Automated commit 'Merge pull request #1915 from sailpoint/DEVREL-1757

Added entitlements as patchable' by github action: 12321210384
sailpoint-oss · Dec 13, 2024 · ef1dbae · ef1dbae
1 parent d4b044c
commit ef1dbae
Show file tree

Hide file tree

Showing 6 changed files with 108 additions and 17 deletions.
diff --git a/idn/beta/paths/role.yaml b/idn/beta/paths/role.yaml
@@ -64,6 +64,8 @@ patch:
 
     * accessProfiles
 
+    * entitlements
+
     * membership
 
     * requestable
@@ -203,7 +205,7 @@ patch:
               ]
 
 
-          Assign a Access Model Metadata to a role:
+          Assign a Access Model Metadata to a Role:
             description: This example shows how to assign a existing metadata to a role.
             value:
               [
@@ -220,6 +222,7 @@ patch:
                   }
                 }
               ]
+
           Make a Role Dimensional:
             description: This example demonstrates how to transform a role into a dynamic role.
             value:
@@ -231,6 +234,33 @@ patch:
                 }
               ]
 
+          Add an Access Profile to a Role:
+            description: This example shows how to add an access profile to a role.
+            value:
+              [
+                {
+                  "op": "add",
+                  "path": "/accessProfiles/-",
+                  "value": {
+                      "id": "1de104e1f9024b1289b3a31e22d28cd1",
+                      "type": "ACCESS_PROFILE"
+                    }
+                }
+              ]
+
+          Add an Entitlement to a Role:
+            description: This example shows how to add an entitlement to a role.
+            value:
+              [
+                {
+                  "op": "add",
+                  "path": "/entitlements/-",
+                  "value": {
+                      "id": "0fb2f8051e48421b8f1f8a64aee3b205",
+                      "type": "ENTITLEMENT"
+                    }
+                }
+              ]
     required: true
   responses:
     '200':

diff --git a/idn/beta/paths/roles.yaml b/idn/beta/paths/roles.yaml
@@ -109,7 +109,11 @@ get:
     '500':
       $ref: '../../v3/responses/500.yaml'
   security:
-    - UserContextAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
+    - userAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
+  x-sailpoint-userLevels:
+    - ORG_ADMIN
+    - ROLE_ADMIN
+    - ROLE_SUBADMIN
 post:
   operationId: createRole
   tags:
@@ -153,4 +157,8 @@ post:
     '500':
       $ref: '../../v3/responses/500.yaml'
   security:
-    - UserContextAuth: [idn:role-unchecked:manage, idn:role-checked:manage]
+    - userAuth: [idn:role-unchecked:manage, idn:role-checked:manage]
+  x-sailpoint-userLevels:
+    - ORG_ADMIN
+    - ROLE_ADMIN
+    - ROLE_SUBADMIN
diff --git a/idn/v2024/paths/role.yaml b/idn/v2024/paths/role.yaml
@@ -63,6 +63,8 @@ patch:
 
     * accessProfiles
 
+    * entitlements
+
     * membership
 
     * requestable
@@ -99,7 +101,7 @@ patch:
         schema:
           type: array
           items:
-            $ref: '../schemas/JsonPatchOperation.yaml'
+            $ref: '../../v3/schemas/JsonPatchOperation.yaml'
         examples:
           Make a Role Requestable and Enable it in One Call:
             description: This example shows how multiple fields may be updated with a single patch call.
@@ -201,7 +203,7 @@ patch:
                 }
               ]
 
-          Assign a Access Model Metadata to a role:
+          Assign a Access Model Metadata to a Role:
             description: This example shows how to assign a existing metadata to a role.
             value:
               [
@@ -219,6 +221,33 @@ patch:
                 }
               ]
 
+          Add an Access Profile to a Role:
+            description: This example shows how to add an access profile to a role.
+            value:
+              [
+                {
+                  "op": "add",
+                  "path": "/accessProfiles/-",
+                  "value": {
+                      "id": "1de104e1f9024b1289b3a31e22d28cd1",
+                      "type": "ACCESS_PROFILE"
+                    }
+                }
+              ]
+
+          Add an Entitlement to a Role:
+            description: This example shows how to add an entitlement to a role.
+            value:
+              [
+                {
+                  "op": "add",
+                  "path": "/entitlements/-",
+                  "value": {
+                      "id": "0fb2f8051e48421b8f1f8a64aee3b205",
+                      "type": "ENTITLEMENT"
+                    }
+                }
+              ]
     required: true
   responses:
     '200':

diff --git a/idn/v2024/paths/roles.yaml b/idn/v2024/paths/roles.yaml
@@ -111,9 +111,9 @@ get:
   security:
     - userAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
   x-sailpoint-userLevels:
-      - ORG_ADMIN
-      - ROLE_ADMIN
-      - ROLE_SUBADMIN
+    - ORG_ADMIN
+    - ROLE_ADMIN
+    - ROLE_SUBADMIN
 
 post:
   operationId: createRole
@@ -160,6 +160,6 @@ post:
   security:
     - userAuth: [idn:role-unchecked:manage, idn:role-checked:manage]
   x-sailpoint-userLevels:
-        - ORG_ADMIN
-        - ROLE_ADMIN
-        - ROLE_SUBADMIN
+    - ORG_ADMIN
+    - ROLE_ADMIN
+    - ROLE_SUBADMIN
diff --git a/idn/v3/paths/role.yaml b/idn/v3/paths/role.yaml
@@ -36,7 +36,6 @@ get:
       $ref: '../../v3/responses/500.yaml'
   security:
     - userAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
-    - applicationAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
   x-sailpoint-userLevels:
     - ORG_ADMIN
     - ROLE_ADMIN
@@ -61,6 +60,8 @@ patch:
 
     * accessProfiles
 
+    * entitlements
+
     * membership
 
     * requestable
@@ -199,7 +200,7 @@ patch:
                 }
               ]
 
-          Assign a Access Model Metadata to a role:
+          Assign a Access Model Metadata to a Role:
             description: This example shows how to assign a existing metadata to a role.
             value:
               [
@@ -217,6 +218,33 @@ patch:
                 }
               ]
 
+          Add an Access Profile to a Role:
+            description: This example shows how to add an access profile to a role.
+            value:
+              [
+                {
+                  "op": "add",
+                  "path": "/accessProfiles/-",
+                  "value": {
+                      "id": "1de104e1f9024b1289b3a31e22d28cd1",
+                      "type": "ACCESS_PROFILE"
+                    }
+                }
+              ]
+
+          Add an Entitlement to a Role:
+            description: This example shows how to add an entitlement to a role.
+            value:
+              [
+                {
+                  "op": "add",
+                  "path": "/entitlements/-",
+                  "value": {
+                      "id": "0fb2f8051e48421b8f1f8a64aee3b205",
+                      "type": "ENTITLEMENT"
+                    }
+                }
+              ]
     required: true
   responses:
     '200':
@@ -237,7 +265,6 @@ patch:
       $ref: '../../v3/responses/500.yaml'
   security:
     - userAuth: [idn:role-unchecked:manage, idn:role-checked:manage]
-    - applicationAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
   x-sailpoint-userLevels:
     - ORG_ADMIN
     - ROLE_ADMIN
@@ -277,7 +304,6 @@ delete:
       $ref: '../../v3/responses/500.yaml'
   security:
     - userAuth: [idn:role-unchecked:manage,idn:role-checked:manage]
-    - applicationAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
   x-sailpoint-userLevels:
     - ORG_ADMIN
     - ROLE_ADMIN

diff --git a/idn/v3/paths/roles.yaml b/idn/v3/paths/roles.yaml
@@ -106,7 +106,6 @@ get:
       $ref: '../../v3/responses/500.yaml'
   security:
     - userAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
-    - applicationAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
   x-sailpoint-userLevels:
     - ORG_ADMIN
     - ROLE_ADMIN
@@ -150,7 +149,6 @@ post:
       $ref: '../../v3/responses/500.yaml'
   security:
     - userAuth: [idn:role-unchecked:manage, idn:role-checked:manage]
-    - applicationAuth: [idn:role-unchecked:read, idn:role-unchecked:manage, idn:role-checked:manage, idn:role-checked:read]
   x-sailpoint-userLevels:
     - ORG_ADMIN
     - ROLE_ADMIN