Hi @krikum,
In theory, an application can contain zero to multiple access profiles and an access profile can be part of zero to multiple applications.
I have found this API (which is also undocumented)
GET /beta/source-apps/:id/access-profiles
Here the id is the big id of the application.
Instead you can also use search POST /v3/search
- Given an application, which access profiles are part of it? Search for something like
@apps(id:1234456765432564321325342545) - Given an access profile, which applications are part of it? Search for the access profile itself
id:1234456765432564321325342546and in the response body look at attributeapps.
I prefer the first one over search because search tends to be untrustable due to latency issues. It can take over a day before certain changes are visible in search.