Skip to main content

Generic Request Approval Config

Experimental APIs for resource-level and global approval settings used by agent lifecycle requests (ACTIVATE, DEACTIVATE). Pass the X-SailPoint-Experimental header on every request.

Query parameters address the config because targetId can be a connector resource id (for example aws:bedrock-agent-alias-version) that is not URL-safe as a path segment. sourceId is a query parameter only and is never returned on the document.

An empty per-action object {} means no configuration at this scope. At submit, RESOURCE is used first, then GLOBAL, then org-level agent request configuration. There is no approvalRequired flag.

These routes require product AGENTIC_IDENTITY_PROVISIONING and LaunchDarkly flag MIS_2160_GENERIC_REQUEST_APPROVAL_CONFIG_API_ENABLED. When the product is not licensed the route looks absent (404). When the flag is off the API returns 403 with The requested endpoint is not yet enabled.