Create Entitlements Across Orgs

Create new role requests in an organizations for which IGA is enabled in the logged in domain
(Note: validityToDate will be ignored for mandatory organization roles org_member, org_owner)

Authorization:

Any user with a domain that is matching the domain of the orgs for which IGA has been enabled

Access Policy

Role	User Accounts
User with matching domain of the organization	✔️

Request

URI

POST

https://{api_host}/csp/gateway//iga/api/loggedin/user/entitlement-requests

COPY

Request Body

RegisterEntitlementsAcrossOrgs of type(s) application/json

Optional

{
    "orgId": "id1",
    "justification": "XXXX",
    "orgRoles": [
        {
            "name": "org_member",
            "validToDate": 12345
        },
        {
            "name": "org_infosec",
            "validToDate": 12345
        }
    ],
    "services": [
        {
            "serviceId": "service-A",
            "roles": [
                {
                    "name": "service-role-1",
                    "validFromDate": 12345,
                    "validToDate": 12345
                },
                {
                    "name": "service-role-2",
                    "validFromDate": 12345,
                    "validToDate": 12345
                }
            ]
        },
        {
            "serviceId": "service-B",
            "roles": [
                {
                    "name": "custom-role"
                }
            ]
        }
    ]
}

string

orgId

Optional

org id for which we are requesting roles from

array of object

orgRoles

Optional

List of roles

array of object

services

Optional

List of services with requested roles

string

justification

Optional

Business justification for entitlement requests

Authentication

This operation uses the following authentication methods.

Bearer

Responses

201

New entitlements request submitted successfully

Returns EntitlementRequestsCreateResponse of type(s) application/json

"EntitlementRequestsCreateResponse Object"

array of string

requestIds

Optional

The policy parameter values

400