ロール権限の更新
ユーザーのロールはリクエストを介して更新されます。URI /requests POST
では、ロールの追加を許可します。URI /requests DELETE
では、まだ承認されていないロール・リクエストを取り下げます。リクエストが承認されると、実際に更新が行われます。
cURLの例: ロールのリクエスト
curl -H "Content-Type: application/json" -H "X-Requested-By: <anyvalue>" -X POST -u username:password -d @post.json https://pseudo.com/iam/governance/selfservice/api/v1/requests
POSTリクエスト本文
{ "requests" :[ { "requestId": "Req1001", "reqJustification" : "Request role for sub-ordinate", "reqBeneficiaryList": [ { "id": "24" } ], "reqTargetEntities": [ { "entityId": "12", "entityType": "role", "startDate" : "2019-06-20T01:30:00Z", "endDate" : "2019-09-25T18:30:00Z" }, { "entityId": "13", "entityType": "role", "startDate" : "2019-06-20T01:30:00Z", "endDate" : "2019-09-25T18:30:00Z" } ] } ] }
POSTレスポンス本文
{ "links": [ { "rel": "self", "href": "https://pseudo.com/iam/governance/selfservice/api/v1/requests" } ], "requests": [ { "links": [ { "rel": "self", "href": "https://pseudo.com/iam/governance/selfservice/api/v1/requests/1003" } ], "id": "1003", "requestId": "Req1001", "reqStatus": "Request Created", "status": "SUCCESS" } ] }
cURLの例: ロール・リクエストの取下げ
curl -H "Content-Type: application/json" -H "X-Requested-By: <anyvalue>" -X DELETE -u username:password -d @post.json https://pseudo.com/iam/governance/selfservice/api/v1/requests/1003
DELETEレスポンス本文
{ "links": [ { "rel": "self", "href": "https://pseudo.com/iam/governance/adminservice/api/v1/requests/1003" } ], "id": "1003", "status": "withdrawn" }