Service Administration API Application Roles Reference

Assign one of the following predefined roles for performing API operations.

Method Path Application Roles (Unrestricted) Application Roles (Restricted)
GET /access-governance/service-administration/20250331/orchestratedSystems/ AG_Administrator, AG_AgentAdministrator, AG_AppOwner_Admin, AG_Auditor, AG_ServiceDesk_Admin AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User
GET /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId} AG_Administrator, AG_AgentAdministrator, AG_AppOwner_Admin, AG_Auditor, AG_ServiceDesk_Admin AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User
GET /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/accountProfiles AG_Administrator, AG_AppOwner_Admin, AG_Auditor AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User
GET /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/accountProfiles/{accountProfileId} AG_Administrator, AG_AppOwner_Admin, AG_Auditor AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User
GET /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/lookupAttributes AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User  
POST /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/permissionAttributes AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User  
GET /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/permissions AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User  
POST /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/sod/analyze AG_Administrator  
POST /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/sod/status AG_Administrator