WorkItems API scopes

[uppala (Mahesh Babu Uppala)]

@abhijit_shekki

Hi Everyone,

I’m currently using the Work Items API to check for pending work items generated during Role Composition Review revocations.

At the moment, the required PAT scope is sp:scopes:all, which grants much broader access than is needed for this use case. Since my integration only needs to access the Work Items API, I was wondering if there’s a way to use a more restrictive scope.

Does SailPoint provide, or plan to provide, more granular PAT scopes for accessing specific APIs such as the Work Items API? If so, could you please let me know the recommended scope to use?

Thanks,

Abhijit

Hi Abhijit,

No, SailPoint introduced PAT scopes to support least-privilege access, but they specifically noted that many endpoints did not yet have individual scopes assigned and were still in the process of adding them refer below post

• Enhancement: API Scopes Now Available - Announcements / Product News - SailPoint Developer Community

Thanks,

Mahesh