Permission required for API

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

Version 8.4

Share all details related to your problem, including any error messages you may have received.

Hello,

Can anyone tell me or point me to the documentation that provides information on what permission is required to call a GET endpoint? I need to let to provide read permission to call and API to see custom attributes on an entitlement. Thank you!

2

Hi @dk0200

I believe you require highlighted permission to read entitlements using SCIM API

image
image1326×476 34.9 KB

For you reference:

IIQ SCIM
IIQ WebService

1 Like
3 
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Capability PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Capability created="1707155578226" displayName="Get Entitlement" id="0aaec3a58cfb1689818d7a66dd726341" modified="1707156537182" name="Get Entitlement" significantModified="1707156537182">
  <Description>read SCIM entitlement</Description>
  <RightRefs>
    <Reference class="sailpoint.object.SPRight" id="0aaeac477069122f8170692319a2009d" name="ReadSCIMEntitlement"/>
  </RightRefs>
</Capability>

I have granted that capability to the user I am using to call the endpoint:
https://host:8443/iiq/scim/v2/Entitlements , but I am getting a 401. Am I missing anything? Its a GET call

4

I refreshed the token and the permission is resolved but getting this now:

org.hibernate.exception.SQLGrammarException: could not extract ResultSet

5

@dk0200

It looks like outcome size is large.
Could you try filtering it?

6

That was it. tried it in a different environment with a smaller data set and it worked. Thank you

1 Like
7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.