ForgeRock · Schema

ForgeRock Entitlement

An entitlement representing a granular access right from an onboarded target application. Entitlements are aggregated into a centralized catalog by Identity Governance for review, certification, and compliance purposes.

Access ManagementAuthenticationAuthorizationIdentity GovernanceIdentity ManagementOpenID Connect

Properties

Name Type Description
_id string Unique identifier for the entitlement
name string Entitlement name
description string Human-readable description of the entitlement
applicationName string Name of the application that owns this entitlement
applicationId string Identifier of the owning application
type string Type of entitlement
owner string User identifier of the entitlement owner
riskLevel string Risk classification for the entitlement
glossary object Business glossary metadata for the entitlement
assignedUsers integer Number of users currently assigned this entitlement
View JSON Schema on GitHub

JSON Schema

forgerock-entitlement-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://schema.forgerock.com/entitlement",
  "title": "ForgeRock Entitlement",
  "description": "An entitlement representing a granular access right from an onboarded target application. Entitlements are aggregated into a centralized catalog by Identity Governance for review, certification, and compliance purposes.",
  "type": "object",
  "properties": {
    "_id": {
      "type": "string",
      "description": "Unique identifier for the entitlement"
    },
    "name": {
      "type": "string",
      "description": "Entitlement name"
    },
    "description": {
      "type": "string",
      "description": "Human-readable description of the entitlement"
    },
    "applicationName": {
      "type": "string",
      "description": "Name of the application that owns this entitlement"
    },
    "applicationId": {
      "type": "string",
      "description": "Identifier of the owning application"
    },
    "type": {
      "type": "string",
      "description": "Type of entitlement",
      "enum": ["group", "permission", "role", "privilege", "license"]
    },
    "owner": {
      "type": "string",
      "description": "User identifier of the entitlement owner"
    },
    "riskLevel": {
      "type": "string",
      "description": "Risk classification for the entitlement",
      "enum": ["low", "medium", "high", "critical"]
    },
    "glossary": {
      "type": "object",
      "description": "Business glossary metadata for the entitlement",
      "properties": {
        "displayName": {
          "type": "string"
        },
        "requestable": {
          "type": "boolean",
          "description": "Whether users can request this entitlement"
        },
        "approvalRequired": {
          "type": "boolean",
          "description": "Whether approval is required to grant this entitlement"
        }
      }
    },
    "assignedUsers": {
      "type": "integer",
      "description": "Number of users currently assigned this entitlement",
      "readOnly": true
    }
  },
  "required": ["name", "applicationName"]
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/forgerock-entitlement"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.