PingOne Platform APIs

PingOne Permissions by Resource

Use this table when you’re assigning admin roles to find the PingOne permissions based on the resource assignments. You’ll also find the PingOne Permissions by Service table useful.

Refer to PingOne Permissions by Identifier for more information.

The Special column indicates special handling of certain permissions:

  • Essential: Start building a new custom role with the minimum set of permissions needed for the role to be usable.

  • Sensitive: The permission either provides access to sensitive information, such as personal user data, or allows the bearer to perform important actions that could negatively impact the organization, such as deleting an environment.

Resource Service Permission Special

activity

audit_reporting

read

activity

pingid

read

adaptiveTrustPolicy

authz

create

adaptiveTrustPolicy

authz

read

adaptiveTrustPolicy

authz

update

adaptiveTrustPolicy

authz

delete

adaptiveTrustPolicyAssignment

authz

create

adaptiveTrustPolicyAssignment

authz

read

adaptiveTrustPolicyAssignment

authz

delete

adminConsole

privilege

access

agreement

agreements

create

agreement

agreements

read

agreement

agreements

update

agreement

agreements

delete

apiServer

authz

create

apiServer

authz

read

apiServer

authz

update

apiServer

authz

delete

apiServerDeployment

authz

deploy

apiServerDeployment

authz

read

apiUsage

visualization

read

application

applications

create

application

applications

import

application

applications

read

application

applications

update

application

applications

delete

application

p14e

admin

applicationEntitlement

applicationRoles

read

applicationPermission

applicationRoles

create

applicationPermission

applicationRoles

read

applicationPermission

applicationRoles

update

applicationPermission

applicationRoles

delete

applicationResource

applicationRoles

create

applicationResource

applicationRoles

read

applicationResource

applicationRoles

update

applicationResource

applicationRoles

delete

applicationRole

applicationRoles

create

applicationRole

applicationRoles

read

applicationRole

applicationRoles

update

applicationRole

applicationRoles

delete

applicationRoleAssignment

applicationRoles

create

applicationRoleAssignment

applicationRoles

read

applicationRoleAssignment

applicationRoles

delete

applicationRoleAssignments

permissions

read

applicationRoleAssignments

permissions

update

sensitive

applicationRoleEntry

applicationRoles

create

applicationRoleEntry

applicationRoles

read

applicationRoleEntry

applicationRoles

delete

applications

davinci

create

applications

davinci

read

applications

davinci

update

applications

davinci

delete

attribute

resources

create

attribute

resources

read

attribute

resources

update

attribute

resources

delete

auditReport

p14e

admin

auditor

pingfederate

admin

authentication

visualization

read

authorizationAttribute

authz

create

authorizationAttribute

authz

read

authorizationAttribute

authz

test

authorizationAttribute

authz

update

authorizationAttribute

authz

delete

authorizationCondition

authz

create

authorizationCondition

authz

read

authorizationCondition

authz

test

authorizationCondition

authz

update

authorizationCondition

authz

delete

authorizationModule

authz

create

authorizationModule

authz

read

authorizationModule

authz

update

authorizationModule

authz

delete

authorizationPolicy

authz

create

authorizationPolicy

authz

read

authorizationPolicy

authz

test

authorizationPolicy

authz

update

authorizationPolicy

authz

delete

authorizationProcessor

authz

create

authorizationProcessor

authz

read

authorizationProcessor

authz

update

authorizationProcessor

authz

delete

authorizationRule

authz

create

authorizationRule

authz

read

authorizationRule

authz

test

authorizationRule

authz

update

authorizationRule

authz

delete

authorizationService

authz

create

authorizationService

authz

read

authorizationService

authz

test

authorizationService

authz

update

authorizationService

authz

delete

authorizationStatement

authz

create

authorizationStatement

authz

read

authorizationStatement

authz

update

authorizationStatement

authz

delete

authorizeDeployment

authz

read

bootstrap

bootstrap

create

bootstrap

bootstrap

read

branding

branding

update

branding

branding

delete

brandingSettings

branding

read

brandingSettings

branding

update

certificate

applications

issue

sensitive

certificate

certmgt

create

sensitive

certificate

certmgt

read

sensitive

certificate

certmgt

update

sensitive

certificate

certmgt

delete

sensitive

channel

alerting

create

channel

alerting

read

channel

alerting

update

channel

alerting

delete

config

admin

read

config

admin

update

sensitive

config

solutions

create

config

solutions

read

config

solutions

update

configs

enduseruiconfig

read

connection

osmosis

check

connectionSensitiveConfiguration

provisioning

get

connections

davinci

create

connections

davinci

read

connections

davinci

update

connections

davinci

delete

connectors

davinci

read

console

globalregistry

read

constructs

davinci

create

constructs

davinci

read

constructs

davinci

update

constructs

davinci

delete

createTestDevice

mfa

create

credentialSigningKey

credentialsIssuance

create

credentialSigningKey

credentialsIssuance

read

credentialSigningKey

credentialsIssuance

update

credentialSigningKey

credentialsIssuance

delete

credentialType

credentialsIssuance

create

credentialType

credentialsIssuance

read

credentialType

credentialsIssuance

update

credentialType

credentialsIssuance

delete

credentials

credentialsIssuance

create

credentials

credentialsIssuance

read

credentials

credentialsIssuance

update

credentials

credentialsIssuance

delete

crypto

pingfederate

admin

customDomain

branding

create

customDomain

branding

read

customDomain

branding

update

customDomain

branding

delete

dashboard

visualization

read

dataBasedIdentityVerification

idverifications

create

davinciMetrics

visualization

read

decisionendpoint

authz

authorize

decisionendpoint

authz

create

decisionendpoint

authz

read

decisionendpoint

authz

update

decisionendpoint

authz

delete

deployment

orgmgt

create

deployment

orgmgt

read

essential

deploymentpackage

authz

read

device

mfa

authenticate

device

mfa

create

sensitive

device

mfa

read

device

mfa

update

sensitive

device

mfa

delete

sensitive

device

p14e

admin

deviceAuthenticationPolicy

mfa

create

deviceAuthenticationPolicy

mfa

read

deviceAuthenticationPolicy

mfa

update

deviceAuthenticationPolicy

mfa

delete

deviceRequirements

mfa

read

deviceRequirements

mfa

update

deviceRequirements

mfa

delete

digitalWallet

credentialsIssuance

create

digitalWallet

credentialsIssuance

read

digitalWallet

credentialsIssuance

update

digitalWallet

credentialsIssuance

delete

digitalWalletApplication

credentialsIssuance

create

digitalWalletApplication

credentialsIssuance

read

digitalWalletApplication

credentialsIssuance

update

digitalWalletApplication

credentialsIssuance

delete

directLdap

ldapGateway

execute

document

idverifications

create

document

idverifications

get

document

idverifications

update

document

idverifications

delete

dvFlows

davinci

create

dvFlows

davinci

deploy

dvFlows

davinci

read

dvFlows

davinci

update

dvFlows

davinci

delete

dvUsers

davinci

read

dvUsers

davinci

update

dvUsers

davinci

delete

emailDomain

notifications

create

emailDomain

notifications

read

emailDomain

notifications

update

emailDomain

notifications

delete

entity

authz

create

entity

authz

read

entity

authz

test

entity

authz

update

entity

authz

delete

environment

orgmgt

create

sensitive

environment

orgmgt

promote

environment

orgmgt

read

essential

environment

orgmgt

update

environment

orgmgt

delete

sensitive

environmentLicense

licensing

update

environmentOverview

console

display

environmentProperties

console

display

evaluation

risk

create

evaluation

risk

read

evaluation

risk

update

evaluation

riskDetection

create

events

davinci

read

experience

experiences

create

experience

experiences

read

experience

experiences

update

experience

experiences

delete

exploration

visualization

create

exploration

visualization

read

expressions

pingfederate

admin

externalOAuthServer

authz

create

externalOAuthServer

authz

read

externalOAuthServer

authz

update

externalOAuthServer

authz

delete

externalService

externalServices

create

externalService

externalServices

invoke

externalService

externalServices

read

externalService

externalServices

update

externalService

externalServices

delete

features

earlyAccess

read

features

earlyAccess

update

feedback

risk

create

fidoDeviceMetadata

mfa

create

fidoDeviceMetadata

mfa

read

fidoDeviceMetadata

mfa

delete

fidoPolicy

mfa

create

fidoPolicy

mfa

read

fidoPolicy

mfa

update

fidoPolicy

mfa

delete

flow

solutions

read

flowPolicies

davinci

create

flowPolicies

davinci

read

flowPolicies

davinci

update

flowPolicies

davinci

delete

flowPolicy

flowPolicies

read

flowPolicyAssignment

applications

create

flowPolicyAssignment

applications

read

flowPolicyAssignment

applications

update

flowPolicyAssignment

applications

delete

flowVersions

davinci

export

flowVersions

davinci

read

flowVersions

davinci

revert

flowVersions

davinci

update

flowVersions

davinci

delete

form

formBuilder

create

form

formBuilder

read

form

formBuilder

update

form

formBuilder

delete

gateway

gateways

create

gateway

gateways

read

gateway

gateways

update

gateway

gateways

delete

gatewayRoleAssignments

permissions

read

gatewayRoleAssignments

permissions

update

sensitive

gatewayRoleAssignments

permissions

delete

sensitive

global

p14e

admin

grant

applications

create

grant

applications

read

grant

applications

update

grant

applications

delete

group

dir

create

group

dir

read

group

dir

update

group

dir

delete

groupMembership

dir

create

groupMembership

dir

read

groupMembership

dir

delete

groupRoleAssignments

permissions

create

sensitive

groupRoleAssignments

permissions

read

groupRoleAssignments

permissions

delete

sensitive

groupSyncedRules

dir

read

identityProvider

identityProviders

create

identityProvider

identityProviders

read

identityProvider

identityProviders

update

identityProvider

identityProviders

delete

identityRecordMatching

idverifications

create

identityRepository

p14e

admin

image

image

create

image

image

read

image

image

delete

inboundTrafficPolicy

traffic

create

inboundTrafficPolicy

traffic

read

inboundTrafficPolicy

traffic

update

inboundTrafficPolicy

traffic

delete

ingressSettings

traffic

read

ingressSettings

traffic

update

integration

integrations

read

integration

pingid

read

integration

pingid

update

interactionEvents

davinci

read

issuanceRule

credentialsIssuance

create

issuanceRule

credentialsIssuance

read

issuanceRule

credentialsIssuance

update

issuanceRule

credentialsIssuance

delete

issuerProfile

credentialsIssuance

create

issuerProfile

credentialsIssuance

read

issuerProfile

credentialsIssuance

update

kerberos

ldapGateway

validate

key

certmgt

create

sensitive

key

certmgt

read

key

certmgt

update

sensitive

key

certmgt

delete

sensitive

krp

certmgt

create

krp

certmgt

read

krp

certmgt

update

krp

certmgt

delete

language

langmgt

create

language

langmgt

read

language

langmgt

update

language

langmgt

delete

license

licensing

read

essential

mapping

osmosis

read

mapping

osmosis

update

mapping

osmosis

delete

mfaSettings

mfa

read

mfaSettings

mfa

update

mfaSettings

mfa

delete

migration

pingid

execute

migration

pingid

read

migration

pingid

validate

mutableProperties

licensing

update

notification

notifications

create

notificationsPolicy

notifications

create

notificationsPolicy

notifications

read

notificationsPolicy

notifications

update

notificationsPolicy

notifications

delete

notificationsSettings

notifications

read

notificationsSettings

notifications

update

notificationsSettings

notifications

delete

oathJob

mfa

read

oathToken

mfa

create

oathToken

mfa

read

oathToken

mfa

update

oathToken

mfa

delete

oauthConsent

agreements

create

oauthConsent

agreements

read

oauthConsent

agreements

update

onboardingToken

privilege

create

openid4vciOffer

credentialsIssuance

create

openid4vciOffer

credentialsIssuance

read

orchestration

identitycloud

create

orchestration

identitycloud

update

orchestration

pingenterprise

create

orchestration

pingenterprise

read

orchestration

pingenterprise

update

orchestration

pingenterprise

delete

orchestration

pingintelligence

create

orchestration

pingintelligence

read

orchestration

pingintelligence

update

orchestration

pingintelligence

delete

organization

orgmgt

read

essential

pairingKey

mfa

create

pairingKey

mfa

read

pairingKey

mfa

update

pairingKey

mfa

delete

passwordPolicy

dir

create

passwordPolicy

dir

read

passwordPolicy

dir

update

passwordPolicy

dir

delete

plan

osmosis

read

plan

osmosis

update

plan

osmosis

delete

policy

risk

create

policy

risk

read

policy

risk

update

policy

risk

delete

population

dir

create

population

dir

read

population

dir

update

population

dir

delete

prediction

prediction

create

predictor

risk

create

predictor

risk

read

predictor

risk

update

predictor

risk

delete

presentationSession

credentialsVerification

create

presentationSession

credentialsVerification

read

presentationSession

credentialsVerification

delete

promotion

promotion

create

sensitive

promotion

promotion

execute

sensitive

promotion

promotion

read

sensitive

promotion

promotion

delete

sensitive

promotionConfiguration

promotion

read

sensitive

promotionConfiguration

promotion

update

sensitive

promotionVariable

promotion

create

sensitive

promotionVariable

promotion

read

sensitive

promotionVariable

promotion

update

sensitive

promotionVariable

promotion

delete

sensitive

provisioning

visualization

read

provisioningSyncOrchestration

provisioning

create

provisioningSyncOrchestration

provisioning

update

pushCredentials

applications

create

pushCredentials

applications

read

pushCredentials

applications

update

pushCredentials

applications

delete

quota

notifications

read

rateLimitConfigs

ratelimiting

create

rateLimitConfigs

ratelimiting

read

rateLimitConfigs

ratelimiting

update

rateLimitConfigs

ratelimiting

delete

rateLimits

ratelimiting

read

recaptchaV2Config

formBuilder

read

recaptchaV2Config

formBuilder

update

recaptchaV2Config

formBuilder

delete

recentdecisions

authz

read

referenceData

idverifications

get

referenceData

idverifications

delete

resource

resources

create

resource

resources

import

resource

resources

read

resource

resources

update

resource

resources

delete

revision

osmosis

create

revision

osmosis

get

riskSettings

risk

read

riskSettings

risk

update

roles

permissions

create

sensitive

roles

permissions

read

sensitive

roles

permissions

update

sensitive

roles

permissions

delete

sensitive

rule

osmosis

read

rule

osmosis

update

rule

osmosis

delete

saas

p14e

admin

schema

dir

read

schema

dir

update

schema

dir

delete

schema

scim

read

scope

resources

create

scope

resources

read

scope

resources

update

scope

resources

delete

secret

applications

read

sensitive

secret

applications

set

sensitive

secret

applications

update

sensitive

secret

applications

delete

sensitive

secret

resources

read

sensitive

secret

resources

set

sensitive

secret

resources

update

sensitive

secret

resources

delete

sensitive

secrets

externalServices

read

secrets

externalServices

update

seenDevice

devices

create

seenDevice

devices

read

seenDevice

devices

update

seenDevice

devices

delete

serviceUser

p14e

admin

session

radiusGateway

read

sessions

authn

create

sessions

authn

read

sessions

authn

update

sessions

authn

delete

signOnPolicy

authn

create

signOnPolicy

authn

read

signOnPolicy

authn

update

signOnPolicy

authn

delete

signOnPolicyAssignment

applications

create

signOnPolicyAssignment

applications

read

signOnPolicyAssignment

applications

update

signOnPolicyAssignment

applications

delete

snapshot

promotion

create

sensitive

snapshot

promotion

read

sensitive

snapshot

promotion

update

sensitive

snapshot

promotion

delete

sensitive

stagedChanges

credentialsIssuance

read

stagedChanges

credentialsIssuance

update

stats

davinci

read

store

osmosis

read

store

osmosis

update

store

osmosis

delete

subscription

subscriptions

create

subscription

subscriptions

read

subscription

subscriptions

test

subscription

subscriptions

update

subscription

subscriptions

delete

superadmin

identitycloud

admin

support

p14e

admin

system

pingfederate

admin

tag

authz

read

tag

authz

update

tag

authz

delete

template

notifications

read

template

visualization

read

templateContent

notifications

create

templateContent

notifications

read

templateContent

notifications

update

templateContent

notifications

delete

tenantadmin

identitycloud

admin

theme

branding

create

theme

branding

read

theme

branding

update

theme

branding

delete

token

solutions

read

uiTemplates

davinci

create

uiTemplates

davinci

read

uiTemplates

davinci

update

uiTemplates

davinci

delete

update

p14e

admin

user

dir

create

user

dir

import

user

dir

invite

user

dir

read

user

dir

update

user

dir

verify

user

dir

delete

user

ldapGateway

read

user

scim

create

user

scim

read

user

scim

update

user

scim

delete

userAccount

dir

lock

userAccount

dir

unlock

userConsent

agreements

create

userConsent

agreements

read

userConsent

agreements

update

userConsent

agreements

delete

userDemographics

visualization

read

userEnabled

dir

update

userIdentityAssurance

dir

delete

userIdentityProvider

dir

update

userLinkedAccounts

dir

create

userLinkedAccounts

dir

read

userLinkedAccounts

dir

delete

userMfaBypass

dir

update

userMfaEnabled

dir

update

userPassword

dir

forceChange

sensitive

userPassword

dir

read

userPassword

dir

recover

sensitive

userPassword

dir

reset

sensitive

userPassword

dir

set

sensitive

userPassword

dir

unlock

sensitive

userPassword

dir

validate

userPassword

ldapGateway

validate

userProfile

risk

reset

userQuota

notifications

reset

userRoleAssignments

permissions

read

userRoleAssignments

permissions

update

sensitive

userSeenDevice

devices

create

userSeenDevice

devices

read

userSeenDevice

devices

update

userSeenDevice

devices

delete

userSyncedStores

dir

read

userVerifyStatus

dir

update

users

pingfederate

admin

verifiedUserData

idverifications

get

verifiedUserData

idverifications

update

verifiedUserData

idverifications

delete

verifyPolicy

idverifications

create

verifyPolicy

idverifications

read

verifyPolicy

idverifications

update

verifyPolicy

idverifications

delete

verifyTransactions

idverifications

create

verifyTransactions

idverifications

read

verifyTransactions

idverifications

update

verifyTransactions

idverifications

delete

version

authz

read

voicePhrase

idverifications

create

voicePhrase

idverifications

read

voicePhrase

idverifications

update

voicePhrase

idverifications

delete

voicePhraseContent

idverifications

create

voicePhraseContent

idverifications

read

voicePhraseContent

idverifications

update

voicePhraseContent

idverifications

delete