We require a detailed analysis of the API Management section within the Security Settings of Identity Security Cloud. Specifically, we are looking to understand the behavior and usage of newly created Grant Type entries—how they are intended to be used, where they are stored within Identity Security…

@EdulabaviAkhilTeja The major different between these 2 is the user context. Please check this link Managing API Keys and Personal Access Tokens - SailPoint Identity Services and it could help you to get more understanding. On a high level, API token with client credential grant type doesn’t have a…

It would help if you told us which API endpoint you were trying to use

Easier explanation would be you can see all API Token generated in your tenant by others and manage it, but you can’t see the PAT token generated by other administrators. Certain API calls can be made only using the PAT token.

[image] EdulabaviAkhilTeja: We created a Personal Access Token (PAT) with the scope “sp:scopes:all” and obtained the corresponding client ID and client secret. Similarly, we created a new API client from the API Management tab using the same scope “sp:scopes:all” and the Client Credentials grant…

I attempted to use the Get List Identities API with both a Personal Access Token (PAT) and the credentials generated through API Management. I would also like to understand the intended purpose of the API client created through the API Management tab and the typical scenarios in which it is meant to…

Thank you for your response. I would also like to gain clarity on the intended purpose of the API client created through the API Management tab, including the typical use cases for this type of client. Additionally, I am seeking to understand which Identity Security Cloud features are compatible wit…

Thank you for your response. Could you please provide additional clarification on the following: We are seeking a detailed analysis of the API Management section within the Security Settings of Identity Security Cloud. In particular, we would like to understand the behavior and intended usage of ne…

What level of access does the user tied to the PAT have? It needs to have at least one of the levels defined in the User Level Access Matrix Meaning Admin Helpdesk Admin Identity Graph Admin sp:scopes:all authorizes all scopes granted by the user’s assigned user levels . So if the user can’t g…

User tied to the PAT or credentials generated through API Management has Admin Privilege.

Personal access tokens are associated with a user in Identity Security Cloud and relies on the user’s user level (ex. Admin, Helpdesk, etc.) to determine a base level of access. To see which token is required to call the API, you can check the API documentation. Below is one of the screenshot, [i…

@EdulabaviAkhilTeja can you confirm that this works with a PAT but doesn’t work with creds generated through API management? If that’s the case, then this is an expected behavior as the list-identities 2025 API Endpoint requires a user-context token, aka a PAT [image]

Discrepancy Between PAT and API Management Client Credentials in Identity Security Cloud

Identity Security Cloud (ISC) ISC Discussion and Questions

mcheek (Mark Cheek) January 9, 2026, 9:06pm 14

Funny you say that… I think @tyler_mairose must have been reading this thread when he posted this

Topic		Replies	Views
API Management vs PAT ISC Discussion and Questions apis	4	1115	July 19, 2023
Enable/Disable Account API returns 500 with API Management Client Credentials — PAT works fine ISC Discussion and Questions identity-security-cloud	0	32	April 8, 2026
Problem with token creation ISC Discussion and Questions identity-security-cloud	4	157	June 7, 2025
SailPoint ISC REST API - PAT vs Client Credentials ISC Discussion and Questions apis , identity-security-cloud	5	239	January 17, 2026
Client Credentials fail with Role API ISC Discussion and Questions apis , identity-security-cloud	2	111	February 16, 2025

Discrepancy Between PAT and API Management Client Credentials in Identity Security Cloud

Related topics