IDaaS Open Platform
Employee Identity (EIAM)

Query Application-side Functional Permissions

Interface

# Permissions

The Identity Management API is authorized on an application dimension. Before calling the interface, you need to set interface permissions for different applications. For details, please refer to API Permissions.

Permission Code Description
app_func_read Read permission for the application-side functional permission interface
app_func_all Read and write permission for the application-side functional permission interface
read Read permission for all interfaces
all Read and write permission for all interfaces

# Request Specification

GET https://{your_domain}/api/v2/tenant/applications/{application_id}/func-perms

# Request Headers

Parameter Name Chinese Name Required Type Description
Authorization Authorization Yes String Format: Bearer {access_token}
Content-Type Content Type Yes String Fixed value: application/json; charset=utf-8

# Request Example

None

# Request Parameters

Parameter Name Chinese Name Required Type Description
application_id Application ID Yes String Maximum length 50
offset Page Number Yes Int Starts from page 0
limit Page Size Yes Int Number per page between 1 and 50

# Return Example

Success Example:
HTTP/1.1 200 OK
{
    "number": 0,
    "total": 5,
    "size": 50,
    "list": [
        {
            "id": "20230914153344573-EB4E-3CB09F9B6",
            "appId": "20230821144453253-FBA1-0F1B0C0DD",
            "parentId": null,
            "code": "One010A",
            "name": "User Management",
            "type": "MENU",
            "description": "Description 2",
            "sequence": 4,
            "level": 1,
            "path": "/20230914153344573-EB4E-3CB09F9B6",
            "displayPath": "/User Management",
            "remoteId": null,
            "extension": {}
        },
        {
            "id": "20230922112558046-EC85-3ABC53BEC",
            "appId": "20230821144453253-FBA1-0F1B0C0DD",
            "parentId": null,
            "code": "One010B",
            "name": "Organization Management",
            "type": "MENU",
            "description": "Description",
            "sequence": 1,
            "level": 1,
            "path": "/20230922112558046-EC85-3ABC53BEC",
            "displayPath": "/Organization Management",
            "remoteId": null,
            "extension": {}
        },
        {
            "id": "20230920113324284-EFDF-BE5B34E7D",
            "appId": "20230821144453253-FBA1-0F1B0C0DD",
            "parentId": "20230914153344573-EB4E-3CB09F9B6",
            "code": "btn-son",
            "name": "btn-son",
            "type": "OPERATE",
            "description": "btn-son",
            "sequence": null,
            "level": 2,
            "path": "/20230914153344573-EB4E-3CB09F9B6/20230920113324284-EFDF-BE5B34E7D",
            "displayPath": "/User Management/btn-son",
            "remoteId": null,
            "extension": {}
        },
        {
            "id": "20230920113326114-2C40-D835C2683",
            "appId": "20230821144453253-FBA1-0F1B0C0DD",
            "parentId": "20230914153344573-EB4E-3CB09F9B6",
            "code": "btn-son1",
            "name": "btn-son1",
            "type": "OPERATE",
            "description": "btn-son1",
            "sequence": null,
            "level": 2,
            "path": "/20230914153344573-EB4E-3CB09F9B6/20230920113326114-2C40-D835C2683",
            "displayPath": "/User Management/btn-son1",
            "remoteId": null,
            "extension": {}
        },
        {
            "id": "20230922113322791-A016-9B784A7B0",
            "appId": "20230821144453253-FBA1-0F1B0C0DD",
            "parentId": "20230922112558046-EC85-3ABC53BEC",
            "code": "One010B01",
            "name": "Organization Management Add",
            "type": "OPERATE",
            "description": "Description 1",
            "sequence": 1,
            "level": 2,
            "path": "/20230922112558046-EC85-3ABC53BEC/20230922113322791-A016-9B784A7B0",
            "displayPath": "/Organization Management/Organization Management Add",
            "remoteId": null,
            "extension": {}
        }
    ]
}


Error Example:
HTTP/1.1 400 Bad Request
{
    "error": "invalid_token",
    "error_description": "Invalid access token."
}
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

# Return Parameters

Parameter Name Chinese Name Type Description
id Primary Key String
appId Application ID String
objmId Object Model ID String
parentId Parent ID String
code Application Function Permission Code String
name Application Function Permission Name String
type Application Function Permission Type String MENU: Function Menu Type; OPERATE: Operation Button Type
description Description Information String
sequence Sort Order String
level Level String
path ID Path String
displayPath Name Path String
remoteId Function Permission Remote Object ID String
extension Extended Attribute Key-Value Pair String

# Error Codes

Status Code Error Code Error Message Handling Action
400 APP.OBJECTMODEL.0011 Application function permissions model is not enabled
The application function permissions model is not opened

Query Application Data Permissions