Create subtype provisioning policy
POST/source-subtypes/v2/:id/provisioning-policy
This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.
Create the machine account creation provisioning policy of a subtype of any tier. A subtype has at most one provisioning policy; the request is rejected if one already exists.
id and subtypeId must not be supplied (otherwise 400). usageType must be CREATE_MACHINE_ACCOUNT or
omitted. name defaults to the subtype's display name.
Who can call this API depends on the tier of the subtype:
-
SOURCE: requires theidn:source-subtypes:updateright, held by org admins, source admins and source sub-admins. -
CONNECTOR: requires theidn:connector-subtypes:updateright, held by org admins.
A caller without the right for the subtype's tier receives 404, not 403. A malformed ID returns 400.
This API returns 404 when Machine Identity Security or tiered subtype configuration is not enabled for the tenant.
Request
Responses
- 201
- 400
- 401
- 403
- 404
- 429
- 500
Created subtype provisioning policy.
Client Error - Returned if the request body is invalid.
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.
Forbidden - Returned if the user you are running as, doesn't have access to this end-point.
Not Found - returned if the request URL refers to a resource or object that does not exist
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.
Internal Server Error - Returned if there is an unexpected error.