# Get Parent Entitlements Using API

**URL:** <https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684>\
**Category:** SHF Discussion and Questions\
**Created:** [June 9, 2021, 1:34pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684 "2021-06-09T13:34:02Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![blanghals](https://avatars.discourse-cdn.com/v4/letter/b/47e85d/32.png) [@blanghals](https://developer.sailpoint.com/discuss/u/blanghals)\
**Post date:** [June 9, 2021, 1:34pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/1 "2021-06-09T13:34:03Z")

</div>

I am looking to retrieve all parent entitlements for an Active Directory group / entitlement.

I tried the Search endpoint (/v3/Search) with “indices” = “entitlements” and with and without “includeNested” specified

This is what the parent entitlements tab on an entitlement look like in the UI. These are the entitlements I’m looking to retrevive

> **[2021-06-09\_09-31-32.png](https://www.screencast.com/t/URR41VUvt4a3)**
>
> Shared from Screencast.com

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [June 9, 2021, 1:55pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/2 "2021-06-09T13:55:26Z")

</div>

Hey @blanghals,  
Thank you for posting your first question. We will look into this and circle back with some insights on this for you soon.

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [June 9, 2021, 2:18pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/3 "2021-06-09T14:18:34Z")

</div>

Hi @blanghals,

Our beta and v3 APIs don’t support entitlements at this time. I also checked our search documentation regarding entitlements and I could not find a way to get parents from search. I inspected my browser to see what IDN uses to get parents, and found that it uses the following:

`https://{tenant}.api.identitynow.com/ears/entitlements-v3/entitlements/{entitlementId}/parents`

Please give that a try, and if it works, please mark this answer as the solution.

Thank you,  
Colin McKibben

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [June 28, 2021, 5:30pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/4 "2021-06-28T17:30:58Z")

</div>

Hey @blanghals,

I wanted to check in and see if the above was able to work for you. Let us know an update and if we can be of any further assistance to you!

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [July 9, 2021, 7:36pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/5 "2021-07-09T19:36:40Z")

</div>

@blanghals,

I am marking this thread as resolved. Please let us know if we can assist you any further by commenting below.

---

<div class="post-metadata">

**Author:** ![chrisp](https://avatars.discourse-cdn.com/v4/letter/c/87869e/32.png) [@chrisp](https://developer.sailpoint.com/discuss/u/chrisp)\
**Post date:** [August 13, 2021, 10:31pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/6 "2021-08-13T22:31:03Z")

</div>

@colin_mckibben  
I am able to use the /ears/entitlements-v3/entitlements API call to get the source entitlements, but only if I use the BEARER token that I capture from the chrome inspect network preview.  
If I use the Postman generated token(using client id and client secret) like I do for the V3 and beta API calls, I get a 404 error, and “error”: “Unable to route request”. I’ve tried using the Personal Access Token, and also the Security Settings API management settings.  
Does that API call require something else?

Thanks,  
Chris

---

<div class="post-metadata">

**Author:** ![chrisp](https://avatars.discourse-cdn.com/v4/letter/c/87869e/32.png) [@chrisp](https://developer.sailpoint.com/discuss/u/chrisp)\
**Post date:** [August 16, 2021, 2:44pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/7 "2021-08-16T14:44:58Z")

</div>

@colin_mckibben  
I’ve been able to use a different API call to get the entitlements:  
`https://{{TENANT}}.api.identitynow.com/cc/api/entitlement/list?limit=500&count=true&CISApplicationId={{sourceID}}`

Only thing with this, it doesn’t seem to support the normal offset parameter. It does support the limit parameter, but when I use offset, it doesn’t do anything different. Is there any other parameter that I can use to ‘page’ through the results? One of our sources has 34k entitlements!

Thanks,  
Chris

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [August 16, 2021, 3:55pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/8 "2021-08-16T15:55:05Z")

</div>

Try using the `start` and `limit` query params. For example, `?limit=500&start=0` should get you the first 500 results, and `?limit=500&start=1` should get you the next page of 500 results.

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [August 16, 2021, 4:56pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/9 "2021-08-16T16:56:27Z")

</div>

I was just informed that `/ears` can only be called from the Org Portal or UI generated tokens, so you can’t use PATs or OAuth2 to call `/ears`. If `https://{{TENANT}}.api.identitynow.com/cc/api/entitlement/list?limit=500&count=true&CISApplicationId={{sourceID}}` gets you the information you need, then I would stick with that for now. FYI, engineering is working on CRUD endpoints for entitlements to be released this year.

---

<div class="post-metadata">

**Author:** ![chrisp](https://avatars.discourse-cdn.com/v4/letter/c/87869e/32.png) [@chrisp](https://developer.sailpoint.com/discuss/u/chrisp)\
**Post date:** [August 17, 2021, 11:55am UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/10 "2021-08-17T11:55:08Z")

</div>

@colin_mckibben Thanks, the start did it!  
In other API calls, offset is used, so thats what I tried.

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [December 16, 2021, 8:56pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/11 "2021-12-16T20:56:30Z")

</div>

Update to this thread. There are now beta endpoints for [getting parent entitlements](https://developer.sailpoint.com/idn/api/beta/list-entitlement-parents).

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 19, 2023, 2:21pm UTC](https://developer.sailpoint.com/discuss/t/get-parent-entitlements-using-api/684/12 "2023-07-19T14:21:53Z")

</div>


