@sailpoint/api-client 2.2.20 → 2.2.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -202,7 +202,7 @@ var IntelligenceApiAxiosParamCreator = function (configuration) {
202
202
  });
203
203
  },
204
204
  /**
205
- * Requires tenant license idn:response-and-remediation. **Authentication and data segmentation** Intelligence forwards the caller JWT to downstream identity and search services (context client). Enriched results, including non-human identity resolution, are filtered to the caller\'s Data Segmentation visibility. **Caution:** Generic API Management API keys are not tied to a user identity. When Data Segmentation is enabled, API key authentication may fail or return incomplete data because downstream calls require a user context. Use a [personal access token](https://developer.sailpoint.com/docs/api/authentication/#generate-a-personal-access-token) or other user-scoped OAuth token. See [API keys](https://documentation.sailpoint.com/saas/help/common/api_keys.html) and [Data Segmentation](https://documentation.sailpoint.com/saas/help/segmentation/index.html). Resolves exactly one identity using a single SCIM-style filters expression. **Supported filters** | Filter field | Lookup mode | Notes | |---|---|---| | id eq | Human (+ optional non-human identity when feature-flagged) | Resolves human identities by id; when non-human resolution is enabled, a parallel non-human lookup runs. If both match different identities, returns HTTP 409. | | email eq | Human only | Human identity lookup by email only. | | opaqueIdentifier eq | Non-human identity only | Parallel nativeIdentity eq on machine-identities and machine-accounts, then name-prefix fallback on machine-accounts. Requires feature flag ISCRR-1905_NHI_TYPE_MACHINE_FILTER_ENABLED; when disabled, returns HTTP 400. | Single-clause filters only; composite and or expressions are rejected with HTTP 400. **identityGraph deep link** When the tenant has the idg:base license, Human and NHI aggregate responses may include `identityGraph.href`, a deep link into the Identity Graph UI for the resolved identity. Opening the link requires the **Identity Graph Read Only** user level. The link is omitted when the tenant lacks idg:base. **Human envelope (type Human)** Embeds the first page (10 items) of each enrichment slice. Each paged slice includes totalCount from upstream X-Total-Count when items is non-empty, and carries a next continuation URL when totalCount exceeds the items returned on this page. Slices are always present (empty uses items [] with no totalCount). privilegedAccess returns the full privileged-access result and never carries next or totalCount. When the tenant has idn:machine-identity-security, nonHumanIdentityOwnership is included with agents and applications categories; each category is a flat object with independently paged primaryOwned and secondaryOwned buckets, and optional message/reason when upstream ownership fetch fails for that category (reason UPSTREAM_UNAVAILABLE). When the tenant lacks that license, nonHumanIdentityOwnership is omitted. Continue ownership paging with GET .../non-human-identity-ownership/{category} and optional ownershipRole=primary|secondary (defaults to primary). If any enrichment upstream fails, the whole request fails with HTTP 500, except outliers (omitted when the tenant lacks the IDA-outliers license) and nonHumanIdentityOwnership category-level degrade (aggregate still returns HTTP 200). **Non-human identity envelope (type NHI)** Returns flat non-human identity fields at the top level plus correlated machine accounts on the aggregate and a derived block (isOrphaned, authorizedHumanIdentities, blastRadiusSummary). Omits Human-only slices (privilegedAccess, outliers, accessHistory, nonHumanIdentityOwnership). Account paging via child routes is not yet released. Opaque prefix resolution that deduplicates to one parent identity returns HTTP 200 with matchConfidence partial; multiple distinct parent identities return HTTP 409 with IDC_IDENTITY_AMBIGUOUS and candidate id and displayName values.
205
+ * Requires tenant license idn:response-and-remediation. **Caution:** When Data Segmentation is enabled, generic API Management API keys are not tied to a user identity and may fail or return incomplete data. Use a [personal access token](https://developer.sailpoint.com/docs/api/authentication/#generate-a-personal-access-token) or other user-scoped OAuth token. See [API keys](https://documentation.sailpoint.com/saas/help/common/api_keys.html) and [Data Segmentation](https://documentation.sailpoint.com/saas/help/segmentation/index.html). Resolves exactly one identity using a single SCIM-style filters expression. Returns an enriched Human or non-human identity (NHI) envelope. Single-clause filters only; unsupported fields or operators return HTTP 400.
206
206
  * @summary Get identity by filter
207
207
  * @param {string} filters Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: **id**: *eq* **email**: *eq* **opaqueIdentifier**: *eq*
208
208
  * @param {*} [axiosOptions] Override http request option.
@@ -282,16 +282,17 @@ var IntelligenceApiAxiosParamCreator = function (configuration) {
282
282
  });
283
283
  },
284
284
  /**
285
- * Continuation endpoint for a Human identity\'s `accounts.next` link. Returns one page of account rows for the supplied limit and offset values. Pass `count=true` to receive `X-Total-Count` (including `0` on empty pages). Not applicable to non-human identities (NHI accounts are returned on the NHI aggregate only). Requires tenant license idn:response-and-remediation.
285
+ * Continuation endpoint for `accounts.next`. Pass `count=true` for `X-Total-Count`. - Human (default): omit `isNHI` or set it to `false`. Slice object (`items`). - Non-human identity (NHI): set `isNHI=true` (required for NHI aggregate `accounts.next` links). Bare JSON array.
286
286
  * @summary List identity accounts
287
287
  * @param {string} id Non-empty identity id path segment for Intelligence sub-resources.
288
288
  * @param {number} [limit] Page size. Defaults to 250; values above 250 are rejected with 400.
289
289
  * @param {number} [offset] Zero-based page offset. Defaults to 0.
290
290
  * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored. Since requesting a total count can have a performance impact, it is recommended not to send **count=true** if that value will not be used. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
291
+ * @param {boolean} [isNHI] NHI accounts when `true` (bare array). Human accounts when omitted or `false` (slice object).
291
292
  * @param {*} [axiosOptions] Override http request option.
292
293
  * @throws {RequiredError}
293
294
  */
294
- getIntelIdentityAccountsV1: function (id, limit, offset, count, axiosOptions) {
295
+ getIntelIdentityAccountsV1: function (id, limit, offset, count, isNHI, axiosOptions) {
295
296
  if (axiosOptions === void 0) { axiosOptions = {}; }
296
297
  return __awaiter(_this, void 0, void 0, function () {
297
298
  var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
@@ -316,6 +317,9 @@ var IntelligenceApiAxiosParamCreator = function (configuration) {
316
317
  if (count !== undefined) {
317
318
  localVarQueryParameter['count'] = count;
318
319
  }
320
+ if (isNHI !== undefined) {
321
+ localVarQueryParameter['isNHI'] = isNHI;
322
+ }
319
323
  (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
320
324
  headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
321
325
  localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), axiosOptions.headers);
@@ -536,7 +540,7 @@ var IntelligenceApiFp = function (configuration) {
536
540
  });
537
541
  },
538
542
  /**
539
- * Requires tenant license idn:response-and-remediation. **Authentication and data segmentation** Intelligence forwards the caller JWT to downstream identity and search services (context client). Enriched results, including non-human identity resolution, are filtered to the caller\'s Data Segmentation visibility. **Caution:** Generic API Management API keys are not tied to a user identity. When Data Segmentation is enabled, API key authentication may fail or return incomplete data because downstream calls require a user context. Use a [personal access token](https://developer.sailpoint.com/docs/api/authentication/#generate-a-personal-access-token) or other user-scoped OAuth token. See [API keys](https://documentation.sailpoint.com/saas/help/common/api_keys.html) and [Data Segmentation](https://documentation.sailpoint.com/saas/help/segmentation/index.html). Resolves exactly one identity using a single SCIM-style filters expression. **Supported filters** | Filter field | Lookup mode | Notes | |---|---|---| | id eq | Human (+ optional non-human identity when feature-flagged) | Resolves human identities by id; when non-human resolution is enabled, a parallel non-human lookup runs. If both match different identities, returns HTTP 409. | | email eq | Human only | Human identity lookup by email only. | | opaqueIdentifier eq | Non-human identity only | Parallel nativeIdentity eq on machine-identities and machine-accounts, then name-prefix fallback on machine-accounts. Requires feature flag ISCRR-1905_NHI_TYPE_MACHINE_FILTER_ENABLED; when disabled, returns HTTP 400. | Single-clause filters only; composite and or expressions are rejected with HTTP 400. **identityGraph deep link** When the tenant has the idg:base license, Human and NHI aggregate responses may include `identityGraph.href`, a deep link into the Identity Graph UI for the resolved identity. Opening the link requires the **Identity Graph Read Only** user level. The link is omitted when the tenant lacks idg:base. **Human envelope (type Human)** Embeds the first page (10 items) of each enrichment slice. Each paged slice includes totalCount from upstream X-Total-Count when items is non-empty, and carries a next continuation URL when totalCount exceeds the items returned on this page. Slices are always present (empty uses items [] with no totalCount). privilegedAccess returns the full privileged-access result and never carries next or totalCount. When the tenant has idn:machine-identity-security, nonHumanIdentityOwnership is included with agents and applications categories; each category is a flat object with independently paged primaryOwned and secondaryOwned buckets, and optional message/reason when upstream ownership fetch fails for that category (reason UPSTREAM_UNAVAILABLE). When the tenant lacks that license, nonHumanIdentityOwnership is omitted. Continue ownership paging with GET .../non-human-identity-ownership/{category} and optional ownershipRole=primary|secondary (defaults to primary). If any enrichment upstream fails, the whole request fails with HTTP 500, except outliers (omitted when the tenant lacks the IDA-outliers license) and nonHumanIdentityOwnership category-level degrade (aggregate still returns HTTP 200). **Non-human identity envelope (type NHI)** Returns flat non-human identity fields at the top level plus correlated machine accounts on the aggregate and a derived block (isOrphaned, authorizedHumanIdentities, blastRadiusSummary). Omits Human-only slices (privilegedAccess, outliers, accessHistory, nonHumanIdentityOwnership). Account paging via child routes is not yet released. Opaque prefix resolution that deduplicates to one parent identity returns HTTP 200 with matchConfidence partial; multiple distinct parent identities return HTTP 409 with IDC_IDENTITY_AMBIGUOUS and candidate id and displayName values.
543
+ * Requires tenant license idn:response-and-remediation. **Caution:** When Data Segmentation is enabled, generic API Management API keys are not tied to a user identity and may fail or return incomplete data. Use a [personal access token](https://developer.sailpoint.com/docs/api/authentication/#generate-a-personal-access-token) or other user-scoped OAuth token. See [API keys](https://documentation.sailpoint.com/saas/help/common/api_keys.html) and [Data Segmentation](https://documentation.sailpoint.com/saas/help/segmentation/index.html). Resolves exactly one identity using a single SCIM-style filters expression. Returns an enriched Human or non-human identity (NHI) envelope. Single-clause filters only; unsupported fields or operators return HTTP 400.
540
544
  * @summary Get identity by filter
541
545
  * @param {string} filters Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: **id**: *eq* **email**: *eq* **opaqueIdentifier**: *eq*
542
546
  * @param {*} [axiosOptions] Override http request option.
@@ -585,22 +589,23 @@ var IntelligenceApiFp = function (configuration) {
585
589
  });
586
590
  },
587
591
  /**
588
- * Continuation endpoint for a Human identity\'s `accounts.next` link. Returns one page of account rows for the supplied limit and offset values. Pass `count=true` to receive `X-Total-Count` (including `0` on empty pages). Not applicable to non-human identities (NHI accounts are returned on the NHI aggregate only). Requires tenant license idn:response-and-remediation.
592
+ * Continuation endpoint for `accounts.next`. Pass `count=true` for `X-Total-Count`. - Human (default): omit `isNHI` or set it to `false`. Slice object (`items`). - Non-human identity (NHI): set `isNHI=true` (required for NHI aggregate `accounts.next` links). Bare JSON array.
589
593
  * @summary List identity accounts
590
594
  * @param {string} id Non-empty identity id path segment for Intelligence sub-resources.
591
595
  * @param {number} [limit] Page size. Defaults to 250; values above 250 are rejected with 400.
592
596
  * @param {number} [offset] Zero-based page offset. Defaults to 0.
593
597
  * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored. Since requesting a total count can have a performance impact, it is recommended not to send **count=true** if that value will not be used. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
598
+ * @param {boolean} [isNHI] NHI accounts when `true` (bare array). Human accounts when omitted or `false` (slice object).
594
599
  * @param {*} [axiosOptions] Override http request option.
595
600
  * @throws {RequiredError}
596
601
  */
597
- getIntelIdentityAccountsV1: function (id, limit, offset, count, axiosOptions) {
602
+ getIntelIdentityAccountsV1: function (id, limit, offset, count, isNHI, axiosOptions) {
598
603
  var _a, _b, _c;
599
604
  return __awaiter(this, void 0, void 0, function () {
600
605
  var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
601
606
  return __generator(this, function (_d) {
602
607
  switch (_d.label) {
603
- case 0: return [4 /*yield*/, localVarAxiosParamCreator.getIntelIdentityAccountsV1(id, limit, offset, count, axiosOptions)];
608
+ case 0: return [4 /*yield*/, localVarAxiosParamCreator.getIntelIdentityAccountsV1(id, limit, offset, count, isNHI, axiosOptions)];
604
609
  case 1:
605
610
  localVarAxiosArgs = _d.sent();
606
611
  localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
@@ -734,7 +739,7 @@ var IntelligenceApiFactory = function (configuration, basePath, axios) {
734
739
  return localVarFp.createResponseActionV1(requestParameters.responseactioncreaterequest, axiosOptions).then(function (request) { return request(axios, basePath); });
735
740
  },
736
741
  /**
737
- * Requires tenant license idn:response-and-remediation. **Authentication and data segmentation** Intelligence forwards the caller JWT to downstream identity and search services (context client). Enriched results, including non-human identity resolution, are filtered to the caller\'s Data Segmentation visibility. **Caution:** Generic API Management API keys are not tied to a user identity. When Data Segmentation is enabled, API key authentication may fail or return incomplete data because downstream calls require a user context. Use a [personal access token](https://developer.sailpoint.com/docs/api/authentication/#generate-a-personal-access-token) or other user-scoped OAuth token. See [API keys](https://documentation.sailpoint.com/saas/help/common/api_keys.html) and [Data Segmentation](https://documentation.sailpoint.com/saas/help/segmentation/index.html). Resolves exactly one identity using a single SCIM-style filters expression. **Supported filters** | Filter field | Lookup mode | Notes | |---|---|---| | id eq | Human (+ optional non-human identity when feature-flagged) | Resolves human identities by id; when non-human resolution is enabled, a parallel non-human lookup runs. If both match different identities, returns HTTP 409. | | email eq | Human only | Human identity lookup by email only. | | opaqueIdentifier eq | Non-human identity only | Parallel nativeIdentity eq on machine-identities and machine-accounts, then name-prefix fallback on machine-accounts. Requires feature flag ISCRR-1905_NHI_TYPE_MACHINE_FILTER_ENABLED; when disabled, returns HTTP 400. | Single-clause filters only; composite and or expressions are rejected with HTTP 400. **identityGraph deep link** When the tenant has the idg:base license, Human and NHI aggregate responses may include `identityGraph.href`, a deep link into the Identity Graph UI for the resolved identity. Opening the link requires the **Identity Graph Read Only** user level. The link is omitted when the tenant lacks idg:base. **Human envelope (type Human)** Embeds the first page (10 items) of each enrichment slice. Each paged slice includes totalCount from upstream X-Total-Count when items is non-empty, and carries a next continuation URL when totalCount exceeds the items returned on this page. Slices are always present (empty uses items [] with no totalCount). privilegedAccess returns the full privileged-access result and never carries next or totalCount. When the tenant has idn:machine-identity-security, nonHumanIdentityOwnership is included with agents and applications categories; each category is a flat object with independently paged primaryOwned and secondaryOwned buckets, and optional message/reason when upstream ownership fetch fails for that category (reason UPSTREAM_UNAVAILABLE). When the tenant lacks that license, nonHumanIdentityOwnership is omitted. Continue ownership paging with GET .../non-human-identity-ownership/{category} and optional ownershipRole=primary|secondary (defaults to primary). If any enrichment upstream fails, the whole request fails with HTTP 500, except outliers (omitted when the tenant lacks the IDA-outliers license) and nonHumanIdentityOwnership category-level degrade (aggregate still returns HTTP 200). **Non-human identity envelope (type NHI)** Returns flat non-human identity fields at the top level plus correlated machine accounts on the aggregate and a derived block (isOrphaned, authorizedHumanIdentities, blastRadiusSummary). Omits Human-only slices (privilegedAccess, outliers, accessHistory, nonHumanIdentityOwnership). Account paging via child routes is not yet released. Opaque prefix resolution that deduplicates to one parent identity returns HTTP 200 with matchConfidence partial; multiple distinct parent identities return HTTP 409 with IDC_IDENTITY_AMBIGUOUS and candidate id and displayName values.
742
+ * Requires tenant license idn:response-and-remediation. **Caution:** When Data Segmentation is enabled, generic API Management API keys are not tied to a user identity and may fail or return incomplete data. Use a [personal access token](https://developer.sailpoint.com/docs/api/authentication/#generate-a-personal-access-token) or other user-scoped OAuth token. See [API keys](https://documentation.sailpoint.com/saas/help/common/api_keys.html) and [Data Segmentation](https://documentation.sailpoint.com/saas/help/segmentation/index.html). Resolves exactly one identity using a single SCIM-style filters expression. Returns an enriched Human or non-human identity (NHI) envelope. Single-clause filters only; unsupported fields or operators return HTTP 400.
738
743
  * @summary Get identity by filter
739
744
  * @param {IntelligenceApiGetIdentityIntelligenceV1Request} requestParameters Request parameters.
740
745
  * @param {*} [axiosOptions] Override http request option.
@@ -754,14 +759,14 @@ var IntelligenceApiFactory = function (configuration, basePath, axios) {
754
759
  return localVarFp.getIntelIdentityAccessItemHistoryV1(requestParameters.id, requestParameters.limit, requestParameters.offset, requestParameters.count, axiosOptions).then(function (request) { return request(axios, basePath); });
755
760
  },
756
761
  /**
757
- * Continuation endpoint for a Human identity\'s `accounts.next` link. Returns one page of account rows for the supplied limit and offset values. Pass `count=true` to receive `X-Total-Count` (including `0` on empty pages). Not applicable to non-human identities (NHI accounts are returned on the NHI aggregate only). Requires tenant license idn:response-and-remediation.
762
+ * Continuation endpoint for `accounts.next`. Pass `count=true` for `X-Total-Count`. - Human (default): omit `isNHI` or set it to `false`. Slice object (`items`). - Non-human identity (NHI): set `isNHI=true` (required for NHI aggregate `accounts.next` links). Bare JSON array.
758
763
  * @summary List identity accounts
759
764
  * @param {IntelligenceApiGetIntelIdentityAccountsV1Request} requestParameters Request parameters.
760
765
  * @param {*} [axiosOptions] Override http request option.
761
766
  * @throws {RequiredError}
762
767
  */
763
768
  getIntelIdentityAccountsV1: function (requestParameters, axiosOptions) {
764
- return localVarFp.getIntelIdentityAccountsV1(requestParameters.id, requestParameters.limit, requestParameters.offset, requestParameters.count, axiosOptions).then(function (request) { return request(axios, basePath); });
769
+ return localVarFp.getIntelIdentityAccountsV1(requestParameters.id, requestParameters.limit, requestParameters.offset, requestParameters.count, requestParameters.isNHI, axiosOptions).then(function (request) { return request(axios, basePath); });
765
770
  },
766
771
  /**
767
772
  * Continuation endpoint for the parent response\'s `accessHistory.certifications.next` link. Returns one page of certification history events for the supplied limit and offset values. Pass `count=true` to receive `X-Total-Count` (including `0` on empty pages). Per-record decode failures are dropped server-side. Requires tenant license idn:response-and-remediation. Not applicable to non-human identities.
@@ -830,7 +835,7 @@ var IntelligenceApi = /** @class */ (function (_super) {
830
835
  return (0, exports.IntelligenceApiFp)(this.configuration).createResponseActionV1(requestParameters.responseactioncreaterequest, axiosOptions).then(function (request) { return request(_this.axios, _this.basePath); });
831
836
  };
832
837
  /**
833
- * Requires tenant license idn:response-and-remediation. **Authentication and data segmentation** Intelligence forwards the caller JWT to downstream identity and search services (context client). Enriched results, including non-human identity resolution, are filtered to the caller\'s Data Segmentation visibility. **Caution:** Generic API Management API keys are not tied to a user identity. When Data Segmentation is enabled, API key authentication may fail or return incomplete data because downstream calls require a user context. Use a [personal access token](https://developer.sailpoint.com/docs/api/authentication/#generate-a-personal-access-token) or other user-scoped OAuth token. See [API keys](https://documentation.sailpoint.com/saas/help/common/api_keys.html) and [Data Segmentation](https://documentation.sailpoint.com/saas/help/segmentation/index.html). Resolves exactly one identity using a single SCIM-style filters expression. **Supported filters** | Filter field | Lookup mode | Notes | |---|---|---| | id eq | Human (+ optional non-human identity when feature-flagged) | Resolves human identities by id; when non-human resolution is enabled, a parallel non-human lookup runs. If both match different identities, returns HTTP 409. | | email eq | Human only | Human identity lookup by email only. | | opaqueIdentifier eq | Non-human identity only | Parallel nativeIdentity eq on machine-identities and machine-accounts, then name-prefix fallback on machine-accounts. Requires feature flag ISCRR-1905_NHI_TYPE_MACHINE_FILTER_ENABLED; when disabled, returns HTTP 400. | Single-clause filters only; composite and or expressions are rejected with HTTP 400. **identityGraph deep link** When the tenant has the idg:base license, Human and NHI aggregate responses may include `identityGraph.href`, a deep link into the Identity Graph UI for the resolved identity. Opening the link requires the **Identity Graph Read Only** user level. The link is omitted when the tenant lacks idg:base. **Human envelope (type Human)** Embeds the first page (10 items) of each enrichment slice. Each paged slice includes totalCount from upstream X-Total-Count when items is non-empty, and carries a next continuation URL when totalCount exceeds the items returned on this page. Slices are always present (empty uses items [] with no totalCount). privilegedAccess returns the full privileged-access result and never carries next or totalCount. When the tenant has idn:machine-identity-security, nonHumanIdentityOwnership is included with agents and applications categories; each category is a flat object with independently paged primaryOwned and secondaryOwned buckets, and optional message/reason when upstream ownership fetch fails for that category (reason UPSTREAM_UNAVAILABLE). When the tenant lacks that license, nonHumanIdentityOwnership is omitted. Continue ownership paging with GET .../non-human-identity-ownership/{category} and optional ownershipRole=primary|secondary (defaults to primary). If any enrichment upstream fails, the whole request fails with HTTP 500, except outliers (omitted when the tenant lacks the IDA-outliers license) and nonHumanIdentityOwnership category-level degrade (aggregate still returns HTTP 200). **Non-human identity envelope (type NHI)** Returns flat non-human identity fields at the top level plus correlated machine accounts on the aggregate and a derived block (isOrphaned, authorizedHumanIdentities, blastRadiusSummary). Omits Human-only slices (privilegedAccess, outliers, accessHistory, nonHumanIdentityOwnership). Account paging via child routes is not yet released. Opaque prefix resolution that deduplicates to one parent identity returns HTTP 200 with matchConfidence partial; multiple distinct parent identities return HTTP 409 with IDC_IDENTITY_AMBIGUOUS and candidate id and displayName values.
838
+ * Requires tenant license idn:response-and-remediation. **Caution:** When Data Segmentation is enabled, generic API Management API keys are not tied to a user identity and may fail or return incomplete data. Use a [personal access token](https://developer.sailpoint.com/docs/api/authentication/#generate-a-personal-access-token) or other user-scoped OAuth token. See [API keys](https://documentation.sailpoint.com/saas/help/common/api_keys.html) and [Data Segmentation](https://documentation.sailpoint.com/saas/help/segmentation/index.html). Resolves exactly one identity using a single SCIM-style filters expression. Returns an enriched Human or non-human identity (NHI) envelope. Single-clause filters only; unsupported fields or operators return HTTP 400.
834
839
  * @summary Get identity by filter
835
840
  * @param {IntelligenceApiGetIdentityIntelligenceV1Request} requestParameters Request parameters.
836
841
  * @param {*} [axiosOptions] Override http request option.
@@ -854,7 +859,7 @@ var IntelligenceApi = /** @class */ (function (_super) {
854
859
  return (0, exports.IntelligenceApiFp)(this.configuration).getIntelIdentityAccessItemHistoryV1(requestParameters.id, requestParameters.limit, requestParameters.offset, requestParameters.count, axiosOptions).then(function (request) { return request(_this.axios, _this.basePath); });
855
860
  };
856
861
  /**
857
- * Continuation endpoint for a Human identity\'s `accounts.next` link. Returns one page of account rows for the supplied limit and offset values. Pass `count=true` to receive `X-Total-Count` (including `0` on empty pages). Not applicable to non-human identities (NHI accounts are returned on the NHI aggregate only). Requires tenant license idn:response-and-remediation.
862
+ * Continuation endpoint for `accounts.next`. Pass `count=true` for `X-Total-Count`. - Human (default): omit `isNHI` or set it to `false`. Slice object (`items`). - Non-human identity (NHI): set `isNHI=true` (required for NHI aggregate `accounts.next` links). Bare JSON array.
858
863
  * @summary List identity accounts
859
864
  * @param {IntelligenceApiGetIntelIdentityAccountsV1Request} requestParameters Request parameters.
860
865
  * @param {*} [axiosOptions] Override http request option.
@@ -863,7 +868,7 @@ var IntelligenceApi = /** @class */ (function (_super) {
863
868
  */
864
869
  IntelligenceApi.prototype.getIntelIdentityAccountsV1 = function (requestParameters, axiosOptions) {
865
870
  var _this = this;
866
- return (0, exports.IntelligenceApiFp)(this.configuration).getIntelIdentityAccountsV1(requestParameters.id, requestParameters.limit, requestParameters.offset, requestParameters.count, axiosOptions).then(function (request) { return request(_this.axios, _this.basePath); });
871
+ return (0, exports.IntelligenceApiFp)(this.configuration).getIntelIdentityAccountsV1(requestParameters.id, requestParameters.limit, requestParameters.offset, requestParameters.count, requestParameters.isNHI, axiosOptions).then(function (request) { return request(_this.axios, _this.basePath); });
867
872
  };
868
873
  /**
869
874
  * Continuation endpoint for the parent response\'s `accessHistory.certifications.next` link. Returns one page of certification history events for the supplied limit and offset values. Pass `count=true` to receive `X-Total-Count` (including `0` on empty pages). Per-record decode failures are dropped server-side. Requires tenant license idn:response-and-remediation. Not applicable to non-human identities.