Security Administrator
To grant an application access to the Oracle Identity Cloud Service REST API, you must first know the allowed operations that you need the application to access. Then, assign the AppRoles with access to those operations to your application.
The following table displays the endpoints and the allowed operations for that endpoint that a Security Administrator AppRole can access.
| Endpoint | Allowed Operations |
|---|---|
| AdminSharedFiles | GET/<ID> |
| AccountObjectClassTemplates | GET(Search), GET/<ID> |
| AccountRecoverySettings | ALL |
| AdaptiveAccessSettings | ALL |
| AdaptiveEvents | ALL |
| AllIdentityProviders | ALL |
| AnalyticEvents | GET(Search), GET/<ID> |
| AppClientSecretRegenerator | ALL |
| ApplicablePasswordPolicyRetriever | ALL |
| Apps | ALL |
| AppTemplates | GET(Search), GET/<ID> |
| AppTemplateStatusChanger | GET(Search), GET/<ID> |
| AuditEvents | GET(Search), GET/<ID> |
| AuthenticationFactorEnroller | GET(Search), GET/<ID> |
| AuthenticationFactorEnrollmentRequest | GET(Search), GET/<ID> |
| AuthenticationFactorSettings | ALL |
| AuthenticationFactorInitiator | GET(Search), GET/<ID> |
| AuthenticationFactorsRemover | GET(Search), GET/<ID> |
| AuthenticationFactorValidator | GET(Search), GET/<ID> |
| BinaryFileInfos | GET(Search), GET/<ID> |
| BrandingSettings | ALL |
| Bulk | ALL |
| BulkReports | POST |
| BypassCodes | GET(Search), GET/<ID> |
| Columns | GET(Search), GET/<ID> |
| ConditionGroups | ALL |
| Conditions | ALL |
| ConnectorBundles | GET(Search), GET/<ID> |
| Devices | GET(Search), GET/<ID> |
| EmailTemplates | ALL |
| ExternalIdentityProviders | ALL |
| Files | GET(Search), GET/<ID> |
| Groups | GET(Search), GET/<ID> |
| IdBridgeAppRegistrar | ALL |
| IDBridgeConfig | GET(Search), GET/<ID> |
| IDBridgeSettings | ALL |
| IdentitySettings | ALL |
| IdentityAgents | ALL |
| IdentityProviders | ALL |
| IdentitySourceContainers | ALL |
| IdentitySources | ALL |
| IDSGroups | GET(Search), GET/<ID> |
| IdcsReports | POST |
| IDSUsers | GET(Search), GET/<ID> |
| Images | ALL |
| IncidentDetails | GET(Search), GET/<ID> |
| LatestBinaryFileInfoVersionRetriever | GET(Search), GET/<ID> |
| MappedActionTemplates | GET(Search), GET/<ID> |
| MappedAttributeTemplates | GET(Search), GET/<ID> |
| MappedIdcsAttributes | ALL |
| ManagedAppOperationTemplates | GET(Search), GET/<ID> |
| ManagedObjectClassTemplates | GET(Search), GET/<ID> |
| NetworkPerimeters | ALL |
| Notifications | ALL |
| NotificationSettings | ALL |
| OAuthClientCertificates | ALL |
| OAuthPartnerCertificates | ALL |
| PasswordPolicies | ALL |
| Policies | ALL |
| PushNotificationRequesters | ALL |
| Reports | POST |
| ReportTemplates | GET(Search), GET/<ID> |
| RiskProviderProfiles | ALL |
| RiskProviderProfileValidation | ALL |
| RiskScoreHistories | ALL |
| Rules | ALL |
| SamlSettings | ALL |
| SecurityQuestionSettings | ALL |
| Settings | ALL |
| SFFCustomApps | ALL |
| SigningCert/jwk | GET(Search), GET/<ID> |
| SMSTemplates | ALL |
| SocialAccounts | GET(Search), GET/<ID> |
| SocialIdentityProviders | ALL |
| SsoSettings | ALL |
| SupportedSocialIdentityProviders | GET |
| TargetAuthenticationTester | POST |
| TermsOfUseConsents | GET(Search), GET/<ID> |
| TermsOfUses | ALL |
| TermsOfUseStatements | ALL |
| Threats | ALL |
| TrustedUserAgents | GET(Search), GET/<ID> |
| UnMappedIdcsAttributes | GET(Search), GET/<ID> |
| UserAgentLocations | ALL |
| UserAppsEnabledForAuthentication | GET(Search), GET/<ID> |
| UserAppsEnabledForDelegatedAuthentication | GET(Search), GET/<ID> |
| UserAuditEventsPurger | ALL |
| UserDevices | ALL |
| Users | GET(Search), GET/<ID> |