOffset":{"description":"New ValidTo date, when provided.","format":"date-time","type":["null","string"]},"PatchPropertyOfListOfOwnerInfo":{"description":"New owner list, when provided.","oneOf":[{"type":"null"},{"items":{"$ref":"#/components/schemas/OwnerInfo"},"type":"array"}]},"PatchPropertyOfObject":{"description":"New binding payload, when provided. Shape depends on the effective .","oneOf":[{"type":"null"},{}]},"PatchPropertyOfstring":{"description":"New description, when provided.","type":["null","string"]},"ProblemDetails":{"properties":{"detail":{"type":["null","string"]},"instance":{"type":["null","string"]},"status":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["null","integer","string"]},"title":{"type":["null","string"]},"type":{"type":["null","string"]}},"type":"object"},"RegisterSystemRequest":{"description":"Request body for registering a new system.","properties":{"description":{"description":"Description of the system.","type":"string"},"name":{"description":"Name of the system (URL-safe characters only).","type":"string"},"owners":{"description":"Initial owners of the system.","items":{"$ref":"#/components/schemas/OwnerInfo"},"type":"array"}},"type":"object"},"RequestClaimableRoleScope":{"description":"Scope restricting the assignment, if any.","properties":{"isGlobal":{"description":"Whether this is a global (non-scoped) assignment.","type":["null","boolean"]},"scopeTypeIdentifier":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ScopeTypeIdentifier"}]},"value":{"description":"Scope value, if any.","type":["null","string"]}},"type":"object"},"RequestRoleScope":{"description":"Scope restricting the assignment, if any.","properties":{"isGlobal":{"description":"Whether this is a global (non-scoped) assignment.","type":["null","boolean"]},"scopeTypeIdentifier":{"oneOf":[{"type":"null"},{"$ref":"#/components/schemas/ScopeTypeIdentifier"}]},"value":{"description":"Scope value, if any.","type":["null","string"]}},"type":"object"},"RoleBinding":{"description":"A role to assign when the EntraGroup binding is reconciled.","properties":{"name":{"description":"Role name.","type":"string"},"scope":{"$ref":"#/components/schemas/ScopeBinding"},"type":{"description":"\"Scoped\" or \"Global\".","type":["null","string"]}},"required":["name"],"type":"object"},"Scope":{"description":"Scope restricting the assignment, if any.","properties":{"isGlobal":{"description":"Whether this is a global (non-scoped) assignment.","type":["null","boolean"]},"type":{"description":"Scope type identifier (e.g. \"project\", \"contract\"), if any.","type":["null","string"]},"value":{"description":"Scope value, if any.","type":["null","string"]}},"type":"object"},"ScopeBinding":{"description":"Scope restriction for a role or claimable-role assignment.","properties":{"isGlobal":{"description":"When true, the assignment applies globally without a scope value.","type":["null","boolean"]},"scopeTypeIdentifier":{"description":"Scope type identifier (e.g. \"project\", \"contract\", \"system\").","type":["null","string"]},"value":{"description":"Scope value (e.g. a project ID or contract ID).","type":["null","string"]}},"type":["null","object"]},"ScopeTypeIdentifier":{"description":"Id or name","type":"string"},"SortDirection":{"enum":["asc","desc"],"type":"string"},"SubscriptionRequestV1":{"properties":{"id":{"format":"uuid","type":["null","string"]},"identifier":{"type":["null","string"]},"type":{"$ref":"#/components/schemas/ApiSubscriptionType"},"typeFilter":{"items":{"type":"string"},"type":["null","array"]}},"type":"object"},"UpdateAccessRoleAssignmentRequest":{"description":"Patch request body for updating an access role assignment.","properties":{"validTo":{"$ref":"#/components/schemas/PatchPropertyOfDateTimeOffset"}},"type":"object"},"UpdateAccessRoleRequest":{"description":"Patch request body for updating an access role.","properties":{"description":{"$ref":"#/components/schemas/PatchPropertyOfstring"}},"type":"object"},"UpdateClaimableRoleAssignmentRequest":{"description":"Patch request body for updating a claimable role assignment.","properties":{"validTo":{"$ref":"#/components/schemas/PatchPropertyOfDateTimeOffset"}},"type":"object"},"UpdateClaimableRoleRequest":{"description":"Patch request body for updating a claimable role.","properties":{"description":{"$ref":"#/components/schemas/PatchPropertyOfstring"},"displayName":{"$ref":"#/components/schemas/PatchPropertyOfstring"},"systemIdentifier":{"$ref":"#/components/schemas/PatchPropertyOfstring"}},"type":"object"},"UpdateRoleAssignmentRequest":{"description":"Patch request body for updating a role assignment.","properties":{"validTo":{"$ref":"#/components/schemas/PatchPropertyOfDateTimeOffset"}},"type":"object"},"UpdateRoleBindingConfigurationRequest":{"description":"Patch request body for updating a role binding configuration.","properties":{"binding":{"$ref":"#/components/schemas/PatchPropertyOfObject"},"description":{"$ref":"#/components/schemas/PatchPropertyOfstring"},"reason":{"$ref":"#/components/schemas/PatchPropertyOfstring"},"sourceSystem":{"$ref":"#/components/schemas/PatchPropertyOfstring"},"system":{"$ref":"#/components/schemas/PatchPropertyOfstring"},"type":{"$ref":"#/components/schemas/PatchPropertyOfstring"}},"type":"object"},"UpdateRoleBindingConfigurationStatusRequest":{"description":"Request body for updating the status of a role binding configuration.","properties":{"errorMessage":{"description":"Error message to associate with the status, if any.","type":["null","string"]},"status":{"description":"New status value (e.g. \"Active\", \"Pending\", \"Failed\").","type":"string"}},"type":"object"},"UpdateRoleRequest":{"description":"Patch request body for updating a role.","properties":{"description":{"$ref":"#/components/schemas/PatchPropertyOfstring"},"displayName":{"$ref":"#/components/schemas/PatchPropertyOfstring"},"systemIdentifier":{"$ref":"#/components/schemas/PatchPropertyOfstring"}},"type":"object"},"UpdateScopeRequest":{"description":"Patch request body for updating a scope type.","properties":{"description":{"$ref":"#/components/schemas/PatchPropertyOfstring"}},"type":"object"},"UpdateSystemRequest":{"description":"Patch request body for updating a system.","properties":{"description":{"$ref":"#/components/schemas/PatchPropertyOfstring"},"owners":{"$ref":"#/components/schemas/PatchPropertyOfListOfOwnerInfo"}},"type":"object"},"ValidationProblemDetails":{"properties":{"detail":{"type":["null","string"]},"errors":{"additionalProperties":{"items":{"type":"string"},"type":"array"},"type":"object"},"instance":{"type":["null","string"]},"status":{"format":"int32","pattern":"^-?(?:0|[1-9]\\d*)$","type":["null","integer","string"]},"title":{"type":["null","string"]},"type":{"type":["null","string"]}},"type":"object"}},"securitySchemes":{"oauth2":{"description":"Azure Active Directory","flows":{"authorizationCode":{"authorizationUrl":"https://login.microsoftonline.com/3aa4a235-b6e2-48d5-9195-7fcf05b459b0/oauth2/v2.0/authorize","scopes":{"5a842df8-3238-415d-b168-9f16a6a6031b/.default":"Read"},"tokenUrl":"https://login.microsoftonline.com/3aa4a235-b6e2-48d5-9195-7fcf05b459b0/oauth2/v2.0/token"}},"type":"oauth2"}}},"info":{"description":"API for Fusion Roles as a Service. [Docs](https://docs.fusion.equinor.com/docs/developer/api/role-service/)","title":"Fusion Roles V2 API","version":"1.0"},"openapi":"3.1.1","paths":{"/access-roles":{"get":{"parameters":[{"description":"Filter collection to only return items where expression evaluates to true.\n\n_Operations:_ eq, neq, not, gt, lt, lteq, ge, gteq, le, =, ==, !=, >, >=, <, <=, in, startswith, endswith, contains\n\n_Logical operators:_ and, &&, or, ||\n\n_Grouping:_ ()\n\n__Supported properties:__\n\n* scopeType.Id\n\n_Examples:_\n```someProperty eq 'someValue'```\n```someProperty in ('someValue', 'anotherValue')```","in":"query","name":"$filter","schema":{"type":"string"}},{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiExtendedAccessRole"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get all access roles.","tags":["Global"]}},"/accounts/{accountIdentifier}/access-role-assignments":{"get":{"parameters":[{"description":"The account identifier (Azure unique ID or email)","in":"path","name":"accountIdentifier","required":true,"schema":{"type":"string"}},{"description":"Filter collection to only return items where expression evaluates to true.\n\n_Operations:_ eq, neq, not, gt, lt, lteq, ge, gteq, le, =, ==, !=, >, >=, <, <=, in, startswith, endswith, contains\n\n_Logical operators:_ and, &&, or, ||\n\n_Grouping:_ ()\n\n__Supported properties:__\n\n* validFrom\n\n* scope.value\n\n* scope.type\n\n* source\n\n* externalIdentifier\n\n_Examples:_\n```someProperty eq 'someValue'```\n```someProperty in ('someValue', 'anotherValue')```","in":"query","name":"$filter","schema":{"type":"string"}},{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"description":"Comma separated list of properties to include.\n\n__Supported properties:__\n\n* roleAssignment\n\n* claimableRoleAssignment\n\n_Example:_\n`someProperty, anotherProperty`","in":"query","name":"$expand","schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiAccountAccessRoleAssignment"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get all access role assignments for an account.","tags":["Accounts"]}},"/accounts/{accountIdentifier}/active-access-role-assignments":{"get":{"parameters":[{"description":"The account identifier (Azure unique ID or email)","in":"path","name":"accountIdentifier","required":true,"schema":{"type":"string"}},{"description":"Filter collection to only return items where expression evaluates to true.\n\n_Operations:_ eq, neq, not, gt, lt, lteq, ge, gteq, le, =, ==, !=, >, >=, <, <=, in, startswith, endswith, contains\n\n_Logical operators:_ and, &&, or, ||\n\n_Grouping:_ ()\n\n__Supported properties:__\n\n* systemName\n\n_Examples:_\n```someProperty eq 'someValue'```\n```someProperty in ('someValue', 'anotherValue')```","in":"query","name":"$filter","schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/ApiAccountActiveAccessRoleAssignment"},"type":"array"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get active access role assignments for an account.","tags":["Accounts"]}},"/accounts/{accountIdentifier}/claimable-role-assignments":{"get":{"parameters":[{"description":"The account identifier (Azure unique ID or email)","in":"path","name":"accountIdentifier","required":true,"schema":{"type":"string"}},{"description":"Comma separated list of properties to include.\n\n__Supported properties:__\n\n* accessRoleMappings\n\n_Example:_\n`someProperty, anotherProperty`","in":"query","name":"$expand","schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiAccountClaimableRoleAssignment"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get all claimable role assignments for an account.","tags":["Accounts"]}},"/accounts/{accountIdentifier}/claimable-role-assignments/{claimableRoleAssignmentId}/activate":{"post":{"parameters":[{"description":"The account identifier (Azure unique ID or email)","in":"path","name":"accountIdentifier","required":true,"schema":{"type":"string"}},{"description":"The claimable role assignment ID","in":"path","name":"claimableRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActivateAssignedClaimableRoleRequest"}}},"required":true},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRoleAssignmentActivation"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Activate a claimable role assignment for an account.","tags":["Accounts"]}},"/accounts/{accountIdentifier}/claimable-role-assignments/{claimableRoleAssignmentId}/activations/{claimableRoleAssignmentActivationId}":{"get":{"parameters":[{"description":"The account identifier (Azure unique ID or email)","in":"path","name":"accountIdentifier","required":true,"schema":{"type":"string"}},{"description":"The claimable role assignment ID","in":"path","name":"claimableRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"description":"The claimable role assignment activation ID","in":"path","name":"claimableRoleAssignmentActivationId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRoleAssignmentActivation"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get a claimable role assignment activation by ID.","tags":["Accounts"]}},"/accounts/{accountIdentifier}/claimable-role-assignments/{claimableRoleAssignmentId}/deactivate":{"post":{"parameters":[{"description":"The account identifier (Azure unique ID or email)","in":"path","name":"accountIdentifier","required":true,"schema":{"type":"string"}},{"description":"The claimable role assignment ID","in":"path","name":"claimableRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRoleAssignmentActivation"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Deactivate a claimable role assignment for an account by setting the expiration date to now.","tags":["Accounts"]}},"/accounts/{accountIdentifier}/consolidated-claimable-role-assignments":{"get":{"parameters":[{"description":"The account identifier (Azure unique ID or email)","in":"path","name":"accountIdentifier","required":true,"schema":{"type":"string"}},{"description":"Comma separated list of properties to include.\n\n__Supported properties:__\n\n* assignments\n\n_Example:_\n`someProperty, anotherProperty`","in":"query","name":"$expand","schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/ApiConsolidatedClaimableRoleAssignment"},"type":"array"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get consolidated claimable role assignments for an account. Duplicate assignments for the same role, type and scope are merged into a single entry.","tags":["Accounts"]}},"/accounts/{accountIdentifier}/consolidated-role-assignments":{"get":{"parameters":[{"description":"The account identifier (Azure unique ID or email)","in":"path","name":"accountIdentifier","required":true,"schema":{"type":"string"}},{"description":"Comma separated list of properties to include.\n\n__Supported properties:__\n\n* assignments\n\n_Example:_\n`someProperty, anotherProperty`","in":"query","name":"$expand","schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/ApiConsolidatedRoleAssignment"},"type":"array"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get consolidated role assignments for an account. Duplicate assignments for the same role, type and scope are merged into a single entry.","tags":["Accounts"]}},"/accounts/{accountIdentifier}/role-assignments":{"get":{"parameters":[{"description":"The account identifier (Azure unique ID or email)","in":"path","name":"accountIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiAccountRoleAssignment"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get all role assignments for an account.","tags":["Accounts"]}},"/claimable-role-assignment-activations":{"get":{"parameters":[{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiExtendedClaimableRoleAssignmentActivation"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"}},"summary":"Get all claimable role assignment activations across the system.","tags":["Global"]}},"/claimable-role-assignments/{externalIdentifier}":{"delete":{"parameters":[{"description":"The external identifier used to identify the assignments to delete","in":"path","name":"externalIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete all claimable role assignments matching the provided external identifier across all claimable roles. This operation is idempotent — if no matching assignments exist, a 204 is still returned.","tags":["Global"]}},"/claimable-roles":{"get":{"parameters":[{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"description":"Comma separated list of properties to include.\n\n__Supported properties:__\n\n* accessRoleMappings\n\n_Example:_\n`someProperty, anotherProperty`","in":"query","name":"$expand","schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiClaimableRole"}}},"description":"OK"},"401":{"description":"Unauthorized"}},"summary":"Get all claimable roles.","tags":["Claimable Roles"]},"post":{"parameters":[{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateClaimableRoleRequest"}}}},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRole"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Create a new claimable role.","tags":["Claimable Roles"]}},"/claimable-roles/{claimableRoleIdentifier}":{"delete":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete a claimable role by identifier.","tags":["Claimable Roles"]},"get":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRole"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get a claimable role by identifier.","tags":["Claimable Roles"]},"patch":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateClaimableRoleRequest"}}}},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRole"}}},"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Update a claimable role by identifier.","tags":["Claimable Roles"]}},"/claimable-roles/{claimableRoleIdentifier}/access-roles":{"post":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AddClaimableRoleAccessRoleRequest"}}}},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRole"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Add one or more access role mappings to a claimable role.","tags":["Claimable Roles"]}},"/claimable-roles/{claimableRoleIdentifier}/access-roles/{accessRoleIdentifier}":{"delete":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete an access role mapping from a claimable role.","tags":["Claimable Roles"]}},"/claimable-roles/{claimableRoleIdentifier}/assignments":{"get":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"Filter collection to only return items where expression evaluates to true.\n\n_Operations:_ eq, neq, not, gt, lt, lteq, ge, gteq, le, =, ==, !=, >, >=, <, <=, in, startswith, endswith, contains\n\n_Logical operators:_ and, &&, or, ||\n\n_Grouping:_ ()\n\n__Supported properties:__\n\n* person.id\n\n* source\n\n* externalIdentifier\n\n* scope.type\n\n* scope.value\n\n_Examples:_\n```someProperty eq 'someValue'```\n```someProperty in ('someValue', 'anotherValue')```","in":"query","name":"$filter","schema":{"type":"string"}},{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiClaimableRoleAssignment"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get all claimable role assignments for a claimable role.","tags":["Claimable Roles - Assignments"]},"post":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AssignClaimableRoleRequest"}}},"required":true},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRoleAssignment"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Assign a claimable role to a user or application.","tags":["Claimable Roles - Assignments"]}},"/claimable-roles/{claimableRoleIdentifier}/assignments/{claimableRoleAssignmentId}":{"delete":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The claimable role assignment ID","in":"path","name":"claimableRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete a claimable role assignment by ID.","tags":["Claimable Roles - Assignments"]},"get":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The claimable role assignment ID","in":"path","name":"claimableRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRoleAssignment"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get a claimable role assignment by ID.","tags":["Claimable Roles - Assignments"]},"patch":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The claimable role assignment ID","in":"path","name":"claimableRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateClaimableRoleAssignmentRequest"}}},"required":true},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiClaimableRoleAssignment"}}},"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Update a claimable role assignment's valid to date.","tags":["Claimable Roles - Assignments"]}},"/claimable-roles/{claimableRoleIdentifier}/assignments/{claimableRoleAssignmentId}/activations":{"get":{"parameters":[{"description":"The claimable role identifier (role ID or name)","in":"path","name":"claimableRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The claimable role assignment ID","in":"path","name":"claimableRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiClaimableRoleAssignmentActivation"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get all activations for a claimable role assignment.","tags":["Claimable Roles - Assignments"]}},"/public/schemas/{type}":{"get":{"parameters":[{"description":"known type (currently supports: role-config.schema.json)","in":"path","name":"type","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Forbidden"}},"summary":"Returns a JSON schema for the specified type.","tags":["Public"]}},"/role-assignments/{externalIdentifier}":{"delete":{"parameters":[{"description":"The external identifier used to identify the assignments to delete","in":"path","name":"externalIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete all role assignments matching the provided external identifier across all roles. This operation is idempotent — if no matching assignments exist, a 204 is still returned.","tags":["Global"]}},"/role-binding-configurations":{"get":{"parameters":[{"description":"Whether to include deleted role binding configurations","in":"query","name":"includeDeleted","schema":{"default":false,"type":"boolean"}},{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/ApiRoleBindingConfiguration"},"type":"array"}}},"description":"OK"},"401":{"description":"Unauthorized"}},"summary":"Get all role binding configurations.","tags":["Role Binding Configurations"]},"post":{"parameters":[{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateRoleBindingConfigurationRequest"}}},"required":true},"responses":{"201":{"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"},"409":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Conflict"}},"summary":"Create a new role binding configuration.","tags":["Role Binding Configurations"]}},"/role-binding-configurations/history/expired":{"delete":{"parameters":[{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPurgeBindingResult"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"}},"summary":"Purge expired history and notification records beyond the retention window.","tags":["Role Binding Configurations"]}},"/role-binding-configurations/{identifier}":{"delete":{"parameters":[{"description":"The role binding configuration identifier (ID or name)","in":"path","name":"identifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete a role binding configuration by identifier.","tags":["Role Binding Configurations"]},"get":{"parameters":[{"description":"The role binding configuration identifier (ID or name)","in":"path","name":"identifier","required":true,"schema":{"type":"string"}},{"description":"Whether to include deleted role binding configurations","in":"query","name":"includeDeleted","schema":{"default":false,"type":"boolean"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRoleBindingConfiguration"}}},"description":"OK"},"401":{"description":"Unauthorized"}},"summary":"Get a role binding configuration by identifier.","tags":["Role Binding Configurations"]},"patch":{"parameters":[{"description":"The role binding configuration identifier (ID or name)","in":"path","name":"identifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateRoleBindingConfigurationRequest"}}},"required":true},"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Update a role binding configuration by identifier.","tags":["Role Binding Configurations"]}},"/role-binding-configurations/{identifier}/history":{"get":{"parameters":[{"description":"The role binding configuration identifier (ID or name)","in":"path","name":"identifier","required":true,"schema":{"type":"string"}},{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiBindingExecutionRecord"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get execution history for a role binding configuration. Returns a paginated list of sync execution records in descending order by execution time.","tags":["Role Binding Configurations"]},"post":{"parameters":[{"description":"The role binding configuration identifier (ID or name)","in":"path","name":"identifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateBindingExecutionRecordRequest"}}},"required":true},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateBindingExecutionRecordResponse"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Create an execution history record for a role binding configuration.","tags":["Role Binding Configurations"]}},"/role-binding-configurations/{identifier}/notifications":{"get":{"parameters":[{"description":"The role binding configuration identifier (ID or name)","in":"path","name":"identifier","required":true,"schema":{"type":"string"}},{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiBindingNotificationRecord"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get notification log for a role binding configuration. Returns a paginated list of notification records in descending order by received time.","tags":["Role Binding Configurations"]},"post":{"parameters":[{"description":"The role binding configuration identifier (ID or name)","in":"path","name":"identifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateBindingNotificationRecordRequest"}}},"required":true},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateBindingNotificationRecordResponse"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Create a notification log record for a role binding configuration.","tags":["Role Binding Configurations"]}},"/role-binding-configurations/{identifier}/status":{"get":{"parameters":[{"description":"The role binding configuration identifier (ID or name)","in":"path","name":"identifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRoleBindingConfigurationStatus"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get the status of a role binding configuration.","tags":["Role Binding Configurations"]},"patch":{"parameters":[{"description":"The role binding configuration identifier (ID or name)","in":"path","name":"identifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateRoleBindingConfigurationStatusRequest"}}},"required":true},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRoleBindingConfigurationStatus"}}},"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Create or update the status of a role binding configuration.","tags":["Role Binding Configurations"]}},"/roles":{"get":{"parameters":[{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"description":"Comma separated list of properties to include.\n\n__Supported properties:__\n\n* accessRoleMappings\n\n_Example:_\n`someProperty, anotherProperty`","in":"query","name":"$expand","schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiRole"}}},"description":"OK"},"401":{"description":"Unauthorized"}},"summary":"Get all roles.","tags":["Roles"]},"post":{"parameters":[{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateRoleRequest"}}}},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRole"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Create a new role.","tags":["Roles"]}},"/roles/{roleIdentifier}":{"delete":{"parameters":[{"description":"The role identifier (role ID or name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete a role by identifier.","tags":["Roles"]},"get":{"parameters":[{"description":"The role identifier (role ID or name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRole"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get a role by identifier.","tags":["Roles"]},"patch":{"parameters":[{"description":"The role identifier (role ID or name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateRoleRequest"}}}},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRole"}}},"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Update a role by identifier.","tags":["Roles"]}},"/roles/{roleIdentifier}/access-roles":{"post":{"parameters":[{"description":"The role identifier (role ID or role name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AddRoleAccessRoleRequest"}}}},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRole"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Add one or more access role mappings to a role.","tags":["Roles"]}},"/roles/{roleIdentifier}/access-roles/{accessRoleIdentifier}":{"delete":{"parameters":[{"description":"The role identifier (role ID or role name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (access role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete an access role from a role","tags":["Roles"]}},"/roles/{roleIdentifier}/assignments":{"get":{"parameters":[{"description":"The role identifier (role ID or role name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"description":"Filter collection to only return items where expression evaluates to true.\n\n_Operations:_ eq, neq, not, gt, lt, lteq, ge, gteq, le, =, ==, !=, >, >=, <, <=, in, startswith, endswith, contains\n\n_Logical operators:_ and, &&, or, ||\n\n_Grouping:_ ()\n\n__Supported properties:__\n\n* person.id\n\n* source\n\n* externalIdentifier\n\n* scope.type\n\n* scope.value\n\n_Examples:_\n```someProperty eq 'someValue'```\n```someProperty in ('someValue', 'anotherValue')```","in":"query","name":"$filter","schema":{"type":"string"}},{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiRoleAssignment"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get role assignments for a role.","tags":["Roles - Assignments"]},"post":{"parameters":[{"description":"The role identifier (role ID or role name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AssignRoleRequest"}}},"required":true},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRoleAssignment"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Assign a role assignment","tags":["Roles - Assignments"]}},"/roles/{roleIdentifier}/assignments/delete":{"post":{"parameters":[{"description":"The role identifier (role ID or role name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeleteRoleAssignmentsRequest"}}}},"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Batch delete role assignments by their IDs. A maximum of 100 role assignments can be deleted in a single request.","tags":["Roles - Assignments"]}},"/roles/{roleIdentifier}/assignments/{roleAssignmentId}":{"delete":{"parameters":[{"description":"The role identifier (role ID or role name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The role assignment ID","in":"path","name":"roleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete a role assignment by its ID","tags":["Roles - Assignments"]},"get":{"parameters":[{"description":"The role identifier (role ID or role name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The role assignment ID","in":"path","name":"roleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRoleAssignment"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get role assignment by role assignment ID.","tags":["Roles - Assignments"]},"patch":{"parameters":[{"description":"The role identifier (role ID or name)","in":"path","name":"roleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The role assignment ID","in":"path","name":"roleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateRoleAssignmentRequest"}}},"required":true},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiRoleAssignment"}}},"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Update a role assignment's valid to date.","tags":["Roles - Assignments"]}},"/scope-types":{"get":{"parameters":[{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/ApiScopeType"},"type":"array"}}},"description":"OK"},"401":{"description":"Unauthorized"}},"summary":"Get all scope types.","tags":["Scope Types"]},"post":{"parameters":[{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateScopeTypeRequest"}}},"required":true},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiScopeType"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"409":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Conflict"}},"summary":"Create a new scope type.","tags":["Scope Types"]}},"/scope-types/{scopeTypeIdentifier}":{"delete":{"parameters":[{"description":"The scope type identifier (scope type ID or name)","in":"path","name":"scopeTypeIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Delete a scope type by identifier.","tags":["Scope Types"]},"get":{"parameters":[{"description":"The scope type identifier (scope type ID or name)","in":"path","name":"scopeTypeIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiScopeType"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get a scope type by identifier.","tags":["Scope Types"]},"patch":{"parameters":[{"description":"The scope type identifier (scope type ID or name)","in":"path","name":"scopeTypeIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateScopeRequest"}}}},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiScopeType"}}},"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Update a scope type by identifier.","tags":["Scope Types"]}},"/subscriptions/roles-v2":{"put":{"parameters":[{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SubscriptionRequestV1"}}},"required":true},"responses":{"200":{"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Forbidden"}},"summary":"Create or renew a subscription to role service events.","tags":["Subscriptions"]}},"/systems":{"get":{"parameters":[{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiSystem"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get all systems.","tags":["Systems"]},"post":{"parameters":[{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/RegisterSystemRequest"}}}},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiSystem"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"409":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Conflict"}},"summary":"Create a new system.","tags":["Systems"]}},"/systems/{systemIdentifier}":{"delete":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"}},"summary":"Delete a system by identifier.","tags":["Systems"]},"get":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiSystem"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get a system by identifier.","tags":["Systems"]},"patch":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateSystemRequest"}}}},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiSystem"}}},"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Update an existing system.","tags":["Systems"]}},"/systems/{systemIdentifier}/access-roles":{"get":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/ApiAccessRole"},"type":"array"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get all access roles for a system.","tags":["Systems - Access Roles"]},"post":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateAccessRoleRequest"}}}},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiAccessRole"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Create an access role for a system.","tags":["Systems - Access Roles"]}},"/systems/{systemIdentifier}/access-roles/{accessRoleIdentifier}":{"delete":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (access role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"}},"summary":"Delete an access role from a system.","tags":["Systems - Access Roles"]},"get":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (access role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiAccessRole"}}},"description":"OK"},"401":{"description":"Unauthorized"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get an access role by identifier.","tags":["Systems - Access Roles"]},"patch":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (access role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateAccessRoleRequest"}}}},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiAccessRole"}}},"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Update an access role for a system.","tags":["Systems - Access Roles"]}},"/systems/{systemIdentifier}/access-roles/{accessRoleIdentifier}/assignments":{"get":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (access role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"Filter collection to only return items where expression evaluates to true.\n\n_Operations:_ eq, neq, not, gt, lt, lteq, ge, gteq, le, =, ==, !=, >, >=, <, <=, in, startswith, endswith, contains\n\n_Logical operators:_ and, &&, or, ||\n\n_Grouping:_ ()\n\n__Supported properties:__\n\n* validFrom\n\n* scope.value\n\n* scope.type\n\n* source\n\n* externalIdentifier\n\n_Examples:_\n```someProperty eq 'someValue'```\n```someProperty in ('someValue', 'anotherValue')```","in":"query","name":"$filter","schema":{"type":"string"}},{"description":"Specifies a non-negative integer n that limits the number of items returned from a collection.","in":"query","name":"$top","schema":{"format":"int32","maximum":100,"minimum":0,"type":"integer"}},{"description":"Specifies a non-negative integer n that excludes the first n items from the returned collection.","in":"query","name":"$skip","schema":{"format":"int32","minimum":0,"type":"integer"}},{"description":"Comma separated list of properties to include.\n\n__Supported properties:__\n\n* roleAssignment\n\n* claimableRoleAssignment\n\n_Example:_\n`someProperty, anotherProperty`","in":"query","name":"$expand","schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiPagedCollectionOfApiAccessRoleAssignment"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get all access role assignments for an access role.","tags":["Systems - Access Roles - Assignments"]},"post":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (access role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AssignAccessRoleRequest"}}},"required":true},"responses":{"201":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiAccessRoleAssignment"}}},"description":"Created"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Assign an access role to a user or application.","tags":["Systems - Access Roles - Assignments"]}},"/systems/{systemIdentifier}/access-roles/{accessRoleIdentifier}/assignments/{accessRoleAssignmentId}":{"delete":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (access role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role assignment ID","in":"path","name":"accessRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"204":{"description":"No Content"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}},"text/plain":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}},"text/plain":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"}},"summary":"Delete an access role assignment by ID.","tags":["Systems - Access Roles - Assignments"]},"get":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (access role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role assignment ID","in":"path","name":"accessRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"description":"Comma separated list of properties to include.\n\n__Supported properties:__\n\n* roleAssignment\n\n* claimableRoleAssignment\n\n_Example:_\n`someProperty, anotherProperty`","in":"query","name":"$expand","schema":{"type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiAccessRoleAssignment"}}},"description":"OK"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Get an access role assignment by ID.","tags":["Systems - Access Roles - Assignments"]},"patch":{"parameters":[{"description":"The system identifier (system ID or name)","in":"path","name":"systemIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role identifier (access role ID or name)","in":"path","name":"accessRoleIdentifier","required":true,"schema":{"type":"string"}},{"description":"The access role assignment ID","in":"path","name":"accessRoleAssignmentId","required":true,"schema":{"format":"uuid","type":"string"}},{"in":"query","name":"api-version","schema":{"default":"1.0","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateAccessRoleAssignmentRequest"}}},"required":true},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiAccessRoleAssignment"}}},"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"}}},"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FusionForbiddenResponse"}}},"description":"Forbidden"},"404":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"}}},"description":"Not Found"}},"summary":"Update an access role assignment's valid to date.","tags":["Systems - Access Roles - Assignments"]}}},"security":[{"oauth2":[]}],"servers":[{"url":"https://rolesv2.ci.api.fusion-dev.net/"}],"tags":[{"name":"Accounts"},{"name":"Claimable Roles"},{"name":"Claimable Roles - Assignments"},{"name":"Global"},{"name":"Public"},{"name":"Role Binding Configurations"},{"name":"Roles"},{"name":"Roles - Assignments"},{"name":"Scope Types"},{"name":"Subscriptions"},{"name":"Systems"},{"name":"Systems - Access Roles"},{"name":"Systems - Access Roles - Assignments"}]}