Delinea · Agentic Access
Delinea Agentic Access
x-agentic-access
generated
Delinea exposes 1037 API operations that an AI agent could call, of which 524 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 513 read, 484 write, 12 physical, and 28 safety-critical.
28 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
Privileged Access ManagementPAMSecrets ManagementIdentity SecurityDevOpsCybersecurity
Operations: 1037
Acting: 524
Human-in-the-loop: 28
Method: generated
By consequence
read 513
write 484
physical 12
safety-critical 28
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /v1/bulk-secret-operations/disable-autochange | safety-critical | required |
| POST | /v1/bulk-secret-operations/disable-checkout | safety-critical | required |
| POST | /v1/bulk-secret-operations/disable-dependencies | safety-critical | required |
| POST | /v1/bulk-secret-operations/disable-heartbeat | safety-critical | required |
| POST | /v1/bulk-secret-operations/disable-hide-launcher-password | safety-critical | required |
| POST | /v1/bulk-secret-operations/disable-require-view-comment | safety-critical | required |
| POST | /v1/bulk-user-operations/disable | safety-critical | required |
| POST | /v1/bulk-user-operations/disable-duo-auth | safety-critical | required |
| POST | /v1/bulk-user-operations/disable-email-two-factor | safety-critical | required |
| POST | /v1/bulk-user-operations/disable-fido2-two-factor | safety-critical | required |
| POST | /v1/bulk-user-operations/disable-radius-two-factor | safety-critical | required |
| POST | /v1/bulk-user-operations/disable-totp-auth | safety-critical | required |
| POST | /v1/bulk-user-operations/reset-fido2-two-factor | safety-critical | required |
| POST | /v1/bulk-user-operations/reset-totp-auth | safety-critical | required |
| POST | /v1/dual-controls | safety-critical | required |
| POST | /v1/dual-controls/auth/{dualControlType}/{id} | safety-critical | required |
| PUT | /v1/dual-controls/{id} | safety-critical | required |
| DELETE | /v1/dual-controls/{id} | safety-critical | required |
| POST | /v1/platform/reset-user-mappings | safety-critical | required |
| POST | /v1/proxy/ssh/client-overrides | safety-critical | required |
| DELETE | /v1/proxy/ssh/client-overrides/{clientOverrideId} | safety-critical | required |
| PATCH | /v1/proxy/ssh/client-overrides/{clientOverrideId} | safety-critical | required |
| POST | /v1/sdk-client-accounts/{id}/revoke | safety-critical | required |
| DELETE | /v1/secret-templates/fields/{templateFieldId} | safety-critical | required |
| POST | /v1/secrets/{id}/stop-password-change | safety-critical | required |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/delinea-secret-server-openapi.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 1037
by_action_class:
acting: 524
connected: 513
by_consequence:
write: 484
read: 513
safety-critical: 28
physical: 12
human_in_the_loop_required: 28
operations:
- path: /v1/activations
method: post
operationId: ActivationsService_Activate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/active-directory/synchronize
method: post
operationId: ActiveDirectoryService_Synchronize
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/advanced-config-settings/{id}
method: delete
operationId: AdvancedConfigSettingsService_Delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/advanced-config-settings
method: get
operationId: AdvancedConfigSettingsService_Get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/advanced-config-settings
method: put
operationId: AdvancedConfigSettingsService_Put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/advanced-config-settings
method: post
operationId: AdvancedConfigSettingsService_Post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/api-token/generate-token
method: get
operationId: ApiTokenService_GetToken
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/app-clients/{id}
method: get
operationId: AppClientsService_GetClient
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/app-clients/{id}
method: put
operationId: AppClientsService_UpdateClient
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/app-clients/{id}
method: delete
operationId: AppClientsService_DeleteClient
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/app-clients/stub
method: get
operationId: AppClientsService_Stub
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/app-clients
method: post
operationId: AppClientsService_CreateClient
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/application-accounts/lookup
method: get
operationId: ApplicationAccountsService_LookupAccount
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/application-access-requests
method: get
operationId: ApplicationRequestService_SearchRequestsByStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/application-access-request/{deviceId}
method: get
operationId: ApplicationRequestService_GetRequestByDeviceId
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/application-access-request/{deviceId}
method: patch
operationId: ApplicationRequestService_UpdateRequest
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/application-access-request-audits
method: get
operationId: ApplicationRequestService_GetAudits
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/app-state
method: get
operationId: AppStateService_GetAppState
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/bulk-operations/{id}/progress
method: get
operationId: BulkOperationsService_GetProgress
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/bulk-secret-operations/add-share
method: post
operationId: BulkSecretOperationsService_AddSharePermissionsToSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/assign-site
method: post
operationId: BulkSecretOperationsService_AssignSecretsToSite
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/assign-jumpbox-route
method: post
operationId: BulkSecretOperationsService_AssignSecretsToJumpboxRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/assign-secret-policy
method: post
operationId: BulkSecretOperationsService_AssignSecretsToSecretPolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/change-password-remotely
method: post
operationId: BulkSecretOperationsService_ChangeSecretsPasswordsRemotely
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/convert-type
method: post
operationId: BulkSecretOperationsService_ConvertSecretsToSecretType
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/deactivate
method: post
operationId: BulkSecretOperationsService_DeactivateSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/disable-autochange
method: post
operationId: BulkSecretOperationsService_DisableAutoChangeSecrets
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-secret-operations/disable-checkout
method: post
operationId: BulkSecretOperationsService_DisableCheckoutSecrets
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-secret-operations/disable-heartbeat
method: post
operationId: BulkSecretOperationsService_DisableHeartbeatSecrets
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-secret-operations/disable-require-view-comment
method: post
operationId: BulkSecretOperationsService_DisableRequireViewCommentSecrets
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-secret-operations/enable-autochange
method: post
operationId: BulkSecretOperationsService_EnableAutoChangeSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/enable-checkout
method: post
operationId: BulkSecretOperationsService_EnableCheckoutSecrets
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/request-erase
method: post
operationId: BulkSecretOperationsService_RequestEraseSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/change-security-options
method: post
operationId: BulkSecretOperationsService_ChangeSecurityOptionsSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/enable-require-view-comment
method: post
operationId: BulkSecretOperationsService_EnableRequireViewCommentSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/enable-heartbeat
method: post
operationId: BulkSecretOperationsService_EnableHeartbeatSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/edit-share
method: post
operationId: BulkSecretOperationsService_EditSharePermissionsSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/enable-hide-launcher-password
method: post
operationId: BulkSecretOperationsService_EnableHideLauncherPasswordSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/enable-inherit-permissions
method: post
operationId: BulkSecretOperationsService_EnableInheritPermissionsSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/move-to-folder
method: post
operationId: BulkSecretOperationsService_MoveSecretsToFolder
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/run-heartbeat
method: post
operationId: BulkSecretOperationsService_RunHeartbeatForSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/update-password-requirement
method: post
operationId: BulkSecretOperationsService_UpdatePasswordRequirementForSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/set-privileged-account
method: post
operationId: BulkSecretOperationsService_SetPrivilegedAccountForSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/update-associated-secrets
method: post
operationId: BulkSecretOperationsService_UpdateAssociatedSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/set-dependencies-password
method: post
operationId: BulkSecretOperationsService_SetDependenciesPassword
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/enable-dependencies
method: post
operationId: BulkSecretOperationsService_EnableDependencies
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/delete-dependencies
method: post
operationId: BulkSecretOperationsService_DeleteDependencies
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/disable-dependencies
method: post
operationId: BulkSecretOperationsService_DisableDependencies
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-secret-operations/activate
method: post
operationId: BulkSecretOperationsService_ActivateSecrets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-secret-operations/disable-hide-launcher-password
method: post
operationId: BulkSecretOperationsService_DisableHideLauncherPasswordForSecrets
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-user-operations/enable
method: post
operationId: BulkUserOperationsService_EnableUsers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/disable
method: post
operationId: BulkUserOperationsService_DisableUsers
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-user-operations/enable-email-two-factor
method: post
operationId: BulkUserOperationsService_EnableEmailTwoFactorForUsers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/disable-email-two-factor
method: post
operationId: BulkUserOperationsService_DisableEmailTwoFactorForUsers
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-user-operations/enable-radius-two-factor
method: post
operationId: BulkUserOperationsService_EnableRadiusTwoFactorForUsers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/disable-radius-two-factor
method: post
operationId: BulkUserOperationsService_DisableRadiusTwoFactorForUsers
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-user-operations/enable-totp-auth
method: post
operationId: BulkUserOperationsService_EnableTOTPAuthForUsers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/disable-totp-auth
method: post
operationId: BulkUserOperationsService_DisableTOTPAuthForUsers
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-user-operations/reset-totp-auth
method: post
operationId: BulkUserOperationsService_ResetTOTPAuthForUsers
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-user-operations/enable-duo-auth
method: post
operationId: BulkUserOperationsService_EnableDuoAuthForUsers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/disable-duo-auth
method: post
operationId: BulkUserOperationsService_DisableDuoAuthForUsers
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-user-operations/enable-fido2-two-factor
method: post
operationId: BulkUserOperationsService_EnableFido2TwoFactorForUsers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/disable-fido2-two-factor
method: post
operationId: BulkUserOperationsService_DisableFido2TwoFactorForUsers
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-user-operations/reset-fido2-two-factor
method: post
operationId: BulkUserOperationsService_ResetFido2TwoFactorForUsers
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/bulk-user-operations/force-logout
method: post
operationId: BulkUserOperationsService_ForceLogoutForUsers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/lock
method: post
operationId: BulkUserOperationsService_LockUsers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/unlock
method: post
operationId: BulkUserOperationsService_UnlockUsers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/add-to-group
method: post
operationId: BulkUserOperationsService_AddUsersToGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/remove-from-group
method: post
operationId: BulkUserOperationsService_RemoveUsersFromGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/add-to-team
method: post
operationId: BulkUserOperationsService_AddUsersToTeam
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bulk-user-operations/remove-from-team
method: post
operationId: BulkUserOperationsService_RemoveUsersFromTeam
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bundle/export
method: post
operationId: BundleService_GetExport
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists/{categorizedListId}
method: get
operationId: CategorizedListsService_GetList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/lists/{categorizedListId}
method: put
operationId: CategorizedListsService_UpdateList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists/{categorizedListId}
method: delete
operationId: CategorizedListsService_DeleteList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists/{categorizedListId}/options
method: get
operationId: CategorizedListsService_GetListItems
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/lists/{categorizedListId}/options
method: put
operationId: CategorizedListsService_UpdateItemsInList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists/{categorizedListId}/options
method: post
operationId: CategorizedListsService_AddItemsToList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists/{categorizedListId}/options
method: delete
operationId: CategorizedListsService_RemoveItemsFromList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists/{listId}/options/{optionId}
method: delete
operationId: CategorizedListsService_RemoveItemFromList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists
method: get
operationId: CategorizedListsService_Search
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/lists
method: post
operationId: CategorizedListsService_CreateList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists/summary
method: get
operationId: CategorizedListsService_GetAllListsUserMaySee
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/lists/{categorizedListId}/categories
method: get
operationId: CategorizedListsService_GetCategoriesForList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/lists/{categorizedListId}/audits
method: get
operationId: CategorizedListsService_SearchListAudit
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/lists/{categorizedListId}/options/single
method: put
operationId: CategorizedListsService_UpdateItemInList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists/{categorizedListId}/options/single
method: post
operationId: CategorizedListsService_AddItemToList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/lists/{categorizedListId}/options/{category}
method: po
# --- truncated at 32 KB (319 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/delinea/refs/heads/main/agentic-access/delinea-agentic-access.yml