# HERE Authorization API v1.1

**Canonical:** https://apis.io/apis/here/here-authorization-v1-1/  
**Provider:** HERE — https://apis.io/providers/here/  
**Base URL:** Use API Lookup for a base URL  
**Documentation:** https://docs.here.com/identity-and-access-management/reference

HERE Authorization API v1.1 is one of 71 APIs that [HERE](https://apis.io/providers/here/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Identity, Authorization, and IAM. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

HERE Authorization API v1.1 — 142 operation(s) across 93 path(s), OpenAPI 3.0.0 version 1.1.0, harvested verbatim from the HERE developer documentation. This specification is intended to describe the Authorization v1.1 APIs Roles OrgAdmin - An entity which has administrative authority over an organization. + Administrative rights include authority to: + Promote realm members to the OrgAdmin role + Promote realm members to the OrgInviter role + Promote realm members to the GroupAdmin role within all groups + Promote project members to the ProjectAdmin role + Promote realm members to the CrossRealmTrustManager role + All rights associated with the OrgInviter role + All rights associated with the CrossRealmTrustManager role + Create groups + Delete groups + Modify groups + Add/remove group members for all groups + Add/remove project members for all projects + Read/List project members for a Base URL is not fixed: the spec directs clients to resolve it at runtime through the HERE API Lookup Service (https://api-lookup.data.api.platform.here.com/lookup/v1).

## Operations (60 of 142)

| Method | Path | Summary |
|---|---|---|
| GET | `/roles` | Get Roles |
| GET | `/roles/me` | Get My Roles |
| GET | `/roles/{role}` | Get Role |
| GET | `/roles/{role}/permissions` | Get Role Permissions |
| GET | `/roles/{role}/permissions/{permission}` | Get Role Permission |
| GET | `/roles/{role}/filter` | Get Role Access Filter |
| POST | `/realms/{realm}/invites/{invite}` | Resend an invitation to a user in a realm |
| PUT | `/realms/{realm}/invites/{invite}` | Update and send an invitation to a user in a realm |
| DELETE | `/realms/{realm}/invites/{invite}` | Cancel a user invitation to a realm |
| GET | `/realms/{realm}/invites` | Search for invitations in a realm |
| POST | `/realms/{realm}/invites` | Create and send a user invitation for a realm |
| GET | `/realms/{realm}/invites/targets` | Get list of supported invite targets for the realm |
| GET | `/realms/{realm}/limits` | Get Realm limits |
| GET | `/realms/{realm}/members` | Get realm members |
| GET | `/realms/{realm}/members/{member}` | Get realm member |
| GET | `/realms/{realm}/members/{member}/roles` | Get entity roles |
| GET | `/realms/{realm}/members/{member}/groups` | Get entity group membership |
| GET | `/realms/{realm}/members/{member}/managedGroups` | Get entity managed group |
| GET | `/realms/{realm}/members/{member}/projects` | Get entity project membership |
| GET | `/realms/{realm}/members/{member}/plans` | Get Entity Plans |
| GET | `/realms/{realm}/members/{member}/plans/{plan}/policies` | Get Entity Plan Policies |
| GET | `/realms/{realm}/members/{member}/plans/{plan}/policies/{policy}/permissions` | Get Entity Plan Policy Permissions |
| GET | `/realms/{realm}/members/{member}/policies` | Get Entity Policies |
| GET | `/realms/{realm}/members/{member}/policies/{policy}/permissions` | Get Entity Policy Permissions |
| GET | `/realms/{realm}/members/{member}/permissions` | Get entity permissions |
| GET | `/realms/{realm}/members/{member}/filters` | Get Entity Access Filters |
| GET | `/realms/{realm}/members/{member}/filters/{filterHrn}` | Get Entity Access Filter |
| PUT | `/realms/{realm}/members/{member}/filters/{filterHrn}` | Attach Entity Access Filter |
| DELETE | `/realms/{realm}/members/{member}/filters/{filterHrn}` | Detach Entity Access Filter |
| GET | `/realms/{realm}/plans` | Get Realm Plans |
| GET | `/realms/{realm}/plans/{plan}/policies` | Get Realm Plan Policies |
| GET | `/realms/{realm}/plans/{plan}/policies/{policy}/permissions` | Get Realm Plan Policy Permissions |
| GET | `/realms/{realm}/policies` | Get Realm Policies |
| GET | `/realms/{realm}/policies/{policy}/permissions` | Get Policy Permissions |
| GET | `/realms/{realm}/resourcePlans` | Get Realm Resource Plans |
| GET | `/realms/{realm}/resourcePlans/{resourcePlan}/resourcePolicies` | Get Realm Resource Plan Resource Policies |
| GET | `/realms/{realm}/resourcePlans/{resourcePlan}/resourcePolicies/{resourcePolicy}/permissions` | Get Realm Resource Plan Resource Policy Permissions |
| GET | `/realms/{realm}/resourcePlans/{resourcePlan}/actionPolicies` | Get Realm Resource Plan Action Policies |
| GET | `/realms/{realm}/resourcePlans/{resourcePlan}/actionPolicies/{actionPolicy}/permissions` | Get Realm Resource Plan Action Policy Permissions |
| GET | `/realms/{realm}/linkable/permissions` | Get realm linkable permissions |
| GET | `/realms/{realm}/filter` | Get Realm Access Filter |
| POST | `/realms/{realm}/filter` | Attach Realm Access Filter |
| GET | `/realms/{realm}/permissions` | Get realm permissions |
| GET | `/roles/{role}/entities` | Get role entities |
| GET | `/roles/{role}/entities/{entity}` | Get a single role entity |
| POST | `/roles/{role}/entities/{entity}` | Assign a role to an entity |
| DELETE | `/roles/{role}/entities/{entity}` | Revoke a role from an entity |
| GET | `/groups/{groupId}/roles` | Get group roles |
| GET | `/groups` | Get groups |
| POST | `/groups` | Create group |
| GET | `/groups/{groupId}` | Get single group |
| POST | `/groups/{groupId}` | Update group |
| DELETE | `/groups/{groupId}` | delete group |
| GET | `/groups/{groupId}/policies` | Get Group Policies |
| GET | `/groups/{groupId}/policies/{policy}/permissions` | Get Group Policy Permissions |
| GET | `/groups/{groupId}/permissions` | Get group permissions |
| GET | `/groups/{groupId}/members` | Get Group members |
| DELETE | `/groups/{groupId}/members/me` | Removes the calling party from a group |
| POST | `/groups/{groupId}/members/{member}` | Add a member to a group |
| GET | `/groups/{groupId}/members/{member}` | Get single Group member |

…and 82 more operations. They are listed in full on the page.

## Machine-readable artifacts (4)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/here/refs/heads/main/openapi/here-authorization-v1-1-openapi.yml
- **Documentation** — https://docs.here.com/identity-and-access-management/docs
- **APIReference** — https://docs.here.com/identity-and-access-management/reference
- **Overlay** — https://raw.githubusercontent.com/api-evangelist/here/refs/heads/main/overlays/here-authorization-v1-1-overlay.yaml

## Other HERE APIs (12)

- [Here Account v1 APIs](https://apis.io/apis/here/here-account-v1/)
- [HERE API Lookup Service v1](https://apis.io/apis/here/here-api-lookup-v1/)
- [HERE Authentication API v1.1](https://apis.io/apis/here/here-authentication-v1-1/)
- [HERE Cost Management Usage API v2](https://apis.io/apis/here/here-cost-management-usage-v2/)
- [HERE Blob API v1](https://apis.io/apis/here/here-data-blob-v1/)
- [HERE Blob API v2](https://apis.io/apis/here/here-data-blob-v2/)
- [HERE Config API v1](https://apis.io/apis/here/here-data-config-v1/)
- [HERE Index API v1](https://apis.io/apis/here/here-data-index-v1/)
- [HERE Ingest API v1](https://apis.io/apis/here/here-data-ingest-v1/)
- [HERE Metadata API v1](https://apis.io/apis/here/here-data-metadata-v1/)
- [HERE Notification API](https://apis.io/apis/here/here-data-notification-v1/)
- [HERE Publish API v2](https://apis.io/apis/here/here-data-publish-v2/)

## Tags

Identity, Authorization, IAM

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/here/here-authorization-v1-1/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/here/.