Get generic request approval config
GET/generic-request-approval-config/v1
This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.
This API returns the approval configuration for one scope. The scope is identified by targetType and, depending
on the target type, targetId and sourceId.
The response holds one entry per action that the target type supports. An action with no stored setting is
returned as {}, which means it inherits the organization-level approval configuration. A scope that has never
been configured returns 200 with every action set to {}, and the response always carries the id to use with
the update API.
Actions by target type:
RESOURCE: ACTIVATE, DEACTIVATE
SUBTYPE: CREATE, DELETE
SOURCE: DELETE
GLOBAL: ACTIVATE, DEACTIVATE
Only resources of the AI agent type support resource-level approval settings; any other resource returns 400.
An unknown source, resource, or subtype returns 400.
When agentic identity provisioning is not enabled for the tenant, this API returns 404. When this API is not
enabled for the tenant, it returns 403.
Request
Responses
- 200
- 400
- 401
- 403
- 404
- 429
- 500
Approval configuration for the scope.
Client Error - Returned if the request body is invalid.
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.
Forbidden - Returned if the user you are running as, doesn't have access to this end-point.
Not Found - returned if the request URL refers to a resource or object that does not exist
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.
Internal Server Error - Returned if there is an unexpected error.