Updates to Access Requests API

V3 Access Requests and Beta Access Requests received some updates related to entitlement type requests.

  • Support added for entitlement type requests (note: look for references to entitlements in the API spec)
    • /v3/access-requests
    • /beta/access-request-status
    • /beta/access-request-approvals
  • Additional entitlement request configuration
    • /beta/access-request-config
  • Entitlement CRUD [coming soon]
1 Like

Hello,
Is it possible to provide more specific timeframes for Entitlements CRUD via API that [coming soon] ? Those API functionalities are crucial for our project, we need to plan development accordingly to this release, and will be good to know some specific dates.

1 Like

Hi @Tomasz,

The ability to READ and UPDATE entitlements will be in public beta by the end of this quarter. CREATE and DELETE operations will not be available. UPDATE operations will be limited in scope because the source of truth for entitlements lies with sources. Here is the functionality you can expect for UPDATING entitlements:

  • Bulk update and PATCH operations will be made available
  • Only a few IDN-specific metadata fields will be modifiable in the UPDATE operations. They are tentatively:
    • Display name
    • Description (localizable)
    • Privileged
    • Requestable
    • Segments

Thank you for your response. These are exactly the functionalities we need.

Could you provide the methods for each calls? I think this will help everyone.

I’m going to talk with our product team to open up the entitlements API as public beta so we can get your, and others, valuable feedback on it early. Entitlements are a hot topic in the community right now, so we need to get this right the first time.

Are there plans to ever include DELETE in the API for entitlements? I have a lot of frustration around not being able to remove entitlements without a complete reset of the source.

1 Like

Agreed. In some Flat File Sources I have wanted the ability to remove one wrongfully added or outdated entitlement. Would be a good feature to allow deletion without the need to reset the Entitlements on the source.

I spoke with product, and DELETE for entitlements isn’t trivial to accomplish, since the sources contain the source of truth. It’s not impossible, but would require a lot of engineering effort to change the architecture to support it. You can submit an idea to our ideas portal regarding DELETE for entitlements. If it gets enough attention then product will be more willing to consider it.

Here are the planned API endpoints for Entitlements to be released at the end of this quarter:

  • GET /entitlements - list all entitlements
  • GET /entitlements/{id} - get details of a single entitlement
  • GET /entitlements/{id}/parents - get the parents of an entitlement
  • GET /entitlements/{id}/children - get the children of an entitlement
  • POST /entitlements/bulk-update - perform updates on one or more entitlements. Only privileged and requestable attributes supported at this time
  • PATCH /entitlements/{id} - update a single entitlement. privileged, requestable, display_name, and description attributes supported at this time.