IDaaS Open Platform
Employee Identity (EIAM)

Query Application-side Permissions for a Single Application Account

Interface

# Permissions

The Identity Management API is authorized on an application dimension. Before calling the interface, you need to set interface permissions for different applications. For details, please refer to API Permissions.

Permission Code Description
account_all Read/write permission for account management interfaces
account_read Read permission for account management interfaces
all Read/write permission for all interfaces
read Permission for all read interfaces

# Request Specification

GET https://{your_domain}/api/v2/tenant/applications/{application_id}/account/{account_id}/permissions

# Request Headers

Parameter Name Chinese Name Required Type Description
Authorization Authorization Yes String Format: Bearer {access_token}
Content-Type Content Type Yes String Fixed value: application/json; charset=utf-8

# Request Example

None

# Request Parameters

Parameter Name Chinese Name Required Type Description
application_id Application ID Yes String Target application id
account_id Application Account ID Yes String

# Return Example

Correct Example:
HTTP/1.1 200 OK
{
    "roles": [
        {
            "id": "20230914164827506-35F4-A740454E5",
            "remoteId": null
        }
    ],
    "funcPerms": [
        {
            "id": "20230914153344573-EB4E-3CB09F9B6",
            "remoteId": null
        },
        {
            "id": "20230920113324284-EFDF-BE5B34E7D",
            "remoteId": null
        }
    ],
    "dataPerms": [
        {
            "id": "20230914153344573-EB4E-3CB09F9B6",
            "remoteId": null
        },
        {
            "id": "20230920113324284-EFDF-BE5B34E7D",
            "remoteId": null
        }
    ]
}


Error Example:
HTTP/1.1 400 Bad Request
{
    "error_code": " APP.ACCOUNT.0028",
    "error_msg": "Application account does not exist"
}
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

# Return Parameters

Parameter Name Chinese Name Type Description
roles Role Information Collection Object Within the collection: id: IDaaS primary key information, remoteId: remote ID
funcPerms Functional Permission Information Collection Object Within the collection: id: IDaaS primary key information, remoteId: remote ID
dataPerms Data Permission Information Collection Object Within the collection: id: IDaaS primary key information, remoteId: remote ID

# Error Codes

Status Code Error Code Error Message Action
400 APP.ACCOUNT.0028 应用账号不存在 请检查应用账号是否存在
The application account does not exist
400 APP.0001 应用不存在 请检查应用是否存在
App does not exist

Paginate Query Application Account Permissions