Identity Domain Administrator
To grant an application access to the Oracle Identity Cloud Service REST API, you must first know the allowed operations that you need the application to access. Then, assign the AppRoles with access to those operations to your application.
The following table displays the endpoints and the allowed operations for that endpoint that an Identity Domain Administrator AppRole can access.
| Endpoint | Allowed Operations |
|---|---|
| AdminSharedFiles | GET |
| AccountMgmtInfos | ALL |
| AccountObjectClasses | ALL |
| AccountObjectClassTemplates | GET(Search), GET<ID> |
| AccountOwnerLinker | ALL |
| AccountPasswordResetter | ALL |
| AccountRecoverySettings | ALL |
| AccountStatusChanger | ALL |
| AdaptiveAccessSettings | ALL |
| AdaptiveEvents | ALL |
| AllIdentityProviders | GET(Search), POST/.search |
| AllowedValues | GET(Search), GET<ID> |
| AnalyticEvents | GET(Search), GET<ID> |
| AppAllowedScopesChanger | ALL |
| AppClientSecretRegenerator | ALL |
| AppEntitlementCollections | ALL |
| AppKerberosRealmUpdater | ALL |
| ApplicablePasswordPolicyRetriever | ALL |
| AppRoleExportJob | GET(Search), GET<ID> |
| AppRoleExportJobHistory | GET(Search), GET<ID> |
| AppRoleExportJobProgress | ALL |
| AppRoleExportJobReport | GET(Search), GET<ID> |
| AppRoleExportJobSchedule | ALL |
| AppRoleImportJob | GET(Search), GET<ID> |
| AppRoleImportJobHistory | GET(Search), GET<ID> |
| AppRoleImportJobProgressv | ALL |
| AppRoleImportJobReport | GET(Search), GET<ID> |
| AppRoleImportJobSchedule | ALL |
| AppRoleMembershipImportDetailedJobReports | GET(Search), GET<ID> |
| AppRoleMembershipImportSummaryJobReports | GET(Search), GET<ID> |
| AppRoles | ALL |
| Apps | ALL |
| AppStatusChanger | ALL |
| AppTemplates | GET(Search), GET<ID> |
| AppTemplateStatusChanger | GET(Search), GET<ID> |
| AppUpgrader | ALL |
| Asserter | ALL |
| AsyncTargetActions | ALL |
| AuditEvents | GET(Search), GET<ID> |
| AuthenticationFactorEnroller | POST |
| AuthenticationFactorEnrollmentRequest | POST |
| AuthenticationFactorInitiator | POST |
| AuthenticationFactorSettings | ALL |
| AuthenticationFactorsRemover | POST |
| AuthenticationFactorValidator | POST |
| BinaryFileInfos | GET(Search), GET<ID> |
| BrandingSettings | GET(Search), GET<ID> |
| Bulk | ALL for BulkUserPasswordResetJobProgress, BulkUserPasswordMustChangeSetJobProgress, BulkUserPasswordResetJobSchedule, BulkUserPasswordMustChangeSetJobSchedule GET(Search), GET<ID> for BulkUserPasswordResetJobHistory, BulkUserPasswordMustChangeSetJobReport, BulkUserPasswordMustChangeSetJobHistory, BulkUserPasswordResetJob, BulkUserPasswordMustChangeSetJob |
| BulkSourceEvents | ALL |
| BulkUserPasswordChanger | ALL |
| BulkUserPasswordResetJobReports | GET(Search), GET<ID> |
| BulkUserPasswordResetter | ALL |
| BypassCodeNotifications | POST |
| BypassCodes | ALL |
| ConnectorBundles | GET(Search), GET<ID> |
| CustomAllowedValues | ALL |
| ConditionGroups | ALL |
| Conditions | ALL |
| DBGroups | GET(Search), POST/.search, GET<ID> |
| DBUserAuthenticationStatus | PATCH |
| DBUsers | GET(Search), POST/.search, GET<ID> |
| Devices | ALL |
| DiagnosticRecords | GET(Search), GET<ID> |
| EmailTemplates | ALL |
| ExportJob | GET(Search), GET<ID> |
| ExportJobHistory | GET(Search), GET<ID> |
| ExportJobProgress | ALL |
| ExportJobReport | GET(Search), GET<ID> |
| ExportJobSchedule | ALL |
| ExternalIdentityProviders | GET(Search), POST/.search |
| Files | ALL |
| GrantEvaluationJob | GET(Search), GET<ID> |
| GrantEvaluationJobHistory | GET(Search), GET<ID> |
| GrantEvaluationJobProgress | ALL |
| GrantEvaluationJobReport | GET(Search), GET<ID> |
| GrantEvaluationJobSchedule | ALL |
| GrantImportDetailedJobReports | GET(Search), GET<ID> |
| GrantImportSummaryJobReports | GET(Search), GET<ID> |
| Grants | ALL |
| GroupExportJob | GET(Search), GET<ID> |
| GroupExportJobHistory | GET(Search), GET<ID> |
| GroupExportJobProgress | ALL |
| GroupExportJobReport | GET(Search), GET<ID> |
| GroupExportJobSchedule | ALL |
| GroupImportDetailedJobReports | GET(Search), GET<ID> |
| GroupImportJob | GET(Search), GET<ID> |
| GroupImportJobHistory | GET(Search), GET<ID> |
| GroupImportJobProgress | ALL |
| GroupImportJobReport | GET(Search), GET<ID> |
| GroupImportJobSchedule | ALL |
| GroupImportSummaryJobReports | GET(Search), GET<ID> |
| Groups | ALL |
| HTTPAuthenticator | ALL |
| IdBridgeAppRegistrar | ALL |
| IDBridgeConfig | GET(Search), GET<ID> |
| IDBridgeSettings | ALL |
| IDSGroups | ALL |
| IDSUsers | ALL |
| IdentityAgents | ALL |
| IdentityProviders | ALL |
| IdentitySettings | ALL |
| IdentitySourceContainers | ALL |
| IdentitySources | ALL |
| IdentitySourceTemplates | GET(Search), GET<ID> |
| Images | ALL |
| ImportJob | GET(Search), GET<ID> |
| ImportJobHistory | GET(Search), GET<ID> |
| ImportJobProgress | ALL |
| ImportJobReport | GET(Search), GET<ID> |
| ImportJobSchedule | ALL |
| IncidentDetails | GET(Search), GET<ID> |
| Jobs | GET(Search), GET<ID> |
| JobHistories | GET(Search), GET<ID> |
| JobProgress | GET(Search), GET<ID> |
| JobReports | GET(Search), GET<ID> |
| JobSchedules | GET(Search), GET<ID> |
| KerberosRealmUsers | ALL |
| LatestBinaryFileInfoVersionRetriever | GET(Search), GET<ID> |
| ManagedApp | ALL |
| ManagedAppAttributeMappings | ALL |
| ManagedAppConnectionTester | ALL |
| ManagedAppOperations | ALL |
| ManagedAppOperationTemplates | GET(Search), GET<ID> |
| ManagedObjectClassTemplates | GET(Search), GET<ID> |
| ManagedObjectSyncDetailedJobReports | GET(Search), GET<ID> |
| ManagedObjectSyncJob | GET(Search), GET<ID> |
| ManagedObjectSyncJobHistory | GET(Search), GET<ID> |
| ManagedObjectSyncJobProgress | ALL |
| ManagedObjectSyncJobReports | GET(Search), GET<ID> |
| ManagedObjectSyncJobSchedule | ALL |
| MappedActions | ALL |
| MappedActionTemplates | GET(Search), GET<ID> |
| MappedAttributes | ALL |
| MappedAttributeTemplates | GET(Search), GET<ID> |
| MappedIdcsAttributes | ALL |
| Me | GET, PATCH, PUT |
| MeEmailVerified | ALL |
| MeEmailVerifier | ALL |
| MePasswordMustChanger | ALL |
| MePasswordRecoveryFactorValidator | ALL |
| MePasswordRecoveryOptionRetriever | ALL |
| MePasswordResetChanger | ALL |
| MePasswordResetRequestor | ALL |
| MePasswordResetter | ALL |
| MeRemovePendingEmailVerification | POST |
| MeSecurityQuestionAnswerValidator | ALL |
| MeSecurityQuestionsRetriever | ALL |
| MyAppFavoriteSetter | ALL |
| MyApps | ALL |
| MyAccesses | ALL |
| MyAuthenticationFactorEnroller | POST |
| MyAuthenticationFactorInitiator | POST |
| MyAuthenticationFactorsRemover | POST |
| MyAuthenticationFactorValidator | POST |
| MyBypassCodeNotifications | POST |
| MyBypassCodes | DELETE, POST, GET(Search), POST/.search, GET<ID> |
| MyDevices | DELETE, GET(Search), GET<ID>, PATCH |
| MyGroups | GET(Search), POST/.search |
| MePasswordChanger | ALL |
| MyRequestableApps | GET(Search), POST/.search |
| MyRequestableGroups | GET(Search), POST/.search |
| MyRequests | POST, GET(Search), POST/.search |
| MySFFCredentials | ALL |
| MySocialAccountLinker | POST |
| MySocialAccounts | ALL |
| MyTermsOfUseConsents | DELETE, GET(Search), POST/.search, GET<ID> |
| MyTrustedUserAgents | DELETE, GET(Search), GET<ID> |
| Notifications | ALL |
| NotificationSettings | ALL |
| OAuthClientCertificates | ALL |
| OAuthPartnerCertificates | ALL |
| ObjectMgmtInfos | ALL |
| PasswordAuthenticator | ALL |
| NetworkPerimeters | ALL |
| PasswordPolicies | ALL |
| Policies | ALL |
| PushNotificationRequesters | ALL |
| RefreshAccessStatisticsJob | GET(Search), GET<ID> |
| RefreshAccessStatisticsJobHistory | GET(Search), GET<ID> |
| RefreshAccessStatisticsJobProgress | ALL |
| RefreshAccessStatisticsJobReport | GET(Search), GET<ID> |
| RefreshAccessStatisticsJobSchedule | ALL |
| RefreshAppAccessTokensJob | GET(Search), GET<ID> |
| RefreshAppAccessTokensJobHistory | GET(Search), GET<ID> |
| RefreshAppAccessTokensJobProgress | GET(Search), GET<ID> |
| RefreshAppAccessTokensJobSchedule | ALL |
| Reports | POST |
| Requests | GET(Search), POST/.search |
| ResourceExporter | POST |
| ResourceImporter | POST |
| RiskLevelUpdateJob | GET(Search), GET<ID> |
| RiskLevelUpdateJobHistory | GET(Search), GET<ID> |
| RiskLevelUpdateJobProgress | ALL |
| RiskLevelUpdateJobReport | GET(Search), GET<ID> |
| RiskLevelUpdateJobSchedule | ALL |
| RiskProviderProfiles | ALL |
| RiskProviderProfileValidation | ALL |
| RiskScoreCleanupJob | GET(Search), GET<ID> |
| RiskScoreCleanupJobHistory | GET(Search), GET<ID> |
| RiskScoreCleanupJobProgress | ALL |
| RiskScoreCleanupJobReport | GET(Search), GET<ID> |
| RiskScoreCleanupJobSchedule | ALL |
| RiskScoreHistories | ALL |
| RiskScoreProviderJob | GET(Search), GET<ID> |
| RiskScoreProviderJobHistory | GET(Search), GET<ID> |
| RiskScoreProviderJobProgress | ALL |
| RiskScoreProviderJobReport | GET(Search), GET<ID> |
| RiskScoreProviderJobSchedule | ALL |
| RiskScoreTemporalDecayJob | GET(Search), GET<ID> |
| RiskScoreTemporalDecayJobHistory | GET(Search), GET<ID> |
| RiskScoreTemporalDecayJobProgress | ALL |
| RiskScoreTemporalDecayJobReport | GET(Search), GET<ID> |
| RiskScoreTemporalDecayJobSchedule | ALL |
| Rules | ALL |
| SafeDeleteSocialIdentityProviderJob | GET(Search), GET<ID> |
| SafeDeleteSocialIdentityProviderJobHistory | GET(Search), GET<ID> |
| SafeDeleteSocialIdentityProviderJobProgress | GET(Search), GET<ID> |
| SafeDeleteSocialIdentityProviderJobSchedule | ALL |
| SafeDeleteSocialIdentityProviderJobReport | GET(Search), GET<ID> |
| SamlSettings | ALL |
| Schemas | GET(Search), POST/.search, GET<ID>, PUT, PATCH |
| SecurityQuestions | ALL |
| SecurityQuestionSettings | ALL |
| SelfRegistrationProfiles | ALL |
| Settings | ALL |
| SFFCustomApps | ALL |
| SffXtnUrl | GET(Search), GET<ID> |
| SigningCert/jwk | GET(Search), GET<ID> |
| SMSTemplates | ALL |
| SocialAccounts | ALL |
| SocialIdentityProviders | ALL |
| SourceEvents | ALL |
| SsoSettings | ALL |
| SyncEvents | ALL |
| Tags | GET(Search), POST/.search, GET<ID> |
| TargetActionResults | ALL |
| TargetActions | ALL |
| TargetAuthenticationTester | POST |
| TermsOfUseConsents | ALL |
| TermsOfUses | ALL |
| TermsOfUseStatements | ALL |
| Threats | ALL |
| TrustedUserAgents | ALL |
| UnMappedIdcsAttributes | GET(Search), POST/.search, GET<ID>, PATCH |
| UserActivationInitiator | ALL |
| UserAgentLocations | ALL |
| UserAttributesSettings | GET(Search), POST, POST/.search, GET<ID>, PATCH |
| UserAuditEventsPurger | ALL |
| UserAppsEnabledForAuthentication | GET(Search), GET<ID> |
| UserAppsEnabledForDelegatedAuthentication | GET(Search), GET<ID> |
| UserDevices | ALL |
| UserExportJob | GET(Search), GET<ID> |
| UserExportJobHistory | GET(Search), GET<ID> |
| UserExportJobReport | GET(Search), GET<ID> |
| UserExportJobSchedule | ALL |
| UserImportJob | GET(Search), GET<ID> |
| UserImportJobHistory | GET(Search), GET<ID> |
| UserImportJobProgress | ALL |
| UserImportJobReport | GET(Search), GET<ID> |
| UserImportJobSchedule | ALL |
| UserLockedStateChanger | POST |
| UserNameGenerator | ALL |
| UserPasswordChanger | ALL |
| UserPasswordGenerator | ALL |
| UserPasswordResetter | ALL |
| UserPasswordValidator | ALL |
| UserSharedFiles | GET |
| UserStateChanger | ALL |
| UserTokens | ALL |
| UserTokenValidator | ALL |
| Users | ALL |
| UserStatusChanger | PUT |
| WebTierPolicyJsonValidator | ALL |