OpenMetadata Security Services API

openapi: 3.0.1
info:
  title: OpenMetadata APIs Agent Executions Security Services API
  description: Common types and API definition for OpenMetadata
  contact:
    name: OpenMetadata
    url: https://open-metadata.org
    email: openmetadata-dev@googlegroups.com
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
  version: '1.13'
servers:
- url: /api
  description: Current Host
- url: http://localhost:8585/api
  description: Endpoint URL
security:
- BearerAuth: []
tags:
- name: Security Services
  description: APIs related to Security Service entities, such as Apache Ranger.
paths:
  /v1/services/securityServices/{id}/followers:
    put:
      tags:
      - Security Services
      summary: Add a follower
      description: Add a user identified by `userId` as followed of this security service
      operationId: addFollowerToSecurityService
      parameters:
      - name: id
        in: path
        description: Id of the Security Service
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        description: Id of the user to be added as follower
        content:
          application/json:
            schema:
              type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChangeEvent'
        '404':
          description: Security Service for instance {id} is not found
  /v1/services/securityServices/{id}/testConnectionResult:
    put:
      tags:
      - Security Services
      summary: Add test connection result
      description: Add test connection result to the service.
      operationId: addTestConnectionResult_11
      parameters:
      - name: id
        in: path
        description: Id of the service
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TestConnectionResult'
      responses:
        '200':
          description: Successfully updated the service
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityService'
  /v1/services/securityServices:
    get:
      tags:
      - Security Services
      summary: List security services
      description: Get a list of security services.
      operationId: listSecurityServices
      parameters:
      - name: fields
        in: query
        description: Fields requested in the returned resource
        schema:
          type: string
          example: owners,tags,domains,followers
      - name: domain
        in: query
        description: Filter services by domain
        schema:
          type: string
          example: Marketing
      - name: limit
        in: query
        schema:
          maximum: 1000000
          minimum: 0
          type: integer
          format: int32
          default: 10
      - name: before
        in: query
        description: Returns list of security services before this cursor
        schema:
          type: string
      - name: after
        in: query
        description: Returns list of security services after this cursor
        schema:
          type: string
      - name: include
        in: query
        description: Include all, deleted, or non-deleted entities.
        schema:
          type: string
          default: non-deleted
          enum:
          - all
          - deleted
          - non-deleted
      responses:
        '200':
          description: List of security service instances
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityServiceList'
        '400':
          description: Bad request
    put:
      tags:
      - Security Services
      summary: Update security service
      description: Update an existing or create a new security service.
      operationId: createOrUpdateSecurityService
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateSecurityService'
      responses:
        '200':
          description: Security service instance
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityService'
        '400':
          description: Bad request
    post:
      tags:
      - Security Services
      summary: Create security service
      description: Create a new security service.
      operationId: createSecurityService
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateSecurityService'
      responses:
        '200':
          description: Security service instance
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityService'
        '400':
          description: Bad request
  /v1/services/securityServices/name/{name}:
    get:
      tags:
      - Security Services
      summary: Get security service by name
      description: Get a security service by the service `name`.
      operationId: getSecurityServiceByFQN
      parameters:
      - name: name
        in: path
        description: Name of the security service
        required: true
        schema:
          type: string
      - name: fields
        in: query
        description: Fields requested in the returned resource
        schema:
          type: string
          example: owners,tags,domains,followers
      - name: include
        in: query
        description: Include all, deleted, or non-deleted entities.
        schema:
          type: string
          default: non-deleted
          enum:
          - all
          - deleted
          - non-deleted
      - name: includeRelations
        in: query
        description: 'Per-relation include control. Format: field:value,field2:value2. Example: owners:non-deleted,followers:all. Valid values: all, deleted, non-deleted. If not specified for a field, uses the entity''s include value.'
        schema:
          type: string
          example: owners:non-deleted,followers:all
      responses:
        '200':
          description: Security service instance
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityService'
        '404':
          description: Security service for instance {name} is not found
    delete:
      tags:
      - Security Services
      summary: Delete a security service by name
      description: Delete a security services by `name`. If assets belong the service, it can't be deleted.
      operationId: deleteSecurityServiceByName
      parameters:
      - name: hardDelete
        in: query
        description: Hard delete the entity. (Default = `false`)
        schema:
          type: boolean
          default: false
      - name: recursive
        in: query
        description: Recursively delete this entity and it's children. (Default `false`)
        schema:
          type: boolean
          default: false
      - name: name
        in: path
        description: Name of the security service
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
        '404':
          description: SecurityService service for instance {name} is not found
  /v1/services/securityServices/{id}:
    get:
      tags:
      - Security Services
      summary: Get a security service
      description: Get a security service by `id`.
      operationId: getSecurityServiceByID
      parameters:
      - name: id
        in: path
        description: Id of the security service
        required: true
        schema:
          type: string
          format: uuid
      - name: fields
        in: query
        description: Fields requested in the returned resource
        schema:
          type: string
          example: owners,tags,domains,followers
      - name: include
        in: query
        description: Include all, deleted, or non-deleted entities.
        schema:
          type: string
          default: non-deleted
          enum:
          - all
          - deleted
          - non-deleted
      - name: includeRelations
        in: query
        description: 'Per-relation include control. Format: field:value,field2:value2. Example: owners:non-deleted,followers:all. Valid values: all, deleted, non-deleted. If not specified for a field, uses the entity''s include value.'
        schema:
          type: string
          example: owners:non-deleted,followers:all
      responses:
        '200':
          description: Security service instance
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityService'
        '404':
          description: Security service for instance {id} is not found
    delete:
      tags:
      - Security Services
      summary: Delete a security service by Id
      description: Delete a security services. If assets belong the service, it can't be deleted.
      operationId: deleteSecurityService
      parameters:
      - name: recursive
        in: query
        description: Recursively delete this entity and it's children. (Default `false`)
        schema:
          type: boolean
          default: false
      - name: hardDelete
        in: query
        description: Hard delete the entity. (Default = `false`)
        schema:
          type: boolean
          default: false
      - name: id
        in: path
        description: Id of the security service
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OK
        '404':
          description: SecurityService service for instance {id} is not found
    patch:
      tags:
      - Security Services
      summary: Update a security service
      description: Update an existing security service using JsonPatch.
      externalDocs:
        description: JsonPatch RFC
        url: https://tools.ietf.org/html/rfc6902
      operationId: patchSecurityService_1
      parameters:
      - name: id
        in: path
        description: Id of the security service
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        description: JsonPatch with array of operations
        content:
          application/json-patch+json:
            schema:
              $ref: '#/components/schemas/JsonPatch'
            example: '[{op:remove, path:/a},{op:add, path: /b, value: val}]'
      responses:
        default:
          description: default response
          content:
            application/json: {}
  /v1/services/securityServices/async/{id}:
    delete:
      tags:
      - Security Services
      summary: Asynchronously delete a security service by Id
      description: Asynchronously delete a security services. If assets belong the service, it can't be deleted.
      operationId: deleteSecurityServiceAsync
      parameters:
      - name: recursive
        in: query
        description: Recursively delete this entity and it's children. (Default `false`)
        schema:
          type: boolean
          default: false
      - name: hardDelete
        in: query
        description: Hard delete the entity. (Default = `false`)
        schema:
          type: boolean
          default: false
      - name: id
        in: path
        description: Id of the security service
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OK
        '404':
          description: SecurityService service for instance {id} is not found
  /v1/services/securityServices/{id}/followers/{userId}:
    delete:
      tags:
      - Security Services
      summary: Remove a follower
      description: Remove the user identified `userId` as a follower of the entity.
      operationId: deleteFollower_26
      parameters:
      - name: id
        in: path
        description: Id of the Entity
        required: true
        schema:
          type: string
          format: uuid
      - name: userId
        in: path
        description: Id of the user being removed as follower
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChangeEvent'
  /v1/services/securityServices/name/{name}/export:
    get:
      tags:
      - Security Services
      summary: Export security service in CSV format
      operationId: exportSecurityServices
      parameters:
      - name: name
        in: path
        description: Name of the Security Service
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Exported csv with services from the security services
          content:
            application/json:
              schema:
                type: string
  /v1/services/securityServices/name/{name}/exportAsync:
    get:
      tags:
      - Security Services
      summary: Export security service in CSV format
      operationId: exportSecurityService
      parameters:
      - name: name
        in: path
        description: Name of the Security Service
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Exported csv with security services
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CSVExportResponse'
  /v1/services/securityServices/{id}/versions/{version}:
    get:
      tags:
      - Security Services
      summary: Get a version of the security service
      description: Get a version of the security service by given `Id`
      operationId: getSpecificSecurityServiceVersion
      parameters:
      - name: id
        in: path
        description: Id of the security service
        required: true
        schema:
          type: string
          format: uuid
      - name: version
        in: path
        description: security service version number in the form `major`.`minor`
        required: true
        schema:
          type: string
          example: 0.1 or 1.1
      responses:
        '200':
          description: security service
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityService'
        '404':
          description: Security service for instance {id} and version {version} is not found
  /v1/services/securityServices/name/{name}/import:
    put:
      tags:
      - Security Services
      summary: Import service from CSV to update security service (no creation allowed)
      operationId: importSecurityService
      parameters:
      - name: name
        in: path
        description: Name of the Security Service
        required: true
        schema:
          type: string
      - name: dryRun
        in: query
        description: Dry-run when true is used for validating the CSV without really importing it. (default=true)
        schema:
          type: boolean
          default: true
      requestBody:
        content:
          text/plain; charset=UTF-8:
            schema:
              type: string
      responses:
        '200':
          description: Import result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CsvImportResult'
  /v1/services/securityServices/name/{name}/importAsync:
    put:
      tags:
      - Security Services
      summary: Import service from CSV to update security service asynchronously (no creation allowed)
      operationId: importSecurityServiceAsync
      parameters:
      - name: name
        in: path
        description: Name of the Security Service
        required: true
        schema:
          type: string
      - name: dryRun
        in: query
        description: Dry-run when true is used for validating the CSV without really importing it. (default=true)
        schema:
          type: boolean
          default: true
      requestBody:
        content:
          text/plain; charset=UTF-8:
            schema:
              type: string
      responses:
        '200':
          description: Import initiated successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CsvImportResult'
  /v1/services/securityServices/history:
    get:
      tags:
      - Security Services
      summary: List all entity versions within a time range
      description: 'Get a paginated list of all entity versions within a given time range specified by `startTs` and `endTs` in milliseconds since epoch. '
      operationId: listAllEntityVersionsByTimestamp_52
      parameters:
      - name: startTs
        in: query
        description: Start timestamp in milliseconds since epoch
        required: true
        schema:
          type: integer
          format: int64
      - name: endTs
        in: query
        description: End timestamp in milliseconds since epoch
        required: true
        schema:
          type: integer
          format: int64
      - name: limit
        in: query
        description: Limit the number of entity returned (1 to 1000000, default = 10)
        schema:
          maximum: 500
          minimum: 1
          type: integer
          format: int32
          default: 10
      - name: before
        in: query
        description: Returns list of entity versions before this cursor
        schema:
          type: string
      - name: after
        in: query
        description: Returns list of entity versions after this cursor
        schema:
          type: string
      responses:
        '200':
          description: List of all versions
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResultList'
  /v1/services/securityServices/{id}/versions:
    get:
      tags:
      - Security Services
      summary: List security service versions
      description: Get a list of all the versions of a security service identified by `Id`
      operationId: listAllSecurityServiceVersion
      parameters:
      - name: id
        in: path
        description: Id of the security service
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: List of security service versions
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EntityHistory'
  /v1/services/securityServices/name/{fqn}:
    patch:
      tags:
      - Security Services
      summary: Update a security service using name.
      description: Update an existing security service using JsonPatch.
      externalDocs:
        description: JsonPatch RFC
        url: https://tools.ietf.org/html/rfc6902
      operationId: patchSecurityService
      parameters:
      - name: fqn
        in: path
        description: Name of the security service
        required: true
        schema:
          type: string
      requestBody:
        description: JsonPatch with array of operations
        content:
          application/json-patch+json:
            schema:
              $ref: '#/components/schemas/JsonPatch'
            example: '[{op:remove, path:/a},{op:add, path: /b, value: val}]'
      responses:
        default:
          description: default response
          content:
            application/json: {}
  /v1/services/securityServices/restore:
    put:
      tags:
      - Security Services
      summary: Restore a soft deleted security service
      description: Restore a soft deleted security service.
      operationId: restore_42
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RestoreEntity'
      responses:
        '200':
          description: Successfully restored the SecurityService.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityService'
components:
  schemas:
    TagLabelRecognizerMetadata:
      required:
      - recognizerId
      - recognizerName
      - score
      type: object
      properties:
        recognizerId:
          type: string
          format: uuid
        recognizerName:
          type: string
        score:
          type: number
          format: double
        target:
          type: string
          enum:
          - content
          - column_name
        patterns:
          type: array
          items:
            $ref: '#/components/schemas/PatternMatch'
    ChangeSummaryMap:
      type: object
    AccessDetails:
      required:
      - timestamp
      type: object
      properties:
        timestamp:
          type: integer
          format: int64
        accessedBy:
          $ref: '#/components/schemas/EntityReference'
        accessedByAProcess:
          type: string
    FieldChange:
      type: object
      properties:
        name:
          type: string
        oldValue:
          type: object
        newValue:
          type: object
    CoverImage:
      type: object
      properties:
        url:
          type: string
        position:
          type: string
    SecurityServiceList:
      required:
      - data
      type: object
      properties:
        data:
          type: array
          items:
            $ref: '#/components/schemas/SecurityService'
        paging:
          $ref: '#/components/schemas/Paging'
        errors:
          type: array
          items:
            $ref: '#/components/schemas/EntityError'
        warningsCount:
          type: integer
          format: int32
        warnings:
          type: array
          items:
            $ref: '#/components/schemas/EntityError'
    RestoreEntity:
      required:
      - id
      type: object
      properties:
        id:
          type: string
          format: uuid
    LifeCycle:
      type: object
      properties:
        created:
          $ref: '#/components/schemas/AccessDetails'
        updated:
          $ref: '#/components/schemas/AccessDetails'
        accessed:
          $ref: '#/components/schemas/AccessDetails'
    EntityHistory:
      required:
      - entityType
      - versions
      type: object
      properties:
        entityType:
          type: string
        versions:
          type: array
          items:
            type: object
    AssetCertification:
      required:
      - appliedDate
      - expiryDate
      - tagLabel
      type: object
      properties:
        tagLabel:
          $ref: '#/components/schemas/TagLabel'
        appliedDate:
          type: integer
          format: int64
        expiryDate:
          type: integer
          format: int64
    ResultList:
      required:
      - data
      type: object
      properties:
        data:
          type: array
          items:
            type: object
        paging:
          $ref: '#/components/schemas/Paging'
        errors:
          type: array
          items:
            $ref: '#/components/schemas/EntityError'
        warningsCount:
          type: integer
          format: int32
        warnings:
          type: array
          items:
            $ref: '#/components/schemas/EntityError'
    Paging:
      required:
      - total
      type: object
      properties:
        before:
          type: string
        after:
          type: string
        offset:
          type: integer
          format: int32
        limit:
          type: integer
          format: int32
        total:
          type: integer
          format: int32
    TestConnectionResult:
      required:
      - steps
      type: object
      properties:
        lastUpdatedAt:
          type: integer
          format: int64
        status:
          type: string
          enum:
          - Successful
          - Failed
          - Running
        steps:
          type: array
          items:
            $ref: '#/components/schemas/TestConnectionStepResult'
    JsonPatch:
      type: object
    SecurityConnection:
      type: object
      properties:
        config:
          type: object
    ChangeDescription:
      type: object
      properties:
        fieldsAdded:
          type: array
          items:
            $ref: '#/components/schemas/FieldChange'
        fieldsUpdated:
          type: array
          items:
            $ref: '#/components/schemas/FieldChange'
        fieldsDeleted:
          type: array
          items:
            $ref: '#/components/schemas/FieldChange'
        previousVersion:
          type: number
          format: double
        changeSummary:
          $ref: '#/components/schemas/ChangeSummaryMap'
    CSVExportResponse:
      type: object
      properties:
        jobId:
          type: string
        message:
          type: string
    ChangeEvent:
      required:
      - entityId
      - entityType
      - eventType
      - id
      - timestamp
      type: object
      properties:
        id:
          type: string
          format: uuid
        eventType:
          type: string
          enum:
          - entityCreated
          - entityUpdated
          - entityFieldsChanged
          - entityNoChange
          - entitySoftDeleted
          - entityDeleted
          - entityRestored
          - threadCreated
          - threadUpdated
          - postCreated
          - postUpdated
          - taskResolved
          - taskClosed
          - logicalTestCaseAdded
          - suggestionCreated
          - suggestionUpdated
          - suggestionAccepted
          - suggestionRejected
          - suggestionDeleted
          - userLogin
          - userLogout
        entityType:
          type: string
        entityId:
          type: string
          format: uuid
        domains:
          type: array
          items:
            type: string
            format: uuid
        entityFullyQualifiedName:
          type: string
        previousVersion:
          type: number
          format: double
        currentVersion:
          type: number
          format: double
        userName:
          type: string
        impersonatedBy:
          type: string
        timestamp:
          type: integer
          format: int64
        changeDescription:
          $ref: '#/components/schemas/ChangeDescription'
        incrementalChangeDescription:
          $ref: '#/components/schemas/ChangeDescription'
        entity:
          type: object
    UsageStats:
      required:
      - count
      type: object
      properties:
        count:
          minimum: 0
          exclusiveMinimum: false
          type: integer
          format: int32
        percentileRank:
          type: number
          format: double
    Style:
      type: object
      properties:
        color:
          type: string
        iconURL:
          type: string
        coverImage:
          $ref: '#/components/schemas/CoverImage'
    Votes:
      type: object
      properties:
        upVotes:
          type: integer
          format: int32
        downVotes:
          type: integer
          format: int32
        upVoters:
          type: array
          items:
            $ref: '#/components/schemas/EntityReference'
        downVoters:
          type: array
          items:
            $ref: '#/components/schemas/EntityReference'
    CsvImportResult:
      type: object
      properties:
        dryRun:
          type: boolean
        status:
          type: string
          enum:
          - success
          - failure
          - aborted
          - partialSuccess
          - running
        abortReason:
          type: string
        numberOfRowsProcessed:
          minimum: 0
          exclusiveMinimum: false
          type: integer
          format: int32
        numberOfRowsPassed:
          minimum: 0
          exclusiveMinimum: false
          type: integer
          format: int32
        numberOfRowsFailed:
          minimum: 0
          exclusiveMinimum: false
          type: integer
          format: int32
        importResultsCsv:
          type: string
    TagLabel:
      required:
      - labelType
      - source
      - state
      - tagFQN
      type: object
      properties:
        tagFQN:
          type: string
        name:
          type: string
        displayName:
          type: string
        description:
          type: string
        style:
          $ref: '#/components/schemas/Style'
        source:
          type: string
          enum:
          - Classification
          - Glossary
        labelType:
          type: string
          enum:
          - Manual
          - Propagated
          - Automated
          - Derived
          - Generated
        state:
          type: string
          enum:
          - Suggested
          - Confirmed
        href:
          type: string
          format: uri
        reason:
          type: string
        appliedAt:
          type: string
          format: date-time
        appliedBy:
          type: string
        metadata:
          $ref: '#/components/schemas/TagLabelMetadata'
    PatternMatch:
      required:
      - name
      - score
      type: object
      properties:
        name:
          type: string
        regex:
          type: string
        score:
          type: number
          format: double
    CreateSecurityService:
      required:
      - name
      - serviceType
      type: object
      properties:
        name:
          maxLength: 256
          minLength: 1
          pattern: ^((?!::).)*$
          type: string
        displayName:
          type: string
        description:
          type: string
        serviceType:
          type: string
          enum:
          - Ranger
        connection:
          $ref: '#/components/schemas/SecurityConnection'
        tags:
          type: array
          items:
            $ref: '#/components/schemas/TagLabel'
        owners:
          type: array
          items:
            $ref: '#/components/schemas/EntityReference'
        dataProducts:
          type: array
          items:
            type: string
        domains:
          type: array
          items:
            type: string
        ingestionRunner:
          $ref: '#/components/schemas/EntityReference'
        extension:
          type: object
        reviewers:
          type: array
          items:
            $ref: '#/components/schemas/EntityReference'
        lifeCycle:
          $ref: '#/components/schemas/LifeCycle'
    TagLabelMetadata:
      type: object
      properties:
        recognizer:
          $ref: '#/components/schemas/TagLabelRecognizerMetadata'
        expiryDate:
          type: integer
          format: int64
    EntityError:
      type: object
      properties:
        message:
          type: string
        entity:
          type: object
    TestConnectionStepResult:
      required:
      - mandatory
      - name
      - passed
      type: object
      properties:
        name:
          type: string
        mandatory:
          type: boolean
        passed:
          type: boolean
        message:
          type: string
        errorLog:
          type: string
    EntityReference:
      required:
      - id
      - type
      type: object
      properties:
        id:
          type: string
          format: uuid
        type:
          type: string
        name:
          type: string
        fullyQualifiedName:
          type: string
        description:
          type: string
        displayName:
          type: string
        deleted:
          type: boolean
        inherited:
          type: boolean
        href:
          type: string
          format: uri
    SecurityService:
      required:
      - id
      - name
      - serviceType
      type: object
      properties:
        id:
          type: string
          format: uuid
        name:
          maxLength: 256
          minLength: 1
          pattern: ^((?!::).)*$
          type: string
        fullyQualifiedName:
          maxLength: 3072
          minLength: 1
          type: string
        serviceType:
          type: string
          enum:
          - Ranger
        description:
          type: string
        displayName:
          type: string
        version:
          type: number
      

# --- truncated at 32 KB (34 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/openmetadata/refs/heads/main/openapi/openmetadata-security-services-api-openapi.yml