sailpoint-api-client 1.6.2 → 1.6.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/beta/README.md +2 -2
- package/beta/api.ts +20 -12
- package/beta/common.ts +2 -2
- package/beta/package.json +1 -1
- package/dist/beta/api.d.ts +20 -12
- package/dist/beta/api.js +16 -9
- package/dist/beta/api.js.map +1 -1
- package/dist/beta/common.js +1 -1
- package/dist/index.spec.js +67 -16
- package/dist/index.spec.js.map +1 -1
- package/dist/paginator.d.ts +28 -2
- package/dist/paginator.js +39 -11
- package/dist/paginator.js.map +1 -1
- package/dist/v2024/api.d.ts +136 -189
- package/dist/v2024/api.js +222 -249
- package/dist/v2024/api.js.map +1 -1
- package/dist/v2024/common.js +1 -1
- package/dist/v2025/api.d.ts +1098 -183
- package/dist/v2025/api.js +1564 -273
- package/dist/v2025/api.js.map +1 -1
- package/dist/v2025/common.js +1 -1
- package/dist/v3/api.d.ts +20 -12
- package/dist/v3/api.js +18 -11
- package/dist/v3/api.js.map +1 -1
- package/dist/v3/common.js +1 -1
- package/index.spec.ts +44 -2
- package/package.json +1 -1
- package/paginator.ts +77 -13
- package/v2024/README.md +2 -2
- package/v2024/api.ts +251 -390
- package/v2024/common.ts +2 -2
- package/v2024/package.json +1 -1
- package/v2025/README.md +2 -2
- package/v2025/api.ts +2048 -622
- package/v2025/common.ts +2 -2
- package/v2025/package.json +1 -1
- package/v3/README.md +2 -2
- package/v3/api.ts +22 -14
- package/v3/common.ts +2 -2
- package/v3/package.json +1 -1
package/dist/beta/api.js
CHANGED
|
@@ -90,9 +90,9 @@ exports.CustomPasswordInstructionsBetaApiFp = exports.CustomPasswordInstructions
|
|
|
90
90
|
exports.IconsBetaApiFactory = exports.IconsBetaApiFp = exports.IconsBetaApiAxiosParamCreator = exports.IAIRoleMiningBetaApi = exports.IAIRoleMiningBetaApiFactory = exports.IAIRoleMiningBetaApiFp = exports.IAIRoleMiningBetaApiAxiosParamCreator = exports.IAIRecommendationsBetaApi = exports.IAIRecommendationsBetaApiFactory = exports.IAIRecommendationsBetaApiFp = exports.IAIRecommendationsBetaApiAxiosParamCreator = exports.GetPeerGroupOutliersStrategyBeta = exports.IAIPeerGroupStrategiesBetaApi = exports.IAIPeerGroupStrategiesBetaApiFactory = exports.IAIPeerGroupStrategiesBetaApiFp = exports.IAIPeerGroupStrategiesBetaApiAxiosParamCreator = exports.ListOutliersContributingFeatureAccessItemsContributingFeatureNameBeta = exports.GetLatestIdentityOutlierSnapshotsTypeBeta = exports.GetIdentityOutliersTypeBeta = exports.GetIdentityOutlierSnapshotsTypeBeta = exports.ExportOutliersZipTypeBeta = exports.IAIOutliersBetaApi = exports.IAIOutliersBetaApiFactory = exports.IAIOutliersBetaApiFp = exports.IAIOutliersBetaApiAxiosParamCreator = exports.GetMessageCatalogsCatalogIdBeta = exports.IAIMessageCatalogsBetaApi = exports.IAIMessageCatalogsBetaApiFactory = exports.IAIMessageCatalogsBetaApiFp = exports.IAIMessageCatalogsBetaApiAxiosParamCreator = exports.IAICommonAccessBetaApi = exports.IAICommonAccessBetaApiFactory = exports.IAICommonAccessBetaApiFp = exports.IAICommonAccessBetaApiAxiosParamCreator = exports.IAIAccessRequestRecommendationsBetaApi = exports.IAIAccessRequestRecommendationsBetaApiFactory = exports.IAIAccessRequestRecommendationsBetaApiFp = exports.IAIAccessRequestRecommendationsBetaApiAxiosParamCreator = exports.GovernanceGroupsBetaApi = exports.GovernanceGroupsBetaApiFactory = exports.GovernanceGroupsBetaApiFp = exports.GovernanceGroupsBetaApiAxiosParamCreator = exports.EntitlementsBetaApi = exports.EntitlementsBetaApiFactory = exports.EntitlementsBetaApiFp = exports.EntitlementsBetaApiAxiosParamCreator = exports.GetCustomPasswordInstructionsPageIdBeta = exports.DeleteCustomPasswordInstructionsPageIdBeta = exports.CustomPasswordInstructionsBetaApi = exports.CustomPasswordInstructionsBetaApiFactory = void 0;
|
|
91
91
|
exports.ManagedClustersBetaApiFactory = exports.ManagedClustersBetaApiFp = exports.ManagedClustersBetaApiAxiosParamCreator = exports.ManagedClientsBetaApi = exports.ManagedClientsBetaApiFactory = exports.ManagedClientsBetaApiFp = exports.ManagedClientsBetaApiAxiosParamCreator = exports.PingVerificationStatusMethodBeta = exports.MFAControllerBetaApi = exports.MFAControllerBetaApiFactory = exports.MFAControllerBetaApiFp = exports.MFAControllerBetaApiAxiosParamCreator = exports.TestMFAConfigMethodBeta = exports.DeleteMFAConfigMethodBeta = exports.MFAConfigurationBetaApi = exports.MFAConfigurationBetaApiFactory = exports.MFAConfigurationBetaApiFp = exports.MFAConfigurationBetaApiAxiosParamCreator = exports.LifecycleStatesBetaApi = exports.LifecycleStatesBetaApiFactory = exports.LifecycleStatesBetaApiFp = exports.LifecycleStatesBetaApiAxiosParamCreator = exports.LaunchersBetaApi = exports.LaunchersBetaApiFactory = exports.LaunchersBetaApiFp = exports.LaunchersBetaApiAxiosParamCreator = exports.IdentityProfilesBetaApi = exports.IdentityProfilesBetaApiFactory = exports.IdentityProfilesBetaApiFp = exports.IdentityProfilesBetaApiAxiosParamCreator = exports.ListIdentitySnapshotsIntervalBeta = exports.ListIdentitySnapshotAccessItemsTypeBeta = exports.GetIdentitySnapshotSummaryIntervalBeta = exports.CompareIdentitySnapshotsAccessTypeAccessTypeBeta = exports.IdentityHistoryBetaApi = exports.IdentityHistoryBetaApiFactory = exports.IdentityHistoryBetaApiFp = exports.IdentityHistoryBetaApiAxiosParamCreator = exports.IdentityAttributesBetaApi = exports.IdentityAttributesBetaApiFactory = exports.IdentityAttributesBetaApiFp = exports.IdentityAttributesBetaApiAxiosParamCreator = exports.ListIdentitiesDefaultFilterBeta = exports.IdentitiesBetaApi = exports.IdentitiesBetaApiFactory = exports.IdentitiesBetaApiFp = exports.IdentitiesBetaApiAxiosParamCreator = exports.SetIconObjectTypeBeta = exports.DeleteIconObjectTypeBeta = exports.IconsBetaApi = void 0;
|
|
92
92
|
exports.RequestableObjectsBetaApiAxiosParamCreator = exports.PublicIdentitiesConfigBetaApi = exports.PublicIdentitiesConfigBetaApiFactory = exports.PublicIdentitiesConfigBetaApiFp = exports.PublicIdentitiesConfigBetaApiAxiosParamCreator = exports.PersonalAccessTokensBetaApi = exports.PersonalAccessTokensBetaApiFactory = exports.PersonalAccessTokensBetaApiFp = exports.PersonalAccessTokensBetaApiAxiosParamCreator = exports.PasswordSyncGroupsBetaApi = exports.PasswordSyncGroupsBetaApiFactory = exports.PasswordSyncGroupsBetaApiFp = exports.PasswordSyncGroupsBetaApiAxiosParamCreator = exports.PasswordPoliciesBetaApi = exports.PasswordPoliciesBetaApiFactory = exports.PasswordPoliciesBetaApiFp = exports.PasswordPoliciesBetaApiAxiosParamCreator = exports.PasswordManagementBetaApi = exports.PasswordManagementBetaApiFactory = exports.PasswordManagementBetaApiFp = exports.PasswordManagementBetaApiAxiosParamCreator = exports.PasswordDictionaryBetaApi = exports.PasswordDictionaryBetaApiFactory = exports.PasswordDictionaryBetaApiFp = exports.PasswordDictionaryBetaApiAxiosParamCreator = exports.PasswordConfigurationBetaApi = exports.PasswordConfigurationBetaApiFactory = exports.PasswordConfigurationBetaApiFp = exports.PasswordConfigurationBetaApiAxiosParamCreator = exports.OrgConfigBetaApi = exports.OrgConfigBetaApiFactory = exports.OrgConfigBetaApiFp = exports.OrgConfigBetaApiAxiosParamCreator = exports.OAuthClientsBetaApi = exports.OAuthClientsBetaApiFactory = exports.OAuthClientsBetaApiFp = exports.OAuthClientsBetaApiAxiosParamCreator = exports.NotificationsBetaApi = exports.NotificationsBetaApiFactory = exports.NotificationsBetaApiFp = exports.NotificationsBetaApiAxiosParamCreator = exports.NonEmployeeLifecycleManagementBetaApi = exports.NonEmployeeLifecycleManagementBetaApiFactory = exports.NonEmployeeLifecycleManagementBetaApiFp = exports.NonEmployeeLifecycleManagementBetaApiAxiosParamCreator = exports.MultiHostIntegrationBetaApi = exports.MultiHostIntegrationBetaApiFactory = exports.MultiHostIntegrationBetaApiFp = exports.MultiHostIntegrationBetaApiAxiosParamCreator = exports.ManagedClustersBetaApi = void 0;
|
|
93
|
-
exports.
|
|
94
|
-
exports.
|
|
95
|
-
exports.WorkflowsBetaApi = exports.WorkflowsBetaApiFactory = void 0;
|
|
93
|
+
exports.GetSourceSchemasIncludeTypesBeta = exports.GetSourceConfigLocaleBeta = exports.SourcesBetaApi = exports.SourcesBetaApiFactory = exports.SourcesBetaApiFp = exports.SourcesBetaApiAxiosParamCreator = exports.SourceUsagesBetaApi = exports.SourceUsagesBetaApiFactory = exports.SourceUsagesBetaApiFp = exports.SourceUsagesBetaApiAxiosParamCreator = exports.ServiceDeskIntegrationBetaApi = exports.ServiceDeskIntegrationBetaApiFactory = exports.ServiceDeskIntegrationBetaApiFp = exports.ServiceDeskIntegrationBetaApiAxiosParamCreator = exports.SegmentsBetaApi = exports.SegmentsBetaApiFactory = exports.SegmentsBetaApiFp = exports.SegmentsBetaApiAxiosParamCreator = exports.SearchAttributeConfigurationBetaApi = exports.SearchAttributeConfigurationBetaApiFactory = exports.SearchAttributeConfigurationBetaApiFp = exports.SearchAttributeConfigurationBetaApiAxiosParamCreator = exports.SPConfigBetaApi = exports.SPConfigBetaApiFactory = exports.SPConfigBetaApiFp = exports.SPConfigBetaApiAxiosParamCreator = exports.SODViolationsBetaApi = exports.SODViolationsBetaApiFactory = exports.SODViolationsBetaApiFp = exports.SODViolationsBetaApiAxiosParamCreator = exports.SODPoliciesBetaApi = exports.SODPoliciesBetaApiFactory = exports.SODPoliciesBetaApiFp = exports.SODPoliciesBetaApiAxiosParamCreator = exports.SIMIntegrationsBetaApi = exports.SIMIntegrationsBetaApiFactory = exports.SIMIntegrationsBetaApiFp = exports.SIMIntegrationsBetaApiAxiosParamCreator = exports.RolesBetaApi = exports.RolesBetaApiFactory = exports.RolesBetaApiFp = exports.RolesBetaApiAxiosParamCreator = exports.RoleInsightsBetaApi = exports.RoleInsightsBetaApiFactory = exports.RoleInsightsBetaApiFp = exports.RoleInsightsBetaApiAxiosParamCreator = exports.ListRequestableObjectsTypesBeta = exports.RequestableObjectsBetaApi = exports.RequestableObjectsBetaApiFactory = exports.RequestableObjectsBetaApiFp = void 0;
|
|
94
|
+
exports.WorkflowsBetaApiAxiosParamCreator = exports.WorkReassignmentBetaApi = exports.WorkReassignmentBetaApiFactory = exports.WorkReassignmentBetaApiFp = exports.WorkReassignmentBetaApiAxiosParamCreator = exports.WorkItemsBetaApi = exports.WorkItemsBetaApiFactory = exports.WorkItemsBetaApiFp = exports.WorkItemsBetaApiAxiosParamCreator = exports.VendorConnectorMappingsBetaApi = exports.VendorConnectorMappingsBetaApiFactory = exports.VendorConnectorMappingsBetaApiFp = exports.VendorConnectorMappingsBetaApiAxiosParamCreator = exports.UIMetadataBetaApi = exports.UIMetadataBetaApiFactory = exports.UIMetadataBetaApiFp = exports.UIMetadataBetaApiAxiosParamCreator = exports.TriggersBetaApi = exports.TriggersBetaApiFactory = exports.TriggersBetaApiFp = exports.TriggersBetaApiAxiosParamCreator = exports.TransformsBetaApi = exports.TransformsBetaApiFactory = exports.TransformsBetaApiFp = exports.TransformsBetaApiAxiosParamCreator = exports.TenantBetaApi = exports.TenantBetaApiFactory = exports.TenantBetaApiFp = exports.TenantBetaApiAxiosParamCreator = exports.TaskManagementBetaApi = exports.TaskManagementBetaApiFactory = exports.TaskManagementBetaApiFp = exports.TaskManagementBetaApiAxiosParamCreator = exports.TagsBetaApi = exports.TagsBetaApiFactory = exports.TagsBetaApiFp = exports.TagsBetaApiAxiosParamCreator = exports.PutTaggedObjectTypeBeta = exports.ListTaggedObjectsByTypeTypeBeta = exports.GetTaggedObjectTypeBeta = exports.DeleteTaggedObjectTypeBeta = exports.TaggedObjectsBetaApi = exports.TaggedObjectsBetaApiFactory = exports.TaggedObjectsBetaApiFp = exports.TaggedObjectsBetaApiAxiosParamCreator = exports.SuggestedEntitlementDescriptionBetaApi = exports.SuggestedEntitlementDescriptionBetaApiFactory = exports.SuggestedEntitlementDescriptionBetaApiFp = exports.SuggestedEntitlementDescriptionBetaApiAxiosParamCreator = exports.ImportAccountsDisableOptimizationBeta = void 0;
|
|
95
|
+
exports.WorkflowsBetaApi = exports.WorkflowsBetaApiFactory = exports.WorkflowsBetaApiFp = void 0;
|
|
96
96
|
var axios_1 = __importDefault(require("axios"));
|
|
97
97
|
// Some imports not used depending on template conditions
|
|
98
98
|
// @ts-ignore
|
|
@@ -5059,7 +5059,7 @@ var AccessRequestsBetaApiAxiosParamCreator = function (configuration) {
|
|
|
5059
5059
|
});
|
|
5060
5060
|
},
|
|
5061
5061
|
/**
|
|
5062
|
-
* Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it doesn\'t return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It\'s best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has, the
|
|
5062
|
+
* Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it doesn\'t return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It\'s best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * While requesting entitlements, maximum of 25 entitlements and 10 recipients are allowed in a request. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source. __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests. * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests.
|
|
5063
5063
|
* @summary Submit access request
|
|
5064
5064
|
* @param {AccessRequestBeta} accessRequestBeta
|
|
5065
5065
|
* @param {*} [axiosOptions] Override http request option.
|
|
@@ -5361,7 +5361,7 @@ var AccessRequestsBetaApiFp = function (configuration) {
|
|
|
5361
5361
|
});
|
|
5362
5362
|
},
|
|
5363
5363
|
/**
|
|
5364
|
-
* Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it doesn\'t return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It\'s best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has, the
|
|
5364
|
+
* Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it doesn\'t return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It\'s best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * While requesting entitlements, maximum of 25 entitlements and 10 recipients are allowed in a request. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source. __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests. * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests.
|
|
5365
5365
|
* @summary Submit access request
|
|
5366
5366
|
* @param {AccessRequestBeta} accessRequestBeta
|
|
5367
5367
|
* @param {*} [axiosOptions] Override http request option.
|
|
@@ -5491,7 +5491,7 @@ var AccessRequestsBetaApiFactory = function (configuration, basePath, axios) {
|
|
|
5491
5491
|
return localVarFp.closeAccessRequest(requestParameters.closeAccessRequestBeta, axiosOptions).then(function (request) { return request(axios, basePath); });
|
|
5492
5492
|
},
|
|
5493
5493
|
/**
|
|
5494
|
-
* Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it doesn\'t return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It\'s best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has, the
|
|
5494
|
+
* Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it doesn\'t return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It\'s best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * While requesting entitlements, maximum of 25 entitlements and 10 recipients are allowed in a request. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source. __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests. * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests.
|
|
5495
5495
|
* @summary Submit access request
|
|
5496
5496
|
* @param {AccessRequestsBetaApiCreateAccessRequestRequest} requestParameters Request parameters.
|
|
5497
5497
|
* @param {*} [axiosOptions] Override http request option.
|
|
@@ -5569,7 +5569,7 @@ var AccessRequestsBetaApi = /** @class */ (function (_super) {
|
|
|
5569
5569
|
return (0, exports.AccessRequestsBetaApiFp)(this.configuration).closeAccessRequest(requestParameters.closeAccessRequestBeta, axiosOptions).then(function (request) { return request(_this.axios, _this.basePath); });
|
|
5570
5570
|
};
|
|
5571
5571
|
/**
|
|
5572
|
-
* Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it doesn\'t return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It\'s best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has, the
|
|
5572
|
+
* Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it doesn\'t return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It\'s best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * While requesting entitlements, maximum of 25 entitlements and 10 recipients are allowed in a request. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source. __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests. * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests.
|
|
5573
5573
|
* @summary Submit access request
|
|
5574
5574
|
* @param {AccessRequestsBetaApiCreateAccessRequestRequest} requestParameters Request parameters.
|
|
5575
5575
|
* @param {*} [axiosOptions] Override http request option.
|
|
@@ -43176,7 +43176,7 @@ var RequestableObjectsBetaApiAxiosParamCreator = function (configuration) {
|
|
|
43176
43176
|
* Get a list of acccess items that can be requested through the [Access Request endpoints](https://developer.sailpoint.com/docs/api/v3/access-requests). Access items are marked with `AVAILABLE`, `PENDING` or `ASSIGNED` with respect to the identity provided using `identity-id` query parameter. Any authenticated token can call this endpoint to see their requestable access items.
|
|
43177
43177
|
* @summary Requestable objects list
|
|
43178
43178
|
* @param {string} [identityId] If present, the value returns only requestable objects for the specified identity. * Admin users can call this with any identity ID value. * Non-admin users can only specify *me* or pass their own identity ID value. * If absent, returns a list of all requestable objects for the tenant. Only admin users can make such a call. In this case, the available, pending, assigned accesses will not be annotated in the result.
|
|
43179
|
-
* @param {Array<
|
|
43179
|
+
* @param {Array<ListRequestableObjectsTypesBeta>} [types] Filters the results to the specified type/types, where each type is one of `ROLE` or `ACCESS_PROFILE`. If absent, all types are returned. SailPoint may add support for additional types in the future without notice.
|
|
43180
43180
|
* @param {string} [term] Allows searching requestable access items with a partial match on the name or description. If `term` is provided, then the API will ignore the `filter` query parameter.
|
|
43181
43181
|
* @param {Array<RequestableObjectRequestStatusBeta>} [statuses] Filters the result to the specified status/statuses, where each status is one of `AVAILABLE`, `ASSIGNED`, or `PENDING`. Specifying this parameter without also specifying an `identity-id` parameter results in an error. SailPoint may add additional statuses in the future without notice.
|
|
43182
43182
|
* @param {number} [limit] Max number of results to return. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
|
|
@@ -43271,7 +43271,7 @@ var RequestableObjectsBetaApiFp = function (configuration) {
|
|
|
43271
43271
|
* Get a list of acccess items that can be requested through the [Access Request endpoints](https://developer.sailpoint.com/docs/api/v3/access-requests). Access items are marked with `AVAILABLE`, `PENDING` or `ASSIGNED` with respect to the identity provided using `identity-id` query parameter. Any authenticated token can call this endpoint to see their requestable access items.
|
|
43272
43272
|
* @summary Requestable objects list
|
|
43273
43273
|
* @param {string} [identityId] If present, the value returns only requestable objects for the specified identity. * Admin users can call this with any identity ID value. * Non-admin users can only specify *me* or pass their own identity ID value. * If absent, returns a list of all requestable objects for the tenant. Only admin users can make such a call. In this case, the available, pending, assigned accesses will not be annotated in the result.
|
|
43274
|
-
* @param {Array<
|
|
43274
|
+
* @param {Array<ListRequestableObjectsTypesBeta>} [types] Filters the results to the specified type/types, where each type is one of `ROLE` or `ACCESS_PROFILE`. If absent, all types are returned. SailPoint may add support for additional types in the future without notice.
|
|
43275
43275
|
* @param {string} [term] Allows searching requestable access items with a partial match on the name or description. If `term` is provided, then the API will ignore the `filter` query parameter.
|
|
43276
43276
|
* @param {Array<RequestableObjectRequestStatusBeta>} [statuses] Filters the result to the specified status/statuses, where each status is one of `AVAILABLE`, `ASSIGNED`, or `PENDING`. Specifying this parameter without also specifying an `identity-id` parameter results in an error. SailPoint may add additional statuses in the future without notice.
|
|
43277
43277
|
* @param {number} [limit] Max number of results to return. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
|
|
@@ -43349,6 +43349,13 @@ var RequestableObjectsBetaApi = /** @class */ (function (_super) {
|
|
|
43349
43349
|
return RequestableObjectsBetaApi;
|
|
43350
43350
|
}(base_1.BaseAPI));
|
|
43351
43351
|
exports.RequestableObjectsBetaApi = RequestableObjectsBetaApi;
|
|
43352
|
+
/**
|
|
43353
|
+
* @export
|
|
43354
|
+
*/
|
|
43355
|
+
exports.ListRequestableObjectsTypesBeta = {
|
|
43356
|
+
AccessProfile: 'ACCESS_PROFILE',
|
|
43357
|
+
Role: 'ROLE'
|
|
43358
|
+
};
|
|
43352
43359
|
/**
|
|
43353
43360
|
* RoleInsightsBetaApi - axios parameter creator
|
|
43354
43361
|
* @export
|