Every API here is available over the APIs.io API and to AI agents over MCP.
openapi: 3.2.0
info:
contact:
name: JumpCloud Support
url: https://jumpcloud.com/support/contact-jumpcloud-support
description: '# Overview
JumpCloud''s V2 API. This set of endpoints allows JumpCloud customers to manage objects, groupings and mappings and interact with the JumpCloud Graph. > **Note:** See JumpCloud Data Centers: Login URLs and Service Endpoints to learn more. ## API Best Practices
Read the linked Help Article below for guidance on retrying failed requests to JumpCloud''s REST API, as well as best practices for structuring subsequent retry requests. Customizing retry mechanisms based on these recommendations will increase the reliability and dependability of your API calls. Covered topics include:
1. Important Considerations
2. Supported HTTP Request Methods
3. Response codes
4. API Key rotation
5. Paginating
6. Error handling
7. Retry rates
JumpCloud Help Center - API Best Practices
# Directory Objects
This API offers the ability to interact with some of our core features; otherwise known as Directory Objects. The Directory Objects are:
* Commands
* Policies
* Policy Groups
* Applications
* Systems
* Users
* User Groups
* System Groups
* Radius Servers
* Directories: Office 365, LDAP,G-Suite, Active Directory
* Duo accounts and applications. The Directory Object is an important concept to understand in order to successfully use JumpCloud API. ## JumpCloud Graph
We''ve also introduced the concept of the JumpCloud Graph along with Directory Objects. The Graph is a powerful aspect of our platform which will enable you to associate objects with each other, or establish membership for certain objects to become members of other objects. Specific `GET` endpoints will allow you to traverse the JumpCloud Graph to return all indirect and directly bound objects in your organization. | !alt text |
|:--:|
| **This diagram highlights our association and membership model as it relates to Directory Objects.** |
# API Key
## Access Your API Key
To locate your API Key:
1. Log into the JumpCloud Admin Console. 2. Go to the username drop down located in the top-right of the Console. 3. Retrieve your API key from API Settings. ## API Key Considerations
This API key is associated to the currently logged in administrator. Other admins will have different API keys. **WARNING** Please keep this API key secret, as it grants full access to any data accessible via your JumpCloud console account. You can also reset your API key in the same location in the JumpCloud Admin Console. ## Recycling or Resetting Your API Key
In order to revoke access with the current API key, simply reset your API key. This will render all calls using the previous API key inaccessible. Your API key will be passed in as a header with the header name "x-api-key". ```bash
curl -H "x-api-key: [YOUR_API_KEY_HERE]" "https://console.jumpcloud.com/api/v2/systemgroups"
```
# System Context
* Introduction
* Supported endpoints
* Response codes
* Authentication
* Additional examples
* Third party
## Introduction
JumpCloud System Context Authorization is an alternative way to authenticate with a subset of JumpCloud''s REST APIs. Using this method, a system can manage its information and resource associations, allowing modern auto provisioning environments to scale as needed. **Notes:**
* The following documentation applies to Linux Operating Systems only. * Systems that have been automatically enrolled using Apple''s Device Enrollment Program (DEP) or systems enrolled using the User Portal install are not eligible to use the System Context API to prevent unauthorized access to system groups and resources. If a script that utilizes the System Context API is invoked on a system enrolled in this way, it will display an error. ## Supported Endpoints
JumpCloud System Context Authorization can be used in conjunction with Systems endpoints found in the V1 API and certain System Group endpoints found in the v2 API.'
title: JumpCloud Groups API
version: '2.0'
servers:
- url: https://console.jumpcloud.com/api/v2
description: United States (US)
x-jc-region: us
- url: https://console.eu.jumpcloud.com/api/v2
description: European Union (EU)
x-jc-region: eu
- url: https://console.in.jumpcloud.com/api/v2
description: India (IN)
x-jc-region: in
tags:
- name: Groups
paths:
/groups:
parameters: []
x-functionalities-tags:
- groups
get:
description: 'This endpoint returns all Groups that exist in your organization.
#### Available filter fields:
- `name`
- `disabled`
- `type`
- `memberQueryErrorFlags`
#### Sample Request
```
curl -X GET \
https://console.jumpcloud.com/api/v2/groups \
-H ''accept: application/json'' \
-H ''content-type: application/json'' \
-H ''x-api-key: {API_KEY}''
```'
operationId: groups_list
parameters:
- $ref: '#/components/parameters/trait_fields_fields'
- $ref: '#/components/parameters/trait_filter_filter'
- $ref: '#/components/parameters/trait_limit_limit'
- $ref: '#/components/parameters/trait_skip_skip'
- $ref: '#/components/parameters/trait_sort_sort'
- $ref: '#/components/parameters/trait_multiTenantRequestHeaders_x-org-id'
- $ref: '#/components/parameters/trait_listCount_x-unfiltered-total-count'
responses:
'200':
description: OK
content:
application/json:
schema:
items:
$ref: '#/components/schemas/Group'
type: array
default:
description: Unexpected error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
security:
- x-api-key: []
summary: List All Groups
tags:
- Groups
x-scopes:
- groups
- groups.readonly
x-codeSamples:
- lang: Shell
source: "curl --request GET \\\n --url 'https://console.jumpcloud.com/api/v2/groups?fields=SOME_ARRAY_VALUE&filter=SOME_ARRAY_VALUE&limit=SOME_INTEGER_VALUE&skip=SOME_INTEGER_VALUE&sort=SOME_ARRAY_VALUE' \\\n --header 'x-api-key: REPLACE_KEY_VALUE' \\\n --header 'x-org-id: SOME_STRING_VALUE' \\\n --header 'x-unfiltered-total-count: SOME_INTEGER_VALUE'"
- lang: Python
source: "import requests\n\nurl = \"https://console.jumpcloud.com/api/v2/groups\"\n\nquerystring = {\"fields\":\"SOME_ARRAY_VALUE\",\"filter\":\"SOME_ARRAY_VALUE\",\"limit\":\"SOME_INTEGER_VALUE\",\"skip\":\"SOME_INTEGER_VALUE\",\"sort\":\"SOME_ARRAY_VALUE\"}\n\nheaders = {\n \"x-org-id\": \"SOME_STRING_VALUE\",\n \"x-unfiltered-total-count\": \"SOME_INTEGER_VALUE\",\n \"x-api-key\": \"REPLACE_KEY_VALUE\"\n}\n\nresponse = requests.request(\"GET\", url, headers=headers, params=querystring)\n\nprint(response.text)"
- lang: Powershell
source: '$headers=@{}
$headers.Add("x-org-id", "SOME_STRING_VALUE")
$headers.Add("x-unfiltered-total-count", "SOME_INTEGER_VALUE")
$headers.Add("x-api-key", "REPLACE_KEY_VALUE")
$response = Invoke-RestMethod -Uri ''https://console.jumpcloud.com/api/v2/groups?fields=SOME_ARRAY_VALUE&filter=SOME_ARRAY_VALUE&limit=SOME_INTEGER_VALUE&skip=SOME_INTEGER_VALUE&sort=SOME_ARRAY_VALUE'' -Method GET -Headers $headers'
/providers/{provider_id}/usergroups/{group_id}/associations:
parameters:
- name: provider_id
in: path
required: true
description: The ID of the provider
schema:
type: string
- name: group_id
in: path
required: true
description: The ID of the user group
schema:
type: string
x-functionalities-tags:
- groups
- mtp-account-overview
post:
description: 'Creates or deletes an association between a user group and a secondary organization.
This endpoint is the core mechanism for sharing or un-sharing a user group.
The caller must belong to the owner organization (the provider''s primary organization).
#### Sample Request
```
curl -X POST https://console.jumpcloud.com/api/v2/providers/{provider_id}/usergroups/{group_id}/associations \
-H ''accept: application/json'' \
-H ''content-type: application/json'' \
-H ''x-org-id: -'' \
-H ''x-api-key: {API_KEY}'' \
-d ''{
"op": "add",
"type": "organization",
"id": "org-secondary-12345"
}''
```'
operationId: providers_userGroupsManageAssociations
requestBody:
$ref: '#/components/requestBodies/ManageAssociations-Group'
responses:
'204':
description: Association successfully created or deleted
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetails'
'401':
description: Unauthorized
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'403':
description: Forbidden
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Not Found - provider, group, or organization not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'409':
description: Conflict - group is already shared to the target organization
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Internal Server Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
security:
- x-api-key: []
summary: Manage User Group Associations for Provider
tags:
- Groups
x-scopes:
- providers
- directories
x-codeSamples:
- lang: Shell
source: "curl --request POST \\\n --url https://console.jumpcloud.com/api/v2/providers/{provider_id}/usergroups/{group_id}/associations \\\n --header 'content-type: application/json' \\\n --header 'x-api-key: REPLACE_KEY_VALUE' \\\n --data '{\"id\":\"string\",\"op\":\"add\",\"attributes\":{},\"type\":\"organization\"}'"
- lang: Python
source: "import requests\n\nurl = \"https://console.jumpcloud.com/api/v2/providers/{provider_id}/usergroups/{group_id}/associations\"\n\npayload = {\n \"id\": \"string\",\n \"op\": \"add\",\n \"attributes\": {},\n \"type\": \"organization\"\n}\nheaders = {\n \"x-api-key\": \"REPLACE_KEY_VALUE\",\n \"content-type\": \"application/json\"\n}\n\nresponse = requests.request(\"POST\", url, json=payload, headers=headers)\n\nprint(response.text)"
- lang: Powershell
source: '$headers=@{}
$headers.Add("x-api-key", "REPLACE_KEY_VALUE")
$headers.Add("content-type", "application/json")
$response = Invoke-RestMethod -Uri ''https://console.jumpcloud.com/api/v2/providers/{provider_id}/usergroups/{group_id}/associations'' -Method POST -Headers $headers -ContentType ''application/json'' -Body ''{"id":"string","op":"add","attributes":{},"type":"organization"}'''
/providers/{provider_id}/systemgroups/{group_id}/associations:
parameters:
- name: provider_id
in: path
required: true
description: The ID of the provider
schema:
type: string
- name: group_id
in: path
required: true
description: The ID of the system group
schema:
type: string
x-functionalities-tags:
- groups
- mtp-account-overview
post:
description: 'Creates or deletes an association between a system group and a secondary organization.
This endpoint is the core mechanism for sharing or un-sharing a system group.
The caller must belong to the owner organization (the provider''s primary organization).
#### Sample Request
```
curl -X POST https://console.jumpcloud.com/api/v2/providers/{provider_id}/systemgroups/{group_id}/associations \
-H ''accept: application/json'' \
-H ''content-type: application/json'' \
-H ''x-org-id: -'' \
-H ''x-api-key: {API_KEY}'' \
-d ''{
"op": "add",
"type": "organization",
"id": "org-secondary-12345"
}''
```'
operationId: providers_systemGroupsManageAssociations
requestBody:
$ref: '#/components/requestBodies/ManageAssociations-Group'
responses:
'204':
description: Association successfully created or deleted
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetails'
'401':
description: Unauthorized
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'403':
description: Forbidden
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Not Found - provider, group, or organization not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'409':
description: Conflict - group is already shared to the target organization
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Internal Server Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
security:
- x-api-key: []
summary: Manage System Group Associations for Provider
tags:
- Groups
x-scopes:
- providers
- directories
x-codeSamples:
- lang: Shell
source: "curl --request POST \\\n --url https://console.jumpcloud.com/api/v2/providers/{provider_id}/systemgroups/{group_id}/associations \\\n --header 'content-type: application/json' \\\n --header 'x-api-key: REPLACE_KEY_VALUE' \\\n --data '{\"id\":\"string\",\"op\":\"add\",\"attributes\":{},\"type\":\"organization\"}'"
- lang: Python
source: "import requests\n\nurl = \"https://console.jumpcloud.com/api/v2/providers/{provider_id}/systemgroups/{group_id}/associations\"\n\npayload = {\n \"id\": \"string\",\n \"op\": \"add\",\n \"attributes\": {},\n \"type\": \"organization\"\n}\nheaders = {\n \"x-api-key\": \"REPLACE_KEY_VALUE\",\n \"content-type\": \"application/json\"\n}\n\nresponse = requests.request(\"POST\", url, json=payload, headers=headers)\n\nprint(response.text)"
- lang: Powershell
source: '$headers=@{}
$headers.Add("x-api-key", "REPLACE_KEY_VALUE")
$headers.Add("content-type", "application/json")
$response = Invoke-RestMethod -Uri ''https://console.jumpcloud.com/api/v2/providers/{provider_id}/systemgroups/{group_id}/associations'' -Method POST -Headers $headers -ContentType ''application/json'' -Body ''{"id":"string","op":"add","attributes":{},"type":"organization"}'''
/providers/{provider_id}/policygroups/{group_id}/associations:
parameters:
- name: provider_id
in: path
required: true
description: The ID of the provider
schema:
type: string
- name: group_id
in: path
required: true
description: The ID of the policy group
schema:
type: string
x-functionalities-tags:
- groups
- mtp-account-overview
post:
description: 'Creates or deletes an association between a policy group and a secondary organization.
This endpoint is the core mechanism for sharing or un-sharing a policy group.
The caller must belong to the owner organization (the provider''s primary organization).
#### Sample Request
```
curl -X POST https://console.jumpcloud.com/api/v2/providers/{provider_id}/policygroups/{group_id}/associations \
-H ''accept: application/json'' \
-H ''content-type: application/json'' \
-H ''x-org-id: -'' \
-H ''x-api-key: {API_KEY}'' \
-d ''{
"op": "add",
"type": "organization",
"id": "org-secondary-12345"
}''
```'
operationId: providers_policyGroupsManageAssociations
requestBody:
$ref: '#/components/requestBodies/ManageAssociations-Group'
responses:
'204':
description: Association successfully created or deleted
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetails'
'401':
description: Unauthorized
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'403':
description: Forbidden
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Not Found - provider, group, or organization not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'409':
description: Conflict - group is already shared to the target organization
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Internal Server Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
security:
- x-api-key: []
summary: Manage Policy Group Associations for Provider
tags:
- Groups
x-scopes:
- providers
- directories
x-codeSamples:
- lang: Shell
source: "curl --request POST \\\n --url https://console.jumpcloud.com/api/v2/providers/{provider_id}/policygroups/{group_id}/associations \\\n --header 'content-type: application/json' \\\n --header 'x-api-key: REPLACE_KEY_VALUE' \\\n --data '{\"id\":\"string\",\"op\":\"add\",\"attributes\":{},\"type\":\"organization\"}'"
- lang: Python
source: "import requests\n\nurl = \"https://console.jumpcloud.com/api/v2/providers/{provider_id}/policygroups/{group_id}/associations\"\n\npayload = {\n \"id\": \"string\",\n \"op\": \"add\",\n \"attributes\": {},\n \"type\": \"organization\"\n}\nheaders = {\n \"x-api-key\": \"REPLACE_KEY_VALUE\",\n \"content-type\": \"application/json\"\n}\n\nresponse = requests.request(\"POST\", url, json=payload, headers=headers)\n\nprint(response.text)"
- lang: Powershell
source: '$headers=@{}
$headers.Add("x-api-key", "REPLACE_KEY_VALUE")
$headers.Add("content-type", "application/json")
$response = Invoke-RestMethod -Uri ''https://console.jumpcloud.com/api/v2/providers/{provider_id}/policygroups/{group_id}/associations'' -Method POST -Headers $headers -ContentType ''application/json'' -Body ''{"id":"string","op":"add","attributes":{},"type":"organization"}'''
components:
schemas:
GraphOperation:
properties:
id:
description: The ObjectID of graph object being added or removed as an association.
type: string
op:
description: How to modify the graph connection.
enum:
- add
- remove
- update
type: string
required:
- id
- op
title: GraphOperation
type: object
GroupType:
description: The group type.
enum:
- policy_group
- system_group
- user_group
title: GroupType
type: string
MemberQueryErrorFlags:
type: array
items:
type: string
description: 'Group error flags indicating errors encountered during member query evaluation.
Possible flag values:
- CYCLE: A cyclic dependency was detected in group membership
- INVALID_GROUP_REFERENCE: The group reference is invalid or does not exist
The `member_query_error_flags` as a field supports array-based filtering:
- `CO`: Contains Overlap - check if array overlaps with the specified array (use `["VALUE"]` for single value)
- `NCO`: Not Contains Overlap - check if array does not overlap
- `EQ`: Exact array match
- `NE`: Not equal to array
- `IN`: Array contains any of the specified values
**Note:** Single `value` is converted to array `["value"]``.'
ManageAssociations-Group:
allOf:
- $ref: '#/components/schemas/GraphOperation'
- properties:
attributes:
$ref: '#/components/schemas/GraphAttributes'
type:
description: Targets which a "organization" can be associated to.
enum:
- organization
type: string
required:
- type
title: ManageAssociations (Group)
type: object
ErrorDetails:
allOf:
- $ref: '#/components/schemas/Error'
- type: object
properties:
details:
description: 'Describes a list of objects with more detailed information of the given error. Each detail schema is according to one of the messages defined in Google''s API: https://github.com/googleapis/googleapis/blob/master/google/rpc/error_details.proto'
type: array
items:
type: object
additionalProperties: true
description: Object according to Google's API.
Error:
title: Error
type: object
x-examples: {}
description: ''
properties:
code:
format: int32
type: integer
description: HTTP status code
message:
type: string
description: Error message
status:
type: string
description: HTTP status description
Group:
properties:
attributes:
$ref: '#/components/schemas/GraphAttributes'
description:
description: Description of a Group
type: string
email:
description: E-mail address associated with a Group
type: string
id:
description: ObjectId uniquely identifying a Group.
type: string
name:
description: Display name of a Group.
type: string
organizationObjectId:
description: id of the organization owning this group
type:
- string
- 'null'
type:
$ref: '#/components/schemas/GroupType'
memberQueryErrorFlags:
$ref: '#/components/schemas/MemberQueryErrorFlags'
title: Group
type: object
GraphAttributes:
additionalProperties: true
description: The graph attributes.
title: GraphAttributes
type:
- object
- 'null'
parameters:
trait_skip_skip:
description: The offset into the records to return.
in: query
name: skip
required: false
schema:
type: integer
minimum: 0
default: 0
trait_sort_sort:
description: 'The comma separated fields used to sort the collection.
Default sort is ascending, prefix with `-` to sort descending.
'
in: query
name: sort
style: form
explode: false
schema:
type: array
items:
type: string
default: []
trait_multiTenantRequestHeaders_x-org-id:
description: Organization identifier that can be obtained from console settings.
in: header
name: x-org-id
schema:
type: string
trait_fields_fields:
description: 'The comma separated fields included in the returned records.
If omitted, the default list of fields will be returned.
'
in: query
name: fields
style: form
explode: false
schema:
type: array
items:
type: string
default: []
trait_filter_filter:
description: 'A filter to apply to the query.
**Filter structure**: `<field>:<operator>:<value>`.
**field** = Populate with a valid field from an endpoint response.
**operator** = Supported operators are: eq, ne, gt, ge, lt, le, between, search, in.
_Note: v1 operators differ from v2 operators._
**value** = Populate with the value you want to search for. Is case sensitive. Supports wild cards.
**EX:** `GET /api/v2/groups?filter=name:eq:Test+Group`'
in: query
name: filter
style: form
explode: false
schema:
type: array
items:
type: string
default: []
trait_limit_limit:
description: The number of records to return at once. Limited to 100.
in: query
name: limit
schema:
type: integer
default: 10
trait_listCount_x-unfiltered-total-count:
description: If provided in the request with any non-empty value, this header will be returned on the response populated with the total count of objects without filters taken into account
in: header
name: x-unfiltered-total-count
schema:
type: integer
requestBodies:
ManageAssociations-Group:
content:
application/json:
schema:
$ref: '#/components/schemas/ManageAssociations-Group'
required: true
securitySchemes:
x-api-key:
description: API key used to authenticate requests.
in: header
name: x-api-key
type: apiKey
x-tagGroups:
- name: API Reference
tags:
- Access Requests
- Access Risk Settings
- Active Directory
- Administrators
- Agent Groups
- Agents
- Aggregated Policy Stats
- App Catalog
- Apple MDM
- Applications
- Assets
- Authentication Policies
- Bulk Job Requests
- Commands
- Custom Emails
- Directories
- Directory Insights
- Duo
- Email Subscriptions
- FeatureTrials
- G Suite
- G Suite Import
- GCEP
- Google EMM
- Graph
- Groups
- IP Lists
- Identity Providers
- Identity Risk
- Image
- LDAP Servers
- Logos
- Managed Service Provider
- Microsoft MDM
- Monitoring and Alerting
- Notifications Channels
- Object Storage
- Office 365
- Office 365 Import
- Organization Feature Settings
- Organizations
- Password Manager
- Password Policy
- Password Vault
- PasswordManagerItem
- Policies
- Policy Group Associations
- Policy Group Members & Membership
- Policy Group Templates
- Policy Groups
- Policytemplates
- Privileged Access
- Providers
- Push Verification
- RADIUS Servers
- Reports
- Roles
- Rules
- SCIM Import
- SaaS App Management
- Samba Domains
- Sample Data
- Saved Views
- Scope Groups
- Service Accounts
- Slack Notifications
- Software Apps
- Subscriptions
- System Group Associations
- System Group Members & Membership
- System Groups
- System Insights
- Systems
- Systems Organization Settings
- Translation Rules
- User Group Associations
- User Group Members & Membership
- User Groups
- Users
- Webhook Notifications
- Webhook Notifications Channels
- Workday Import
- Workflows
- fde
- mdm
x-scopes:
- accessmanagement
- accessmanagement.readonly
- accessrequest
- accessrequest.readonly
- administratorLinks
- administrators
- administrators.readonly
- agents
- agents.create
- agents.credentials.delete
- agents.credentials.readonly
- agents.credentials.update
- agents.delete
- agents.readonly
- agents.state
- agents.state.activate
- agents.state.suspend
- agents.update
- anonymous
- applications
- applications.readonly
- applications.update
- assets
- assets.readonly
- associations
- associations.applications
- associations.applications.readonly
- associations.authn
- associations.authn.readonly
- associations.commands
- associations.commands.readonly
- associations.directories
- associations.directories.readonly
- associations.groups
- associations.groups.readonly
- associations.radius
- associations.radius.readonly
- associations.readonly
- associations.self
- associations.systems
- associations.systems.readonly
- associations.users
- associations.users.readonly
- authn
- authn.readonly
- billing
- commandrunner.legacy
- commands
- commands.readonly
- directories
- directories.readonly
- directoryinsights.readonly
- groups
- groups.readonly
- groups.self
- healthmonitoring.alerts
- healthmonitoring.alerts.readonly
- healthmonitoring.rules
- healthmonitoring.rules.readonly
- identityrisk
- identityrisk.readonly
- mdm
- mdm.readonly
- mfa
- mfa.readonly
- notifications.channels
- notifications.channels.readonly
- notifications.subscriptions
- notifications.subscriptions.readonly
- organizations
- organizations.billing
- organizations.readonly
- pam
- pam.backup
- pam.blocking-rules.create
- pam.blocking-rules.delete
- pam.blocking-rules.readonly
- pam.blocking-rules.update
- pam.jump-servers.create
- pam.jump-servers.delete
- pam.jump-servers.readonly
- pam.jump-servers.update
- pam.manage-all-privileged-resources
- pam.overview
- pam.privileged-credentials.create
- pam.privileged-credentials.delete
- pam.privileged-credentials.readonly
- pam.privileged-credentials.update
- pam.privileged-databases.create
- pam.privileged-databases.delete
- pam.privileged-databases.readonly
- pam.privileged-databases.update
- pam.privileged-servers.create
- pam.privileged-servers.delete
- pam.privileged-servers.readonly
- pam.privileged-servers.update
- pam.privileged-websites.create
- pam.privileged-websites.delete
- pam.privileged-websites.readonly
- pam.privileged-websites.update
- pam.readonly
- pam.resource-managers.create
- pam.resource-managers.delete
- pam.resource-managers.readonly
- pam.resource-managers.update
- pam.session-history
- pam.user-groups.create
- pam.user-groups.delete
- pam.user-groups.readonly
- pam.user-groups.update
- partners
- partners.readonly
- passwordmanager
- passwordmanager.readonly
- protect
- providers
- providers.readonly
- radius
- radius.readonly
- reports
- reports.readonly
- roles
- roles.readonly
- saas
- saas.readonly
- serviceaccounts
- serviceaccounts.readonly
- subscriptions.readonly
- support
- support.readonly
- systeminsights.readonly
- systems
- systems.management
- systems.readonly
- transfer
- users
- users.create
- users.password
- users.password.expire
- users.properties
- users.properties.update
- users.readonly
- users.self
- users.state
- users.state.delete
- users.state.readonly
- users.state.unlock
- users.state.update
- workflows
- workflows.readonly