sailpoint.beta.RoleInsightsApi
All URIs are relative to https://sailpoint.api.identitynow.com/beta
create-role-insight-requests
This endpoint has been deprecated and may be replaced or removed in future versions of the API.
Generate insights for roles
Submits a create role insights request to the role insights application. At this time there are no parameters. All business roles will be processed for the customer.
API Spec
Parameters
This endpoint does not need any parameter.
Return type
RoleInsightsResponse
Responses
Code | Description | Data Type | Response headers |
---|
201 | Submitted a role insights generation request | RoleInsightsResponse | - |
400 | Client Error - Returned if the request body is invalid. | ErrorResponseDto | - |
401 | Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. | ListAccessModelMetadataAttribute401Response | - |
403 | Forbidden - Returned if the user you are running as, doesn't have access to this end-point. | ErrorResponseDto | - |
429 | Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. | ListAccessModelMetadataAttribute429Response | - |
500 | Internal Server Error - Returned if there is an unexpected error. | ErrorResponseDto | - |
- Content-Type: Not defined
- Accept: application/json
Example
from sailpoint.beta.api.role_insights_api import RoleInsightsApi
from sailpoint.beta.api_client import ApiClient
from sailpoint.beta.models.role_insights_response import RoleInsightsResponse
from sailpoint.configuration import Configuration
configuration = Configuration()
with ApiClient(configuration) as api_client:
try:
results = RoleInsightsApi(api_client).create_role_insight_requests()
print("The response of RoleInsightsApi->create_role_insight_requests:\n")
print(results.model_dump_json(by_alias=True, indent=4))
except Exception as e:
print("Exception when calling RoleInsightsApi->create_role_insight_requests: %s\n" % e)
[Back to top]
download-role-insights-entitlements-changes
Download entitlement insights for a role
This endpoint returns the entitlement insights for a role.
API Spec
Parameters
Param Type | Name | Data Type | Required | Description |
---|
Path | insight_id | str | True | The role insight id |
Query | sorters | str | (optional) | Sort results using the standard syntax described in V3 API Standard Collection Parameters Sorting is supported for the following fields: identitiesWithAccess The default sort is identitiesWithAccess in descending order. |
Query | filters | str | (optional) | Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: name: sw description: sw |
Return type
str
Responses
Code | Description | Data Type | Response headers |
---|
200 | Succeeded. Returns a csv file containing a list of entitlements to be added for a role. | str | - |
400 | Client Error - Returned if the request body is invalid. | ErrorResponseDto | - |
401 | Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. | ListAccessModelMetadataAttribute401Response | - |
403 | Forbidden - Returned if the user you are running as, doesn't have access to this end-point. | ErrorResponseDto | - |
500 | Internal Server Error - Returned if there is an unexpected error. | ErrorResponseDto | - |
- Content-Type: Not defined
- Accept: text/csv, application/json
Example
from sailpoint.beta.api.role_insights_api import RoleInsightsApi
from sailpoint.beta.api_client import ApiClient
from sailpoint.configuration import Configuration
configuration = Configuration()
with ApiClient(configuration) as api_client:
insight_id = '8c190e67-87aa-4ed9-a90b-d9d5344523fb'
sorters = 'identitiesWithAccess'
filters = 'name sw \"r\"'
try:
results = RoleInsightsApi(api_client).download_role_insights_entitlements_changes(insight_id=insight_id)
print("The response of RoleInsightsApi->download_role_insights_entitlements_changes:\n")
print(results.model_dump_json(by_alias=True, indent=4))
except Exception as e:
print("Exception when calling RoleInsightsApi->download_role_insights_entitlements_changes: %s\n" % e)
[Back to top]
get-entitlement-changes-identities
Get identities for a suggested entitlement (for a role)
Role insights suggests entitlements to be added for a role. This endpoint returns a list of identities in the role, with or without the entitlements, for a suggested entitlement so that the user can see which identities would be affected if the suggested entitlement were to be added to the role.
API Spec
Parameters
Param Type | Name | Data Type | Required | Description |
---|
Path | insight_id | str | True | The role insight id |
Path | entitlement_id | str | True | The entitlement id |
Query | has_entitlement | bool | (optional) (default to False) | Identity has this entitlement or not |
Query | offset | int | (optional) (default to 0) | Offset into the full result set. Usually specified with limit to paginate through the results. See V3 API Standard Collection Parameters for more information. |
Query | limit | int | (optional) (default to 250) | Max number of results to return. See V3 API Standard Collection Parameters for more information. |
Query | count | bool | (optional) (default to False) | If true it will populate the X-Total-Count response header with the number of results that would be returned if limit and offset were ignored. Since requesting a total count can have a performance impact, it is recommended not to send count=true if that value will not be used. See V3 API Standard Collection Parameters for more information. |
Query | sorters | str | (optional) | Sort results using the standard syntax described in V3 API Standard Collection Parameters Sorting is supported for the following fields: name |
Query | filters | str | (optional) | Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: name: sw |
Return type
List[RoleInsightsIdentities]
Responses
Code | Description | Data Type | Response headers |
---|
200 | Succeeded. Returns a list of identities with or without the entitlement. | List[RoleInsightsIdentities] | - |
400 | Client Error - Returned if the request body is invalid. | ErrorResponseDto | - |
401 | Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. | ListAccessModelMetadataAttribute401Response | - |
403 | Forbidden - Returned if the user you are running as, doesn't have access to this end-point. | ErrorResponseDto | - |
500 | Internal Server Error - Returned if there is an unexpected error. | ErrorResponseDto | - |
- Content-Type: Not defined
- Accept: application/json
Example
from sailpoint.beta.api.role_insights_api import RoleInsightsApi
from sailpoint.beta.api_client import ApiClient
from sailpoint.beta.models.role_insights_identities import RoleInsightsIdentities
from sailpoint.configuration import Configuration
configuration = Configuration()
with ApiClient(configuration) as api_client:
insight_id = '8c190e67-87aa-4ed9-a90b-d9d5344523fb'
entitlement_id = '8c190e67-87aa-4ed9-a90b-d9d5344523fb'
has_entitlement = False
offset = 0
limit = 250
count = False
sorters = 'name'
filters = 'name sw \"Jan\"'
try:
results = RoleInsightsApi(api_client).get_entitlement_changes_identities(insight_id=insight_id, entitlement_id=entitlement_id)
print("The response of RoleInsightsApi->get_entitlement_changes_identities:\n")
print(results.model_dump_json(by_alias=True, indent=4))
except Exception as e:
print("Exception when calling RoleInsightsApi->get_entitlement_changes_identities: %s\n" % e)
[Back to top]
get-role-insight
Get a single role insight
This endpoint gets role insights information for a role.
API Spec
Parameters
Param Type | Name | Data Type | Required | Description |
---|
Path | insight_id | str | True | The role insight id |
Return type
RoleInsight
Responses
Code | Description | Data Type | Response headers |
---|
200 | Succeeded. Returns information about insights for a single role. | RoleInsight | - |
400 | Client Error - Returned if the request body is invalid. | ErrorResponseDto | - |
401 | Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. | ListAccessModelMetadataAttribute401Response | - |
403 | Forbidden - Returned if the user you are running as, doesn't have access to this end-point. | ErrorResponseDto | - |
500 | Internal Server Error - Returned if there is an unexpected error. | ErrorResponseDto | - |
- Content-Type: Not defined
- Accept: application/json
Example
from sailpoint.beta.api.role_insights_api import RoleInsightsApi
from sailpoint.beta.api_client import ApiClient
from sailpoint.beta.models.role_insight import RoleInsight
from sailpoint.configuration import Configuration
configuration = Configuration()
with ApiClient(configuration) as api_client:
insight_id = '8c190e67-87aa-4ed9-a90b-d9d5344523fb'
try:
results = RoleInsightsApi(api_client).get_role_insight(insight_id=insight_id)
print("The response of RoleInsightsApi->get_role_insight:\n")
print(results.model_dump_json(by_alias=True, indent=4))
except Exception as e:
print("Exception when calling RoleInsightsApi->get_role_insight: %s\n" % e)
[Back to top]
get-role-insights
Get role insights
This method returns detailed role insights for each role.
API Spec
Parameters
Param Type | Name | Data Type | Required | Description |
---|
Query | offset | int | (optional) (default to 0) | Offset into the full result set. Usually specified with limit to paginate through the results. See V3 API Standard Collection Parameters for more information. |
Query | limit | int | (optional) (default to 250) | Max number of results to return. See V3 API Standard Collection Parameters for more information. |
Query | count | bool | (optional) (default to False) | If true it will populate the X-Total-Count response header with the number of results that would be returned if limit and offset were ignored. Since requesting a total count can have a performance impact, it is recommended not to send count=true if that value will not be used. See V3 API Standard Collection Parameters for more information. |
Query | sorters | str | (optional) | Sort results using the standard syntax described in V3 API Standard Collection Parameters Sorting is supported for the following fields: numberOfUpdates, identitiesWithAccess, totalNumberOfIdentities |
Query | filters | str | (optional) | Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: name: sw ownerName: sw description: sw |
Return type
List[RoleInsight]
Responses
Code | Description | Data Type | Response headers |
---|
200 | Succeeded. Returns a list of roles with information about insights for each role. | List[RoleInsight] | - |
400 | Client Error - Returned if the request body is invalid. | ErrorResponseDto | - |
401 | Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. | ListAccessModelMetadataAttribute401Response | - |
403 | Forbidden - Returned if the user you are running as, doesn't have access to this end-point. | ErrorResponseDto | - |
500 | Internal Server Error - Returned if there is an unexpected error. | ErrorResponseDto | - |
- Content-Type: Not defined
- Accept: application/json
Example
from sailpoint.beta.api.role_insights_api import RoleInsightsApi
from sailpoint.beta.api_client import ApiClient
from sailpoint.beta.models.role_insight import RoleInsight
from sailpoint.configuration import Configuration
configuration = Configuration()
with ApiClient(configuration) as api_client:
offset = 0
limit = 250
count = False
sorters = 'numberOfUpdates'
filters = 'name sw \"John\"'
try:
results = RoleInsightsApi(api_client).get_role_insights()
print("The response of RoleInsightsApi->get_role_insights:\n")
print(results.model_dump_json(by_alias=True, indent=4))
except Exception as e:
print("Exception when calling RoleInsightsApi->get_role_insights: %s\n" % e)
[Back to top]
get-role-insights-current-entitlements
Get current entitlement for a role
This endpoint gets the entitlements for a role. The term "current" is to distinguish from the entitlement(s) an insight might recommend adding.
API Spec
Parameters
Param Type | Name | Data Type | Required | Description |
---|
Path | insight_id | str | True | The role insight id |
Query | filters | str | (optional) | Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: name: sw description: sw |
Return type
List[RoleInsightsEntitlement]
Responses
Code | Description | Data Type | Response headers |
---|
200 | Succeeded. Returns a list of current or pre-existing entitlements for a role. | List[RoleInsightsEntitlement] | - |
400 | Client Error - Returned if the request body is invalid. | ErrorResponseDto | - |
401 | Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. | ListAccessModelMetadataAttribute401Response | - |
403 | Forbidden - Returned if the user you are running as, doesn't have access to this end-point. | ErrorResponseDto | - |
500 | Internal Server Error - Returned if there is an unexpected error. | ErrorResponseDto | - |
- Content-Type: Not defined
- Accept: application/json
Example
from sailpoint.beta.api.role_insights_api import RoleInsightsApi
from sailpoint.beta.api_client import ApiClient
from sailpoint.beta.models.role_insights_entitlement import RoleInsightsEntitlement
from sailpoint.configuration import Configuration
configuration = Configuration()
with ApiClient(configuration) as api_client:
insight_id = '8c190e67-87aa-4ed9-a90b-d9d5344523fb'
filters = 'name sw \"r\"'
try:
results = RoleInsightsApi(api_client).get_role_insights_current_entitlements(insight_id=insight_id)
print("The response of RoleInsightsApi->get_role_insights_current_entitlements:\n")
print(results.model_dump_json(by_alias=True, indent=4))
except Exception as e:
print("Exception when calling RoleInsightsApi->get_role_insights_current_entitlements: %s\n" % e)
[Back to top]
get-role-insights-entitlements-changes
Get entitlement insights for a role
This endpoint returns entitlement insights for a role.
API Spec
Parameters
Param Type | Name | Data Type | Required | Description |
---|
Path | insight_id | str | True | The role insight id |
Query | sorters | str | (optional) | Sort results using the standard syntax described in V3 API Standard Collection Parameters Sorting is supported for the following fields: identitiesWithAccess, name |
Query | filters | str | (optional) | Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: name: sw description: sw |
Return type
List[RoleInsightsEntitlementChanges]
Responses
Code | Description | Data Type | Response headers |
---|
200 | Succeeded. Returns a list of entitlements to be added for a role. | List[RoleInsightsEntitlementChanges] | - |
400 | Client Error - Returned if the request body is invalid. | ErrorResponseDto | - |
401 | Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. | ListAccessModelMetadataAttribute401Response | - |
403 | Forbidden - Returned if the user you are running as, doesn't have access to this end-point. | ErrorResponseDto | - |
500 | Internal Server Error - Returned if there is an unexpected error. | ErrorResponseDto | - |
- Content-Type: Not defined
- Accept: application/json
Example
from sailpoint.beta.api.role_insights_api import RoleInsightsApi
from sailpoint.beta.api_client import ApiClient
from sailpoint.beta.models.role_insights_entitlement_changes import RoleInsightsEntitlementChanges
from sailpoint.configuration import Configuration
configuration = Configuration()
with ApiClient(configuration) as api_client:
insight_id = '8c190e67-87aa-4ed9-a90b-d9d5344523fb'
sorters = 'sorters_example'
filters = 'name sw \"Admin\"'
try:
results = RoleInsightsApi(api_client).get_role_insights_entitlements_changes(insight_id=insight_id)
print("The response of RoleInsightsApi->get_role_insights_entitlements_changes:\n")
print(results.model_dump_json(by_alias=True, indent=4))
except Exception as e:
print("Exception when calling RoleInsightsApi->get_role_insights_entitlements_changes: %s\n" % e)
[Back to top]
get-role-insights-requests
This endpoint has been deprecated and may be replaced or removed in future versions of the API.
Returns metadata from prior request.
This endpoint returns details of a prior role insights request.
API Spec
Parameters
Param Type | Name | Data Type | Required | Description |
---|
Path | id | str | True | The role insights request id |
Return type
RoleInsightsResponse
Responses
Code | Description | Data Type | Response headers |
---|
200 | Succeeded. Returns details of an earlier role insights request. | RoleInsightsResponse | - |
400 | Client Error - Returned if the request body is invalid. | ErrorResponseDto | - |
401 | Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. | ListAccessModelMetadataAttribute401Response | - |
403 | Forbidden - Returned if the user you are running as, doesn't have access to this end-point. | ErrorResponseDto | - |
429 | Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. | ListAccessModelMetadataAttribute429Response | - |
500 | Internal Server Error - Returned if there is an unexpected error. | ErrorResponseDto | - |
- Content-Type: Not defined
- Accept: application/json
Example
from sailpoint.beta.api.role_insights_api import RoleInsightsApi
from sailpoint.beta.api_client import ApiClient
from sailpoint.beta.models.role_insights_response import RoleInsightsResponse
from sailpoint.configuration import Configuration
configuration = Configuration()
with ApiClient(configuration) as api_client:
id = '8c190e67-87aa-4ed9-a90b-d9d5344523fb'
try:
results = RoleInsightsApi(api_client).get_role_insights_requests(id=id)
print("The response of RoleInsightsApi->get_role_insights_requests:\n")
print(results.model_dump_json(by_alias=True, indent=4))
except Exception as e:
print("Exception when calling RoleInsightsApi->get_role_insights_requests: %s\n" % e)
[Back to top]
get-role-insights-summary
Get role insights summary information
This method returns high level summary information for role insights for a customer.
API Spec
Parameters
This endpoint does not need any parameter.
Return type
RoleInsightsSummary
Responses
Code | Description | Data Type | Response headers |
---|
200 | Succeeded. Returns high level counts. | RoleInsightsSummary | - |
400 | Client Error - Returned if the request body is invalid. | ErrorResponseDto | - |
401 | Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. | ListAccessModelMetadataAttribute401Response | - |
403 | Forbidden - Returned if the user you are running as, doesn't have access to this end-point. | ErrorResponseDto | - |
500 | Internal Server Error - Returned if there is an unexpected error. | ErrorResponseDto | - |
- Content-Type: Not defined
- Accept: application/json
Example
from sailpoint.beta.api.role_insights_api import RoleInsightsApi
from sailpoint.beta.api_client import ApiClient
from sailpoint.beta.models.role_insights_summary import RoleInsightsSummary
from sailpoint.configuration import Configuration
configuration = Configuration()
with ApiClient(configuration) as api_client:
try:
results = RoleInsightsApi(api_client).get_role_insights_summary()
print("The response of RoleInsightsApi->get_role_insights_summary:\n")
print(results.model_dump_json(by_alias=True, indent=4))
except Exception as e:
print("Exception when calling RoleInsightsApi->get_role_insights_summary: %s\n" % e)
[Back to top]