Remove Account API + API Token Scope

Feedback Bugs
, ,
1

What problem are you observing?

delete-account-async | SailPoint Developer Community says scopes: idn:account:remove
image

I can’t seem to find this scope in the list.

image
image1070×1326 30.7 KB

With only idn:accounts:manage I got a 403 error.

image
image1067×1335 45.9 KB

What is the correct behavior?

Scopes required for this API endpoint (and all other) should be available for selection for the API tokens.

What product feature is this related to?

ISC API

What are the steps to reproduce the issue?

See description.

Do you have any other information about your environment that may help?

No.

2

Thank you for reporting this. I have opened an engineering ticket (ISCAIM-24250) to fix it. In the meantime, you will have to use sp:scopes:all to use this endpoint, which is understandably not the greatest option.

3

Thanks for creating the ticket, Colin.
Will this ticket cover all missing scopes, or do we have to create a bug report for each missing scope?

4

These tickets are usually on a per endpoint basis. If you encounter any other endpoints that have incorrect or missing scopes, please let us know.

5

I am very sorry to hear that you’re not checking for similar issues as well, as there are many differences, and I find that comparing the two lists is not that complicated.

Would it not be more time efficient (for SailPoint and for us) to fix it completely instead of waiting for the next bug report with the next scope?

6

I agree that the suggestion made by @adamian would be the best, to have a single resource go through all the different end points to see if the mentioned scope actually exists. It may be a tedious job, but it looks like this is what needs to be done if the QC isn’t properly done when creating / generating the docs & end points.

7

It took me about 10 minutes to download the documentation from GitHub, grep it for scopes and compare it with the list of scopes from the UI. Let’s not overestimate the effort of having a good product.

I am waiting to see this issue fixed until I start reporting other pages like reset-source-entitlements | SailPoint Developer Community ( idn:entitlement:update), get-tenant | SailPoint Developer Community (sp:tenant:read) and so on… I am curious how man years it will take to get all of the scopes covered.

Documented vs UI scopes:
image