Identities API Application Roles Reference

Assign one of the following predefined roles for performing API operations.

Method Path Application Roles (Unrestricted) Application Roles (Restricted)
GET /access-governance/identities/20250331/identities AG_Administrator, AG_Auditor, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin  
GET /access-governance/identities/20250331/identities/attributeValues/{identityAttributeId} AG_Administrator, AG_Auditor, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin  
GET /access-governance/identities/20250331/identities/attributes AG_Administrator, AG_Auditor, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin  
GET /access-governance/identities/20250331/identities/operators AG_Administrator, AG_Auditor, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin  
GET /access-governance/identities/20250331/identities/{identityId} AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User  
GET /access-governance/identities/20250331/identities/{identityId}/accounts AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AgentAdministrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User  
GET /access-governance/identities/20250331/identities/{identityId}/accounts/{accountId} AG_Administrator, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User  
GET /access-governance/identities/20250331/types/{typeId} AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User