Step 2: Find the built-in admin roles to assign
GET {{apiPath}}/rolesUse GET {{apiPath}}/roles to return a list of all the PingOne built-in admin roles, and the permissions associated with each role.
If you’re using Postman, the script in the Script tab sets variables for the admin roles to the correct role IDs. If you’re not using Postman, search the response returned for this role information:
-
"name": "Organization Admin". Copy and save the role ID (the
idvalue appearing in the line above). -
"name": "Environment Admin". Copy and save the role ID (the
idvalue appearing in the line above).
Example Request
-
cURL
-
C#
-
Go
-
HTTP
-
Java
-
jQuery
-
NodeJS
-
Python
-
PHP
-
Ruby
-
Swift
curl --location --globoff '{{apiPath}}/roles' \
--header 'Authorization: Bearer {{accessToken}}'var options = new RestClientOptions("{{apiPath}}/roles")
{
MaxTimeout = -1,
};
var client = new RestClient(options);
var request = new RestRequest("", Method.Get);
request.AddHeader("Authorization", "Bearer {{accessToken}}");
RestResponse response = await client.ExecuteAsync(request);
Console.WriteLine(response.Content);package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "{{apiPath}}/roles"
method := "GET"
client := &http.Client {
}
req, err := http.NewRequest(method, url, nil)
if err != nil {
fmt.Println(err)
return
}
req.Header.Add("Authorization", "Bearer {{accessToken}}")
res, err := client.Do(req)
if err != nil {
fmt.Println(err)
return
}
defer res.Body.Close()
body, err := io.ReadAll(res.Body)
if err != nil {
fmt.Println(err)
return
}
fmt.Println(string(body))
}GET /roles HTTP/1.1
Host: {{apiPath}}
Authorization: Bearer {{accessToken}}OkHttpClient client = new OkHttpClient().newBuilder()
.build();
MediaType mediaType = MediaType.parse("text/plain");
RequestBody body = RequestBody.create(mediaType, "");
Request request = new Request.Builder()
.url("{{apiPath}}/roles")
.method("GET", body)
.addHeader("Authorization", "Bearer {{accessToken}}")
.build();
Response response = client.newCall(request).execute();var settings = {
"url": "{{apiPath}}/roles",
"method": "GET",
"timeout": 0,
"headers": {
"Authorization": "Bearer {{accessToken}}"
},
};
$.ajax(settings).done(function (response) {
console.log(response);
});var request = require('request');
var options = {
'method': 'GET',
'url': '{{apiPath}}/roles',
'headers': {
'Authorization': 'Bearer {{accessToken}}'
}
};
request(options, function (error, response) {
if (error) throw new Error(error);
console.log(response.body);
});import requests
url = "{{apiPath}}/roles"
payload = {}
headers = {
'Authorization': 'Bearer {{accessToken}}'
}
response = requests.request("GET", url, headers=headers, data=payload)
print(response.text)<?php
require_once 'HTTP/Request2.php';
$request = new HTTP_Request2();
$request->setUrl('{{apiPath}}/roles');
$request->setMethod(HTTP_Request2::METHOD_GET);
$request->setConfig(array(
'follow_redirects' => TRUE
));
$request->setHeader(array(
'Authorization' => 'Bearer {{accessToken}}'
));
try {
$response = $request->send();
if ($response->getStatus() == 200) {
echo $response->getBody();
}
else {
echo 'Unexpected HTTP status: ' . $response->getStatus() . ' ' .
$response->getReasonPhrase();
}
}
catch(HTTP_Request2_Exception $e) {
echo 'Error: ' . $e->getMessage();
}require "uri"
require "net/http"
url = URI("{{apiPath}}/roles")
http = Net::HTTP.new(url.host, url.port);
request = Net::HTTP::Get.new(url)
request["Authorization"] = "Bearer {{accessToken}}"
response = http.request(request)
puts response.read_bodyvar request = URLRequest(url: URL(string: "{{apiPath}}/roles")!,timeoutInterval: Double.infinity)
request.addValue("Bearer {{accessToken}}", forHTTPHeaderField: "Authorization")
request.httpMethod = "GET"
let task = URLSession.shared.dataTask(with: request) { data, response, error in
guard let data = data else {
print(String(describing: error))
return
}
print(String(data: data, encoding: .utf8)!)
}
task.resume()Example Response
200 OK
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles"
}
},
"_embedded": {
"roles": [
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/1813bc13-8d13-4e88-a825-d40bfe82777b"
}
},
"id": "1813bc13-8d13-4e88-a825-d40bfe82777b",
"name": "Organization Admin",
"description": "Organization Admin",
"applicableTo": [
"ORGANIZATION"
],
"permissions": [
{
"id": "advancedservices:read:config",
"classifier": "config",
"description": "Retrieve PingOne Advanced Services customer configuration"
},
{
"id": "authz:update:entity",
"classifier": "entity",
"description": "Update PingOne Authorize Entity"
},
{
"id": "pingintelligence:create:orchestration",
"classifier": "orchestration",
"description": "Creates a Orchestration flow for Ping Intelligence deployment"
},
{
"id": "authz:read:entity",
"classifier": "entity",
"description": "Read PingOne Authorize Entity"
},
{
"id": "authz:create:condition",
"classifier": "condition",
"description": "Create a PingOne Authorize Condition"
},
{
"id": "authz:test:condition",
"classifier": "condition",
"description": "Test a PingOne Authorize Condition"
},
{
"id": "authz:create:service",
"classifier": "service",
"description": "Create a PingOne Authorize Service"
},
{
"id": "authz:read:recentdecisions",
"classifier": "recentdecisions",
"description": "Read Recent Decisions of a PingOne Authorize Decision Endpoint"
},
{
"id": "orgmgt:read:organization",
"classifier": "organization",
"description": "Read organizations"
},
{
"id": "pingenterprise:update:orchestration",
"classifier": "orchestration",
"description": "Updates Orchestration flow for Ping Enterprise deployment"
},
{
"id": "authz:read:condition",
"classifier": "condition",
"description": "Read a PingOne Authorize Condition"
},
{
"id": "authz:test:service",
"classifier": "service",
"description": "Test a PingOne Authorize Service"
},
{
"id": "pingenterprise:create:orchestration",
"classifier": "orchestration",
"description": "Creates a Orchestration flow for Ping Enterprise deployment"
},
{
"id": "orgmgt:read:environment",
"classifier": "environment",
"description": "Read environments"
},
{
"id": "authz:update:service",
"classifier": "service",
"description": "Update a PingOne Authorize Service"
},
{
"id": "pingintelligence:update:orchestration",
"classifier": "orchestration",
"description": "Updates Orchestration flow for Ping Intelligence deployment"
},
{
"id": "orgmgt:read:deployment",
"classifier": "deployment",
"description": "Read deployment resource"
},
{
"id": "authz:update:tag",
"classifier": "tag",
"description": "Create and Update PingOne Authorize Policy Version Tag"
},
{
"id": "authz:create:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Create PingOne Authorize Decision Endpoint"
},
{
"id": "advancedservices:delete:environment",
"classifier": "environment",
"description": "Delete PingOne Advanced Services environment"
},
{
"id": "authz:create:entity",
"classifier": "entity",
"description": "Create PingOne Authorize Entity"
},
{
"id": "authz:test:entity",
"classifier": "entity",
"description": "Test PingOne Authorize Entity"
},
{
"id": "authz:delete:condition",
"classifier": "condition",
"description": "Delete a PingOne Authorize Condition"
},
{
"id": "authz:update:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Update PingOne Authorize Decision Endpoint"
},
{
"id": "authz:delete:entity",
"classifier": "entity",
"description": "Delete PingOne Authorize Entity"
},
{
"id": "orgmgt:update:environment",
"classifier": "environment",
"description": "Update environment"
},
{
"id": "integrations:read:integration",
"classifier": "integration",
"description": "Read an integration in integration catalog"
},
{
"id": "authz:read:service",
"classifier": "service",
"description": "Read a PingOne Authorize Service"
},
{
"id": "authz:authorize:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Request Decision from a PingOne Authorize Decision Endpoint"
},
{
"id": "visualization:create:exploration",
"classifier": "exploration",
"description": "Create data exploration"
},
{
"id": "bootstrap:read:bootstrap",
"classifier": "bootstrap",
"description": "Read bootstrap"
},
{
"id": "authz:delete:service",
"classifier": "service",
"description": "Delete a PingOne Authorize Service"
},
{
"id": "visualization:read:template",
"classifier": "template",
"description": "Read data exploration template"
},
{
"id": "pingenterprise:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve Orchestration flow for Ping Enterprise deployment"
},
{
"id": "ratelimiting:read:rateLimits",
"classifier": "rateLimits",
"description": "Read rate limits"
},
{
"id": "authz:delete:attribute",
"classifier": "attribute",
"description": "Delete a PingOne Authorize Attribute"
},
{
"id": "authz:delete:adaptiveTrustPolicy",
"classifier": "adaptiveTrustPolicy",
"description": "Delete a PingOne Adaptive Trust Policy"
},
{
"id": "pingenterprise:delete:orchestration",
"classifier": "orchestration",
"description": "Deletes Orchestration flow for Ping Enterprise deployment"
},
{
"id": "visualization:read:exploration",
"classifier": "exploration",
"description": "Read data exploration"
},
{
"id": "authz:delete:processor",
"classifier": "processor",
"description": "Delete a PingOne Authorize Processor"
},
{
"id": "orgmgt:delete:environment",
"classifier": "environment",
"description": "Delete environment"
},
{
"id": "orgmgt:promote:environment",
"classifier": "environment",
"description": "Promote environment"
},
{
"id": "authz:update:attribute",
"classifier": "attribute",
"description": "Update a PingOne Authorize Attribute"
},
{
"id": "licensing:update:environmentLicense",
"classifier": "environmentLicense",
"description": "Update environment licenses"
},
{
"id": "authz:create:adaptiveTrustPolicy",
"classifier": "adaptiveTrustPolicy",
"description": "Create a PingOne Adaptive Trust Policy"
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
},
{
"id": "integrations:delete:integration",
"classifier": "integration",
"description": "Delete an integration in integration catalog"
},
{
"id": "authz:read:deploymentpackage",
"classifier": "deploymentpackage",
"description": "Read PingOne Authorize Deployment Packages"
},
{
"id": "certmgt:create:key",
"classifier": "key",
"description": "Create a new KeyPair"
},
{
"id": "pingintelligence:delete:orchestration",
"classifier": "orchestration",
"description": "Deletes Orchestration flow for Ping Intelligence deployment"
},
{
"id": "authz:update:adaptiveTrustPolicy",
"classifier": "adaptiveTrustPolicy",
"description": "Update a PingOne Adaptive Trust Policy"
},
{
"id": "authz:create:processor",
"classifier": "processor",
"description": "Create a PingOne Authorize Processor"
},
{
"id": "authz:update:processor",
"classifier": "processor",
"description": "Update a PingOne Authorize Processor"
},
{
"id": "visualization:read:dashboard",
"classifier": "dashboard",
"description": "Read dashboards"
},
{
"id": "pingintelligence:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve Orchestration flow for Ping Intelligence deployment"
},
{
"id": "authz:read:version",
"classifier": "version",
"description": "Read PingOne Authorize Policy Version"
},
{
"id": "advancedservices:create:orchestration",
"classifier": "orchestration",
"description": "Create PingOne Advanced Services Orchestration"
},
{
"id": "authz:read:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Read PingOne Authorize Decision Endpoint"
},
{
"id": "orgmgt:create:environment",
"classifier": "environment",
"description": "Create environment"
},
{
"id": "authz:test:attribute",
"classifier": "attribute",
"description": "Test a PingOne Authorize Attribute"
},
{
"id": "authz:read:adaptiveTrustPolicy",
"classifier": "adaptiveTrustPolicy",
"description": "Read a PingOne Adaptive Trust Policy"
},
{
"id": "licensing:update:mutableProperties",
"classifier": "mutableProperties",
"description": "Update licenses' mutable properties"
},
{
"id": "authz:update:condition",
"classifier": "condition",
"description": "Update a PingOne Authorize Condition"
},
{
"id": "integrations:update:integration",
"classifier": "integration",
"description": "Update an integration in integration catalog"
},
{
"id": "licensing:read:license",
"classifier": "license",
"description": "Read licenses"
},
{
"id": "orgmgt:create:deployment",
"classifier": "deployment",
"description": "Create deployment resource"
},
{
"id": "authz:create:attribute",
"classifier": "attribute",
"description": "Create a PingOne Authorize Attribute"
},
{
"id": "authz:read:tag",
"classifier": "tag",
"description": "Read PingOne Authorize Policy Version Tag"
},
{
"id": "authz:read:processor",
"classifier": "processor",
"description": "Read a PingOne Authorize Processor"
},
{
"id": "authz:read:attribute",
"classifier": "attribute",
"description": "Read a PingOne Authorize Attribute"
},
{
"id": "authz:delete:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Delete PingOne Authorize Decision Endpoint"
},
{
"id": "authz:delete:tag",
"classifier": "tag",
"description": "Delete PingOne Authorize Policy Version Tag"
},
{
"id": "fraud:read:ssoLogin",
"classifier": "ssoLogin",
"description": "Read fraud SSO login"
},
{
"id": "bootstrap:create:bootstrap",
"classifier": "bootstrap",
"description": "Create bootstrap"
},
{
"id": "advancedservices:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve PingOne Advanced Services Orchestration"
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/29ddce68-cd7f-4b2a-b6fc-f7a19553b496"
}
},
"id": "29ddce68-cd7f-4b2a-b6fc-f7a19553b496",
"name": "Environment Admin",
"description": "Environment Admin",
"applicableTo": [
"ENVIRONMENT",
"ORGANIZATION"
],
"permissions": [
{
"id": "mfa:create:fidoPolicy",
"classifier": "fidoPolicy",
"description": "Create a FIDO policy"
},
{
"id": "promotion:create:snapshot",
"classifier": "snapshot",
"description": "Create promotion snapshot"
},
{
"id": "dir:create:population",
"classifier": "population",
"description": "Create populations"
},
{
"id": "delegatedadmin:create:delegatedAdminConfigurations",
"classifier": "delegatedAdminConfigurations",
"description": "Create Delegated Admin Configurations"
},
{
"id": "ratelimiting:create:rateLimitConfigs",
"classifier": "rateLimitConfigs",
"description": "Create rate limit configurations"
},
{
"id": "orgmgt:read:organization",
"classifier": "organization",
"description": "Read organizations"
},
{
"id": "applications:update:flowPolicyAssignment",
"classifier": "flowPolicyAssignment",
"description": "Update flow policy assignments"
},
{
"id": "authz:read:condition",
"classifier": "condition",
"description": "Read a PingOne Authorize Condition"
},
{
"id": "formBuilder:update:form",
"classifier": "form",
"description": "Update a form"
},
{
"id": "idverifications:delete:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Delete PingOne Verify Voice Phrase Content"
},
{
"id": "orgmgt:read:environment",
"classifier": "environment",
"description": "Read environments"
},
{
"id": "langmgt:create:language",
"classifier": "language",
"description": "Create a language"
},
{
"id": "osmosis:create:revision",
"classifier": "revision",
"description": "create a new configuration for a specific environment"
},
{
"id": "authz:update:tag",
"classifier": "tag",
"description": "Create and Update PingOne Authorize Policy Version Tag"
},
{
"id": "promotion:delete:promotionVariable",
"classifier": "promotionVariable",
"description": "Delete promotion variable"
},
{
"id": "dir:read:userSyncedStores",
"classifier": "userSyncedStores",
"description": "get user's target store sync status"
},
{
"id": "authz:create:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Create PingOne Authorize Decision Endpoint"
},
{
"id": "authz:create:entity",
"classifier": "entity",
"description": "Create PingOne Authorize Entity"
},
{
"id": "authz:test:entity",
"classifier": "entity",
"description": "Test PingOne Authorize Entity"
},
{
"id": "authz:delete:condition",
"classifier": "condition",
"description": "Delete a PingOne Authorize Condition"
},
{
"id": "branding:delete:customDomain",
"classifier": "customDomain",
"description": "Delete a custom domain"
},
{
"id": "solutions:update:config",
"classifier": "config",
"description": "Update the workflow configuration."
},
{
"id": "authz:update:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Update PingOne Authorize Decision Endpoint"
},
{
"id": "osmosis:read:rule",
"classifier": "rule",
"description": "Read rule"
},
{
"id": "pingid:create:migration",
"classifier": "migration",
"description": "Create PingID migration process to P1"
},
{
"id": "osmosis:read:mapping",
"classifier": "mapping",
"description": "Read mapping"
},
{
"id": "notifications:update:emailDomain",
"classifier": "emailDomain",
"description": "Update an email domain"
},
{
"id": "idverifications:update:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Update PingOne Verify Policies"
},
{
"id": "risk:create:predictor",
"classifier": "predictor",
"description": "Create risk predictors"
},
{
"id": "authn:read:signOnPolicy",
"classifier": "signOnPolicy",
"description": "Retrieve sign-on policies"
},
{
"id": "subscriptions:delete:subscription",
"classifier": "subscription",
"description": "Delete a subscription"
},
{
"id": "authn:create:signOnPolicy",
"classifier": "signOnPolicy",
"description": "Create sign-on policies"
},
{
"id": "ratelimiting:update:rateLimitConfigs",
"classifier": "rateLimitConfigs",
"description": "Update rate limit configurations"
},
{
"id": "dir:create:passwordPolicy",
"classifier": "passwordPolicy",
"description": "Create Password Policies"
},
{
"id": "promotion:delete:snapshot",
"classifier": "snapshot",
"description": "Delete promotion snapshot"
},
{
"id": "osmosis:delete:store",
"classifier": "store",
"description": "delete store"
},
{
"id": "agreements:read:agreement",
"classifier": "agreement",
"description": "Read Agreements"
},
{
"id": "authz:delete:service",
"classifier": "service",
"description": "Delete a PingOne Authorize Service"
},
{
"id": "risk:create:policy",
"classifier": "policy",
"description": "Create risk policies"
},
{
"id": "applicationRoles:read:applicationRole",
"classifier": "applicationRole",
"description": "List and read application roles"
},
{
"id": "fraud:create:eventsDetails",
"classifier": "eventsDetails",
"description": "Create fraud eventsDetails"
},
{
"id": "mfa:read:fidoPolicy",
"classifier": "fidoPolicy",
"description": "Retrieve a FIDO policy"
},
{
"id": "alerting:update:channel",
"classifier": "channel",
"description": "Update AlertChannel"
},
{
"id": "certmgt:update:key",
"classifier": "key",
"description": "Update a KeyPair"
},
{
"id": "applicationRoles:read:applicationResource",
"classifier": "applicationResource",
"description": "List and read application resources"
},
{
"id": "permissions:read:applicationRoleAssignments",
"classifier": "applicationRoleAssignments",
"description": "Read roles assigned to applications"
},
{
"id": "fraud:read:evaluation",
"classifier": "evaluation",
"description": "Read fraud evaluation"
},
{
"id": "authz:create:adaptiveTrustPolicy",
"classifier": "adaptiveTrustPolicy",
"description": "Create a PingOne Adaptive Trust Policy"
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
},
{
"id": "permissions:read:gatewayRoleAssignments",
"classifier": "gatewayRoleAssignments",
"description": "Read gateway role assignments"
},
{
"id": "idverifications:delete:voicePhrase",
"classifier": "voicePhrase",
"description": "Delete PingOne Verify Voice Phrase"
},
{
"id": "certmgt:create:key",
"classifier": "key",
"description": "Create a new KeyPair"
},
{
"id": "permissions:delete:roles",
"classifier": "roles",
"description": "Delete Custom Roles"
},
{
"id": "gateways:update:gateway",
"classifier": "gateway",
"description": "Update gateway"
},
{
"id": "authz:update:adaptiveTrustPolicy",
"classifier": "adaptiveTrustPolicy",
"description": "Update a PingOne Adaptive Trust Policy"
},
{
"id": "applications:issue:certificate",
"classifier": "certificate",
"description": "Issue a new KDC certificate"
},
{
"id": "provisioning:create:provisioningSyncOrchestration",
"classifier": "provisioningSyncOrchestration",
"description": "Create a provisioning sync orchestration in a specific environment"
},
{
"id": "delegatedadmin:delete:delegatedAdminConfigurations",
"classifier": "delegatedAdminConfigurations",
"description": "Delete Delegated Admin Configurations"
},
{
"id": "authz:read:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Read PingOne Authorize Decision Endpoint"
},
{
"id": "applications:create:signOnPolicyAssignment",
"classifier": "signOnPolicyAssignment",
"description": "Create a sign-on policy assignment"
},
{
"id": "delegatedadmin:update:delegatedAdminConfigurations",
"classifier": "delegatedAdminConfigurations",
"description": "Update Delegated Admin Configurations"
},
{
"id": "promotion:update:snapshot",
"classifier": "snapshot",
"description": "Update promotion snapshot"
},
{
"id": "authz:read:apiServerDeployment",
"classifier": "apiServerDeployment",
"description": "Read API Service deployment status"
},
{
"id": "applicationRoles:create:applicationResource",
"classifier": "applicationResource",
"description": "Create application resources"
},
{
"id": "identityProviders:update:identityProvider",
"classifier": "identityProvider",
"description": "Update Identity Provider information"
},
{
"id": "applicationRoles:read:applicationRoleAssignment",
"classifier": "applicationRoleAssignment",
"description": "List application role assignments"
},
{
"id": "langmgt:delete:language",
"classifier": "language",
"description": "Delete a language"
},
{
"id": "authz:read:adaptiveTrustPolicy",
"classifier": "adaptiveTrustPolicy",
"description": "Read a PingOne Adaptive Trust Policy"
},
{
"id": "resources:update:secret",
"classifier": "secret",
"description": "Generate a new client secret for a resource"
},
{
"id": "agreements:create:agreement",
"classifier": "agreement",
"description": "Create Agreement"
},
{
"id": "dir:read:groupSyncedRules",
"classifier": "groupSyncedRules",
"description": "get group's provisioning rule sync status"
},
{
"id": "licensing:read:license",
"classifier": "license",
"description": "Read licenses"
},
{
"id": "osmosis:check:connection",
"classifier": "connection",
"description": "check external sass connection"
},
{
"id": "applications:delete:application",
"classifier": "application",
"description": "Delete an application's OIDC settings"
},
{
"id": "resources:read:resource",
"classifier": "resource",
"description": "Retrieve resources from an environment"
},
{
"id": "risk:read:policy",
"classifier": "policy",
"description": "Read risk policies"
},
{
"id": "applications:update:grant",
"classifier": "grant",
"description": "Update a single resource access grant for an application"
},
{
"id": "applicationRoles:delete:applicationRoleAssignment",
"classifier": "applicationRoleAssignment",
"description": "Unassign application roles"
},
{
"id": "dir:delete:passwordPolicy",
"classifier": "passwordPolicy",
"description": "Delete Password Policies"
},
{
"id": "applications:delete:pushCredentials",
"classifier": "pushCredentials",
"description": "Delete an application's push credentials information"
},
{
"id": "pec:delete:product",
"classifier": "product",
"description": "Delete PingID product"
},
{
"id": "solutions:read:config",
"classifier": "config",
"description": "Retrieve the workflow configuration."
},
{
"id": "applicationRoles:delete:applicationRoleEntry",
"classifier": "applicationRoleEntry",
"description": "Remove application role entries"
},
{
"id": "idverifications:delete:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Delete PingOne Verify Policies"
},
{
"id": "authz:create:condition",
"classifier": "condition",
"description": "Create a PingOne Authorize Condition"
},
{
"id": "notifications:create:templateContent",
"classifier": "templateContent",
"description": "Create a notification template's content"
},
{
"id": "mfa:create:oathToken",
"classifier": "oathToken",
"description": "Create an OATH Token"
},
{
"id": "applicationRoles:read:applicationRoleEntry",
"classifier": "applicationRoleEntry",
"description": "List application role entries"
},
{
"id": "mfa:delete:deviceAuthenticationPolicy",
"classifier": "deviceAuthenticationPolicy",
"description": "Delete device authentication policy"
},
{
"id": "notifications:delete:notificationsPolicy",
"classifier": "notificationsPolicy",
"description": "Delete notifications policy"
},
{
"id": "authz:read:recentdecisions",
"classifier": "recentdecisions",
"description": "Read Recent Decisions of a PingOne Authorize Decision Endpoint"
},
{
"id": "audit_reporting:read:activity",
"classifier": "activity",
"description": "Get Audit Activity"
},
{
"id": "pingid:read:migration",
"classifier": "migration",
"description": "Read PingID migration status to P1"
},
{
"id": "promotion:execute:promotion",
"classifier": "promotion",
"description": "Execute promotion"
},
{
"id": "branding:update:brandingSettings",
"classifier": "brandingSettings",
"description": "Update branding settings"
},
{
"id": "promotion:read:snapshot",
"classifier": "snapshot",
"description": "Read promotion snapshot"
},
{
"id": "osmosis:update:store",
"classifier": "store",
"description": "update store"
},
{
"id": "subscriptions:create:subscription",
"classifier": "subscription",
"description": "Create a subscription"
},
{
"id": "branding:create:customDomain",
"classifier": "customDomain",
"description": "Create a custom domain"
},
{
"id": "alerting:delete:channel",
"classifier": "channel",
"description": "Delete AlertChannel"
},
{
"id": "advancedservices:delete:environment",
"classifier": "environment",
"description": "Delete PingOne Advanced Services environment"
},
{
"id": "mfa:update:mfaSettings",
"classifier": "mfaSettings",
"description": "Update MFA settings"
},
{
"id": "authn:update:signOnPolicy",
"classifier": "signOnPolicy",
"description": "Update sign-on policies"
},
{
"id": "promotion:read:promotion",
"classifier": "promotion",
"description": "Read promotion"
},
{
"id": "integrations:read:integration",
"classifier": "integration",
"description": "Read an integration in integration catalog"
},
{
"id": "mfa:update:oathToken",
"classifier": "oathToken",
"description": "Update an OATH Token"
},
{
"id": "authz:authorize:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Request Decision from a PingOne Authorize Decision Endpoint"
},
{
"id": "visualization:create:exploration",
"classifier": "exploration",
"description": "Create data exploration"
},
{
"id": "applicationRoles:create:applicationRoleEntry",
"classifier": "applicationRoleEntry",
"description": "Add application role entries"
},
{
"id": "externalServices:read:secrets",
"classifier": "secrets",
"description": "Read external service secrets"
},
{
"id": "formBuilder:read:form",
"classifier": "form",
"description": "Read or list forms"
},
{
"id": "fraud:create:feedback",
"classifier": "feedback",
"description": "Create fraud feedback"
},
{
"id": "credentialsIssuance:read:credentials",
"classifier": "credentials",
"description": "Read a credential type or issue credential to a user"
},
{
"id": "permissions:create:roles",
"classifier": "roles",
"description": "Create Custom Roles"
},
{
"id": "visualization:read:template",
"classifier": "template",
"description": "Read data exploration template"
},
{
"id": "applicationRoles:create:applicationPermission",
"classifier": "applicationPermission",
"description": "Create application permissions"
},
{
"id": "pingenterprise:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve Orchestration flow for Ping Enterprise deployment"
},
{
"id": "applicationRoles:create:applicationRole",
"classifier": "applicationRole",
"description": "Create application roles"
},
{
"id": "applications:create:pushCredentials",
"classifier": "pushCredentials",
"description": "Create new push credentials for an application"
},
{
"id": "mfa:update:deviceAuthenticationPolicy",
"classifier": "deviceAuthenticationPolicy",
"description": "Update device authentication policy"
},
{
"id": "ratelimiting:read:rateLimits",
"classifier": "rateLimits",
"description": "Read rate limits"
},
{
"id": "authz:delete:adaptiveTrustPolicy",
"classifier": "adaptiveTrustPolicy",
"description": "Delete a PingOne Adaptive Trust Policy"
},
{
"id": "applications:delete:signOnPolicyAssignment",
"classifier": "signOnPolicyAssignment",
"description": "Delete sign-on policy assignments"
},
{
"id": "identityProviders:delete:identityProvider",
"classifier": "identityProvider",
"description": "Delete an Identity Provider"
},
{
"id": "applicationRoles:delete:applicationRole",
"classifier": "applicationRole",
"description": "Delete application roles"
},
{
"id": "image:read:image",
"classifier": "image",
"description": "Retrieve an image"
},
{
"id": "osmosis:delete:mapping",
"classifier": "mapping",
"description": "delete mapping"
},
{
"id": "visualization:read:exploration",
"classifier": "exploration",
"description": "Read data exploration"
},
{
"id": "authz:update:attribute",
"classifier": "attribute",
"description": "Update a PingOne Authorize Attribute"
},
{
"id": "solutions:read:flow",
"classifier": "flow",
"description": "Retrieve all available workflows."
},
{
"id": "certmgt:update:krp",
"classifier": "krp",
"description": "Update a Key Rotation Policy (KRP)"
},
{
"id": "idverifications:read:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Read PingOne Verify Voice Phrase Content"
},
{
"id": "authz:read:deploymentpackage",
"classifier": "deploymentpackage",
"description": "Read PingOne Authorize Deployment Packages"
},
{
"id": "credentialsIssuance:update:issuerProfile",
"classifier": "issuerProfile",
"description": "Update Credential Issuer Profile"
},
{
"id": "credentialsIssuance:create:credentials",
"classifier": "credentials",
"description": "Create credential type or issue credential to a user"
},
{
"id": "resources:update:attribute",
"classifier": "attribute",
"description": "Update attributes in a resource"
},
{
"id": "certmgt:read:key",
"classifier": "key",
"description": "Read a KeyPair, excluding private key portion"
},
{
"id": "mfa:read:mobileInfo",
"classifier": "mobileInfo",
"description": "Read mobile phone & app info"
},
{
"id": "certmgt:create:krp",
"classifier": "krp",
"description": "Create a Key Rotation Policy (KRP)"
},
{
"id": "alerting:create:channel",
"classifier": "channel",
"description": "Create AlertChannel"
},
{
"id": "authz:create:processor",
"classifier": "processor",
"description": "Create a PingOne Authorize Processor"
},
{
"id": "authz:update:processor",
"classifier": "processor",
"description": "Update a PingOne Authorize Processor"
},
{
"id": "visualization:read:dashboard",
"classifier": "dashboard",
"description": "Read dashboards"
},
{
"id": "dir:read:group",
"classifier": "group",
"description": "Read Group"
},
{
"id": "idverifications:update:document",
"classifier": "document",
"description": "Update PingOne Verify Document"
},
{
"id": "risk:delete:policy",
"classifier": "policy",
"description": "Delete risk policies"
},
{
"id": "authz:read:version",
"classifier": "version",
"description": "Read PingOne Authorize Policy Version"
},
{
"id": "subscriptions:update:subscription",
"classifier": "subscription",
"description": "Update a subscription"
},
{
"id": "flow:execute:flowDefinition",
"classifier": "flowDefinition",
"description": "flow execution permission"
},
{
"id": "risk:update:policy",
"classifier": "policy",
"description": "Update risk policies"
},
{
"id": "solutions:read:token",
"classifier": "token",
"description": "Retrieve a DaVinci access token."
},
{
"id": "identityProviders:read:identityProvider",
"classifier": "identityProvider",
"description": "Retrieve Identity Provider information"
},
{
"id": "authz:create:attribute",
"classifier": "attribute",
"description": "Create a PingOne Authorize Attribute"
},
{
"id": "resources:create:attribute",
"classifier": "attribute",
"description": "Create attributes in a resource"
},
{
"id": "authz:delete:tag",
"classifier": "tag",
"description": "Delete PingOne Authorize Policy Version Tag"
},
{
"id": "notifications:update:templateContent",
"classifier": "templateContent",
"description": "Update a notification template's content"
},
{
"id": "applications:create:application",
"classifier": "application",
"description": "Create an application's OIDC settings"
},
{
"id": "externalServices:update:secrets",
"classifier": "secrets",
"description": "Update external service secrets"
},
{
"id": "mfa:create:deviceAuthenticationPolicy",
"classifier": "deviceAuthenticationPolicy",
"description": "Create device authentication policy"
},
{
"id": "idverifications:get:document",
"classifier": "document",
"description": "Read PingOne Verify Document"
},
{
"id": "dir:update:population",
"classifier": "population",
"description": "Update populations"
},
{
"id": "flowPolicies:read:flowPolicy",
"classifier": "flowPolicy",
"description": "Retrieve flow policies"
},
{
"id": "fraud:read:session",
"classifier": "session",
"description": "Read fraud session"
},
{
"id": "resources:update:scope",
"classifier": "scope",
"description": "Update scopes in a resource"
},
{
"id": "idverifications:delete:document",
"classifier": "document",
"description": "Delete PingOne Verify Document"
},
{
"id": "notifications:create:emailDomain",
"classifier": "emailDomain",
"description": "Create an email domain"
},
{
"id": "osmosis:read:plan",
"classifier": "plan",
"description": "Read plan"
},
{
"id": "advancedservices:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve PingOne Advanced Services Orchestration"
},
{
"id": "notifications:delete:notificationsSettings",
"classifier": "notificationsSettings",
"description": "Reset notifications settings"
},
{
"id": "formBuilder:update:recaptchaV2Config",
"classifier": "recaptchaV2Config",
"description": "Update a reCAPTCHA V2 config"
},
{
"id": "authz:read:entity",
"classifier": "entity",
"description": "Read PingOne Authorize Entity"
},
{
"id": "resources:create:resource",
"classifier": "resource",
"description": "Create resources on an environment"
},
{
"id": "risk:update:predictor",
"classifier": "predictor",
"description": "Update risk predictors"
},
{
"id": "promotion:delete:promotion",
"classifier": "promotion",
"description": "Delete promotion"
},
{
"id": "notifications:read:templateContent",
"classifier": "templateContent",
"description": "Retrieve a notification template's content"
},
{
"id": "applications:update:pushCredentials",
"classifier": "pushCredentials",
"description": "Update application's push credentials information"
},
{
"id": "authz:create:service",
"classifier": "service",
"description": "Create a PingOne Authorize Service"
},
{
"id": "idverifications:create:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Create PingOne Verify Policies"
},
{
"id": "pingenterprise:update:orchestration",
"classifier": "orchestration",
"description": "Updates Orchestration flow for Ping Enterprise deployment"
},
{
"id": "authz:deploy:apiServerDeployment",
"classifier": "apiServerDeployment",
"description": "Deploy API Services"
},
{
"id": "formBuilder:delete:recaptchaV2Config",
"classifier": "recaptchaV2Config",
"description": "Delete a reCAPTCHA V2 config"
},
{
"id": "image:create:image",
"classifier": "image",
"description": "Create an image"
},
{
"id": "fraud:read:eventsDetails",
"classifier": "eventsDetails",
"description": "Read fraud eventsDetails"
},
{
"id": "resources:delete:scope",
"classifier": "scope",
"description": "Delete scopes from a resource"
},
{
"id": "authz:test:service",
"classifier": "service",
"description": "Test a PingOne Authorize Service"
},
{
"id": "branding:create:theme",
"classifier": "theme",
"description": "Create a theme"
},
{
"id": "formBuilder:read:recaptchaV2Config",
"classifier": "recaptchaV2Config",
"description": "Read a reCAPTCHA V2 config"
},
{
"id": "idverifications:create:document",
"classifier": "document",
"description": "Create PingOne Verify Document"
},
{
"id": "ratelimiting:delete:rateLimitConfigs",
"classifier": "rateLimitConfigs",
"description": "Delete rate limit configurations"
},
{
"id": "authz:update:service",
"classifier": "service",
"description": "Update a PingOne Authorize Service"
},
{
"id": "mfa:update:fidoPolicy",
"classifier": "fidoPolicy",
"description": "Update a FIDO policy"
},
{
"id": "delegatedadmin:read:delegatedAdminConfigurations",
"classifier": "delegatedAdminConfigurations",
"description": "Read Delegated Admin Configurations"
},
{
"id": "authz:delete:apiServer",
"classifier": "apiServer",
"description": "Delete API Services"
},
{
"id": "certmgt:read:certificate",
"classifier": "certificate",
"description": "Read a certificate"
},
{
"id": "applications:delete:secret",
"classifier": "secret",
"description": "Delete an application's previous client secret"
},
{
"id": "orgmgt:update:environment",
"classifier": "environment",
"description": "Update environment"
},
{
"id": "authz:read:service",
"classifier": "service",
"description": "Read a PingOne Authorize Service"
},
{
"id": "applicationRoles:read:applicationEntitlement",
"classifier": "applicationEntitlement",
"description": "Read application entitlements"
},
{
"id": "applications:read:grant",
"classifier": "grant",
"description": "Retrieve a single resource access grant for an application"
},
{
"id": "permissions:read:roles",
"classifier": "roles",
"description": "Read Custom Roles"
},
{
"id": "permissions:update:roles",
"classifier": "roles",
"description": "Update Custom Roles"
},
{
"id": "externalServices:delete:externalService",
"classifier": "externalService",
"description": "Delete an external service"
},
{
"id": "agreements:update:agreement",
"classifier": "agreement",
"description": "Update Agreement"
},
{
"id": "solutions:create:config",
"classifier": "config",
"description": "Create the workflow configuration."
},
{
"id": "branding:update:customDomain",
"classifier": "customDomain",
"description": "Update a custom domain"
},
{
"id": "formBuilder:create:form",
"classifier": "form",
"description": "Create a form"
},
{
"id": "flow:delete:flowDefinition",
"classifier": "flowDefinition",
"description": "Delete a flow definition"
},
{
"id": "permissions:delete:gatewayRoleAssignments",
"classifier": "gatewayRoleAssignments",
"description": "Delete gateway role assignments"
},
{
"id": "branding:delete:theme",
"classifier": "theme",
"description": "Delete a theme"
},
{
"id": "externalServices:create:externalService",
"classifier": "externalService",
"description": "Create an external service"
},
{
"id": "permissions:update:gatewayRoleAssignments",
"classifier": "gatewayRoleAssignments",
"description": "Update gateway role assignments"
},
{
"id": "dir:delete:population",
"classifier": "population",
"description": "Delete populations"
},
{
"id": "authz:delete:attribute",
"classifier": "attribute",
"description": "Delete a PingOne Authorize Attribute"
},
{
"id": "resources:delete:resource",
"classifier": "resource",
"description": "Delete resources from an environment"
},
{
"id": "flow:read:flowDefinition",
"classifier": "flowDefinition",
"description": "Read a flow definition"
},
{
"id": "subscriptions:read:subscription",
"classifier": "subscription",
"description": "Read a subscription"
},
{
"id": "authn:delete:signOnPolicy",
"classifier": "signOnPolicy",
"description": "Delete sign-on policies"
},
{
"id": "authz:delete:processor",
"classifier": "processor",
"description": "Delete a PingOne Authorize Processor"
},
{
"id": "orgmgt:promote:environment",
"classifier": "environment",
"description": "Promote environment"
},
{
"id": "dir:read:passwordPolicy",
"classifier": "passwordPolicy",
"description": "Read Password Policies"
},
{
"id": "applications:delete:grant",
"classifier": "grant",
"description": "Delete a single resource access grant for an application"
},
{
"id": "applicationRoles:create:applicationRoleAssignment",
"classifier": "applicationRoleAssignment",
"description": "Assign application roles"
},
{
"id": "resources:create:scope",
"classifier": "scope",
"description": "Create scopes in a resource"
},
{
"id": "applications:update:application",
"classifier": "application",
"description": "Update an application's OIDC settings"
},
{
"id": "applications:read:secret",
"classifier": "secret",
"description": "Retrieve an application’s client secret"
},
{
"id": "notifications:delete:emailDomain",
"classifier": "emailDomain",
"description": "Delete an email domain"
},
{
"id": "enduseruiconfig:read:configs",
"classifier": "configs",
"description": "Read End User UI Configurations"
},
{
"id": "permissions:update:applicationRoleAssignments",
"classifier": "applicationRoleAssignments",
"description": "Update roles assigned to applications"
},
{
"id": "idverifications:create:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Create PingOne Verify Voice Phrase Content"
},
{
"id": "applicationRoles:update:applicationResource",
"classifier": "applicationResource",
"description": "Update application resources"
},
{
"id": "promotion:read:promotionVariable",
"classifier": "promotionVariable",
"description": "Read promotion variable definition"
},
{
"id": "certmgt:delete:krp",
"classifier": "krp",
"description": "Delete a Key Rotation Policy (KRP)"
},
{
"id": "resources:read:scope",
"classifier": "scope",
"description": "Retrieve scopes from a resource"
},
{
"id": "branding:read:brandingSettings",
"classifier": "brandingSettings",
"description": "Read or list branding settings"
},
{
"id": "applicationRoles:update:applicationRole",
"classifier": "applicationRole",
"description": "Update application roles"
},
{
"id": "mfa:create:fidoDeviceMetadata",
"classifier": "fidoDeviceMetadata",
"description": "Create Custom FIDO Device Metadata"
},
{
"id": "pingintelligence:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve Orchestration flow for Ping Intelligence deployment"
},
{
"id": "advancedservices:create:orchestration",
"classifier": "orchestration",
"description": "Create PingOne Advanced Services Orchestration"
},
{
"id": "credentialsIssuance:update:credentials",
"classifier": "credentials",
"description": "Update credential type or issue credential to a user"
},
{
"id": "certmgt:read:krp",
"classifier": "krp",
"description": "Read Key Rotation Policies (KRP)"
},
{
"id": "ratelimiting:read:rateLimitConfigs",
"classifier": "rateLimitConfigs",
"description": "Read rate limit configurations"
},
{
"id": "mfa:delete:oathToken",
"classifier": "oathToken",
"description": "Delete an OATH Token"
},
{
"id": "resources:delete:attribute",
"classifier": "attribute",
"description": "Delete attributes from a resource"
},
{
"id": "dir:read:population",
"classifier": "population",
"description": "Read populations"
},
{
"id": "authz:update:condition",
"classifier": "condition",
"description": "Update a PingOne Authorize Condition"
},
{
"id": "authz:read:apiServer",
"classifier": "apiServer",
"description": "Retrieve API Services"
},
{
"id": "applications:read:pushCredentials",
"classifier": "pushCredentials",
"description": "Retrieve application's push credentials information"
},
{
"id": "alerting:read:channel",
"classifier": "channel",
"description": "Read AlertChannels"
},
{
"id": "orgmgt:create:deployment",
"classifier": "deployment",
"description": "Create deployment resource"
},
{
"id": "authz:read:tag",
"classifier": "tag",
"description": "Read PingOne Authorize Policy Version Tag"
},
{
"id": "authz:read:processor",
"classifier": "processor",
"description": "Read a PingOne Authorize Processor"
},
{
"id": "certmgt:delete:certificate",
"classifier": "certificate",
"description": "Deletes a certificate"
},
{
"id": "authz:read:attribute",
"classifier": "attribute",
"description": "Read a PingOne Authorize Attribute"
},
{
"id": "applications:read:application",
"classifier": "application",
"description": "Retrieve an application's OIDC settings"
},
{
"id": "notifications:update:notificationsSettings",
"classifier": "notificationsSettings",
"description": "Update notifications settings"
},
{
"id": "flow:create:flowDefinition",
"classifier": "flowDefinition",
"description": "Create a flow definition"
},
{
"id": "resources:read:attribute",
"classifier": "attribute",
"description": "Retrieve attributes from a resource"
},
{
"id": "idverifications:read:voicePhrase",
"classifier": "voicePhrase",
"description": "Read PingOne Verify Voice Phrase"
},
{
"id": "applicationRoles:update:applicationPermission",
"classifier": "applicationPermission",
"description": "Update application permissions"
},
{
"id": "notifications:create:notification",
"classifier": "notification",
"description": "Create a notification"
},
{
"id": "certmgt:create:certificate",
"classifier": "certificate",
"description": "Create a certificate"
},
{
"id": "authz:update:entity",
"classifier": "entity",
"description": "Update PingOne Authorize Entity"
},
{
"id": "notifications:read:notificationsPolicy",
"classifier": "notificationsPolicy",
"description": "Retrieve notifications policy"
},
{
"id": "dir:delete:schema",
"classifier": "schema",
"description": "Delete schemas"
},
{
"id": "branding:update:branding",
"classifier": "branding",
"description": "Create and update branding"
},
{
"id": "mfa:delete:mfaSettings",
"classifier": "mfaSettings",
"description": "Reset MFA settings"
},
{
"id": "risk:delete:predictor",
"classifier": "predictor",
"description": "Delete risk predictors"
},
{
"id": "authz:test:condition",
"classifier": "condition",
"description": "Test a PingOne Authorize Condition"
},
{
"id": "promotion:create:promotionVariable",
"classifier": "promotionVariable",
"description": "Create promotion variable definition"
},
{
"id": "applications:create:flowPolicyAssignment",
"classifier": "flowPolicyAssignment",
"description": "Create a flow policy assignment"
},
{
"id": "branding:update:theme",
"classifier": "theme",
"description": "Update a theme"
},
{
"id": "osmosis:delete:rule",
"classifier": "rule",
"description": "delete rule"
},
{
"id": "osmosis:update:plan",
"classifier": "plan",
"description": "update plan"
},
{
"id": "certmgt:update:certificate",
"classifier": "certificate",
"description": "Update a certificate"
},
{
"id": "idverifications:create:voicePhrase",
"classifier": "voicePhrase",
"description": "Create PingOne Verify Voice Phrase"
},
{
"id": "langmgt:update:language",
"classifier": "language",
"description": "Update a language"
},
{
"id": "notifications:read:emailDomain",
"classifier": "emailDomain",
"description": "Read or list email domains"
},
{
"id": "osmosis:read:store",
"classifier": "store",
"description": "Read store"
},
{
"id": "pingintelligence:update:orchestration",
"classifier": "orchestration",
"description": "Updates Orchestration flow for Ping Intelligence deployment"
},
{
"id": "applications:update:signOnPolicyAssignment",
"classifier": "signOnPolicyAssignment",
"description": "Update sign-on policy assignments"
},
{
"id": "orgmgt:read:deployment",
"classifier": "deployment",
"description": "Read deployment resource"
},
{
"id": "osmosis:update:mapping",
"classifier": "mapping",
"description": "update mapping"
},
{
"id": "idverifications:update:voicePhrase",
"classifier": "voicePhrase",
"description": "Update PingOne Verify Voice Phrase"
},
{
"id": "credentialsIssuance:create:issuerProfile",
"classifier": "issuerProfile",
"description": "Define Credential Issuer Profile"
},
{
"id": "idverifications:read:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Read PingOne Verify Policies"
},
{
"id": "authz:delete:entity",
"classifier": "entity",
"description": "Delete PingOne Authorize Entity"
},
{
"id": "promotion:create:promotion",
"classifier": "promotion",
"description": "Create promotion"
},
{
"id": "idverifications:update:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Update PingOne Verify Voice Phrase Content"
},
{
"id": "osmosis:update:rule",
"classifier": "rule",
"description": "update rule"
},
{
"id": "applicationRoles:read:applicationPermission",
"classifier": "applicationPermission",
"description": "List application permissions"
},
{
"id": "dir:update:schema",
"classifier": "schema",
"description": "Update schemas"
},
{
"id": "notifications:delete:templateContent",
"classifier": "templateContent",
"description": "Deletes a notification template's content"
},
{
"id": "identityProviders:create:identityProvider",
"classifier": "identityProvider",
"description": "Create new Identity Provider"
},
{
"id": "dir:read:schema",
"classifier": "schema",
"description": "Read schemas"
},
{
"id": "notifications:read:quota",
"classifier": "quota",
"description": "Read quota"
},
{
"id": "notifications:read:template",
"classifier": "template",
"description": "Retrieve a notification template"
},
{
"id": "notifications:create:notificationsPolicy",
"classifier": "notificationsPolicy",
"description": "Create notifications policy"
},
{
"id": "externalServices:read:externalService",
"classifier": "externalService",
"description": "Read a external service(s)"
},
{
"id": "applications:read:signOnPolicyAssignment",
"classifier": "signOnPolicyAssignment",
"description": "Retrieve sign-on policy assignments"
},
{
"id": "gateways:create:gateway",
"classifier": "gateway",
"description": "Create gateway"
},
{
"id": "applications:delete:flowPolicyAssignment",
"classifier": "flowPolicyAssignment",
"description": "Delete flow policy assignments"
},
{
"id": "resources:delete:secret",
"classifier": "secret",
"description": "Delete a resource's previous client secret"
},
{
"id": "mfa:read:mfaSettings",
"classifier": "mfaSettings",
"description": "Retrieve MFA settings"
},
{
"id": "langmgt:read:language",
"classifier": "language",
"description": "Read or list languages"
},
{
"id": "mfa:read:fidoDeviceMetadata",
"classifier": "fidoDeviceMetadata",
"description": "Retrieve FIDO Device Metadata"
},
{
"id": "branding:read:customDomain",
"classifier": "customDomain",
"description": "Read or list custom domains"
},
{
"id": "mfa:read:oathToken",
"classifier": "oathToken",
"description": "Retrieve an OATH Token"
},
{
"id": "fraud:read:feedback",
"classifier": "feedback",
"description": "Read fraud feedback"
},
{
"id": "dir:update:passwordPolicy",
"classifier": "passwordPolicy",
"description": "Update Password Policies"
},
{
"id": "credentialsIssuance:read:issuerProfile",
"classifier": "issuerProfile",
"description": "Read Credential Issuer Profile"
},
{
"id": "authz:create:apiServer",
"classifier": "apiServer",
"description": "Create API Services"
},
{
"id": "notifications:read:notificationsSettings",
"classifier": "notificationsSettings",
"description": "Read notifications settings"
},
{
"id": "mfa:read:deviceAuthenticationPolicy",
"classifier": "deviceAuthenticationPolicy",
"description": "Retrieve device authentication policy"
},
{
"id": "applications:update:secret",
"classifier": "secret",
"description": "Generate a new client secret"
},
{
"id": "certmgt:delete:key",
"classifier": "key",
"description": "Deletes a KeyPair"
},
{
"id": "risk:read:predictor",
"classifier": "predictor",
"description": "Read risk predictors"
},
{
"id": "resources:update:resource",
"classifier": "resource",
"description": "Update resources on an environment"
},
{
"id": "externalServices:invoke:externalService",
"classifier": "externalService",
"description": "Invoke an external service request"
},
{
"id": "pec:create:product",
"classifier": "product",
"description": "Create PingID product"
},
{
"id": "externalServices:update:externalService",
"classifier": "externalService",
"description": "Update an external service"
},
{
"id": "applicationRoles:delete:applicationResource",
"classifier": "applicationResource",
"description": "Delete application resources"
},
{
"id": "provisioning:get:connectionSensitiveConfiguration",
"classifier": "connectionSensitiveConfiguration",
"description": "Get connection sensitive configuration"
},
{
"id": "mfa:delete:fidoDeviceMetadata",
"classifier": "fidoDeviceMetadata",
"description": "Delete Custom FIDO Device Metadata"
},
{
"id": "flow:update:flowDefinition",
"classifier": "flowDefinition",
"description": "Update a flow definition"
},
{
"id": "osmosis:get:revision",
"classifier": "revision",
"description": "get configuration for a specific environment"
},
{
"id": "osmosis:delete:plan",
"classifier": "plan",
"description": "delete plan"
},
{
"id": "branding:read:theme",
"classifier": "theme",
"description": "Read or list themes"
},
{
"id": "branding:delete:branding",
"classifier": "branding",
"description": "Delete branding"
},
{
"id": "provisioning:update:provisioningSyncOrchestration",
"classifier": "provisioningSyncOrchestration",
"description": "Update a provisioning sync orchestration in a specific environment"
},
{
"id": "authz:test:attribute",
"classifier": "attribute",
"description": "Test a PingOne Authorize Attribute"
},
{
"id": "applicationRoles:delete:applicationPermission",
"classifier": "applicationPermission",
"description": "Delete application permissions"
},
{
"id": "authz:update:apiServer",
"classifier": "apiServer",
"description": "Update API Services"
},
{
"id": "gateways:read:gateway",
"classifier": "gateway",
"description": "Read gateways"
},
{
"id": "gateways:delete:gateway",
"classifier": "gateway",
"description": "Delete gateway"
},
{
"id": "agreements:delete:agreement",
"classifier": "agreement",
"description": "Delete Agreement"
},
{
"id": "applications:read:flowPolicyAssignment",
"classifier": "flowPolicyAssignment",
"description": "Retrieve flow policy assignments"
},
{
"id": "promotion:update:promotionVariable",
"classifier": "promotionVariable",
"description": "Update promotion variable definition"
},
{
"id": "resources:read:secret",
"classifier": "secret",
"description": "Retrieve a resource’s client secret"
},
{
"id": "applications:create:grant",
"classifier": "grant",
"description": "Create a new resource access grant for an application"
},
{
"id": "image:delete:image",
"classifier": "image",
"description": "Delete an image"
},
{
"id": "fraud:read:ssoLogin",
"classifier": "ssoLogin",
"description": "Read fraud SSO login"
},
{
"id": "mfa:delete:fidoPolicy",
"classifier": "fidoPolicy",
"description": "Delete a FIDO policy"
},
{
"id": "notifications:update:notificationsPolicy",
"classifier": "notificationsPolicy",
"description": "Update notifications policy"
},
{
"id": "delegatedadmin:read:delegatedAdminSdkToken",
"classifier": "delegatedAdminSdkToken",
"description": "Read Delegated Admin SdkToken"
},
{
"id": "formBuilder:delete:form",
"classifier": "form",
"description": "Delete a form"
}
],
"canAssign": [
{
"id": "7aba580c-5ec7-4b26-987d-85f462767455"
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/0bd9c966-7664-4ac1-b059-0ff9293908e2"
}
},
"id": "0bd9c966-7664-4ac1-b059-0ff9293908e2",
"name": "Identity Data Admin",
"description": "Identity Data Admin",
"applicableTo": [
"ENVIRONMENT",
"POPULATION"
],
"permissions": [
{
"id": "dir:provision:group",
"classifier": "group",
"description": "Create Provisionable Group"
},
{
"id": "fraud:read:cluster",
"classifier": "cluster",
"description": "Read fraud clusters"
},
{
"id": "idverifications:create:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Create PingOne Verify Policies"
},
{
"id": "orgmgt:read:organization",
"classifier": "organization",
"description": "Read organizations"
},
{
"id": "scim:read:user",
"classifier": "user",
"description": "Read users via SCIM"
},
{
"id": "image:create:image",
"classifier": "image",
"description": "Create an image"
},
{
"id": "fraud:read:eventsDetails",
"classifier": "eventsDetails",
"description": "Read fraud eventsDetails"
},
{
"id": "agreements:update:oauthConsent",
"classifier": "oauthConsent",
"description": "Update OAuth Consent"
},
{
"id": "idverifications:delete:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Delete PingOne Verify Voice Phrase Content"
},
{
"id": "orgmgt:read:environment",
"classifier": "environment",
"description": "Read environments"
},
{
"id": "devices:delete:userSeenDevice",
"classifier": "userSeenDevice",
"description": "Delete user association with accessing device"
},
{
"id": "devices:update:seenDevice",
"classifier": "seenDevice",
"description": "Update accessing device"
},
{
"id": "idverifications:create:document",
"classifier": "document",
"description": "Create PingOne Verify Document"
},
{
"id": "delegatedadmin:read:delegatedAdminConfigurations",
"classifier": "delegatedAdminConfigurations",
"description": "Read Delegated Admin Configurations"
},
{
"id": "agreements:read:userConsent",
"classifier": "userConsent",
"description": "Read User Consents"
},
{
"id": "dir:read:userSyncedStores",
"classifier": "userSyncedStores",
"description": "get user's target store sync status"
},
{
"id": "dir:read:userPassword",
"classifier": "userPassword",
"description": "Read a user's password state"
},
{
"id": "risk:update:evaluation",
"classifier": "evaluation",
"description": "Update risk evaluations"
},
{
"id": "ldapGateway:execute:directLdap",
"classifier": "directLdap",
"description": "Perform direct LDAP operations through the LDAP gateway"
},
{
"id": "certmgt:read:certificate",
"classifier": "certificate",
"description": "Read a certificate"
},
{
"id": "mfa:create:createTestDevice",
"classifier": "createTestDevice",
"description": "Ability to create device designated for tests"
},
{
"id": "scim:delete:user",
"classifier": "user",
"description": "Delete users via SCIM"
},
{
"id": "authn:delete:sessions",
"classifier": "sessions",
"description": "Delete a user's sessions"
},
{
"id": "applicationRoles:read:applicationEntitlement",
"classifier": "applicationEntitlement",
"description": "Read application entitlements"
},
{
"id": "idverifications:update:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Update PingOne Verify Policies"
},
{
"id": "authn:create:sessions",
"classifier": "sessions",
"description": "Create new anonymous or user sessions"
},
{
"id": "permissions:read:roles",
"classifier": "roles",
"description": "Read Custom Roles"
},
{
"id": "permissions:update:roles",
"classifier": "roles",
"description": "Update Custom Roles"
},
{
"id": "dir:validate:userPassword",
"classifier": "userPassword",
"description": "Validate a user's password"
},
{
"id": "mfa:update:device",
"classifier": "device",
"description": "Update user's device"
},
{
"id": "permissions:read:userRoleAssignments",
"classifier": "userRoleAssignments",
"description": "Read roles assigned to users"
},
{
"id": "fraud:update:feedback",
"classifier": "feedback",
"description": "Update fraud feedback"
},
{
"id": "devices:delete:seenDevice",
"classifier": "seenDevice",
"description": "Delete accessing device"
},
{
"id": "scim:read:schema",
"classifier": "schema",
"description": "Read schemas via SCIM"
},
{
"id": "dir:recover:userPassword",
"classifier": "userPassword",
"description": "Recover a user's password"
},
{
"id": "applicationRoles:read:applicationRole",
"classifier": "applicationRole",
"description": "List and read application roles"
},
{
"id": "dir:unlock:userAccount",
"classifier": "userAccount",
"description": "Unlock User Account"
},
{
"id": "fraud:create:eventsDetails",
"classifier": "eventsDetails",
"description": "Create fraud eventsDetails"
},
{
"id": "dir:read:passwordPolicy",
"classifier": "passwordPolicy",
"description": "Read Password Policies"
},
{
"id": "applicationRoles:create:applicationRoleAssignment",
"classifier": "applicationRoleAssignment",
"description": "Assign application roles"
},
{
"id": "applicationRoles:read:applicationResource",
"classifier": "applicationResource",
"description": "List and read application resources"
},
{
"id": "dir:delete:userLinkedAccounts",
"classifier": "userLinkedAccounts",
"description": "Delete linked accounts for users"
},
{
"id": "fraud:read:evaluation",
"classifier": "evaluation",
"description": "Read fraud evaluation"
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
},
{
"id": "agreements:create:oauthConsent",
"classifier": "oauthConsent",
"description": "Create OAuth Consent"
},
{
"id": "idverifications:delete:voicePhrase",
"classifier": "voicePhrase",
"description": "Delete PingOne Verify Voice Phrase"
},
{
"id": "scim:create:user",
"classifier": "user",
"description": "Create users via SCIM"
},
{
"id": "devices:create:seenDevice",
"classifier": "seenDevice",
"description": "Create/Update accessing device"
},
{
"id": "idverifications:get:referenceData",
"classifier": "referenceData",
"description": "Read PingOne Verify Reference Data"
},
{
"id": "permissions:delete:roles",
"classifier": "roles",
"description": "Delete Custom Roles"
},
{
"id": "dir:read:userLinkedAccounts",
"classifier": "userLinkedAccounts",
"description": "Read linked accounts for users"
},
{
"id": "idverifications:read:verifyTransactions",
"classifier": "verifyTransactions",
"description": "Read PingOne Verify Transaction(s)"
},
{
"id": "idverifications:create:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Create PingOne Verify Voice Phrase Content"
},
{
"id": "applicationRoles:update:applicationResource",
"classifier": "applicationResource",
"description": "Update application resources"
},
{
"id": "dir:reset:userPassword",
"classifier": "userPassword",
"description": "Reset a user's password"
},
{
"id": "risk:create:evaluation",
"classifier": "evaluation",
"description": "Create risk evaluations"
},
{
"id": "applicationRoles:update:applicationRole",
"classifier": "applicationRole",
"description": "Update application roles"
},
{
"id": "dir:update:userVerifyStatus",
"classifier": "userVerifyStatus",
"description": "Update user's verifyStatus"
},
{
"id": "fraud:read:analytics",
"classifier": "analytics",
"description": "Read fraud analytics"
},
{
"id": "mfa:authenticate:device",
"classifier": "device",
"description": "Authenticate using a device"
},
{
"id": "mfa:delete:pairingKey",
"classifier": "pairingKey",
"description": "Delete a user's pairing key information"
},
{
"id": "credentialsIssuance:update:credentials",
"classifier": "credentials",
"description": "Update credential type or issue credential to a user"
},
{
"id": "dir:delete:group",
"classifier": "group",
"description": "Delete Group"
},
{
"id": "ratelimiting:read:rateLimitConfigs",
"classifier": "rateLimitConfigs",
"description": "Read rate limit configurations"
},
{
"id": "applicationRoles:create:applicationResource",
"classifier": "applicationResource",
"description": "Create application resources"
},
{
"id": "authn:read:sessions",
"classifier": "sessions",
"description": "Read a user's sessions"
},
{
"id": "agreements:read:oauthConsent",
"classifier": "oauthConsent",
"description": "Read OAuth Consents"
},
{
"id": "applicationRoles:read:applicationRoleAssignment",
"classifier": "applicationRoleAssignment",
"description": "List application role assignments"
},
{
"id": "dir:read:population",
"classifier": "population",
"description": "Read populations"
},
{
"id": "permissions:read:groupRoleAssignments",
"classifier": "groupRoleAssignments",
"description": "Read group role assignments"
},
{
"id": "permissions:delete:groupRoleAssignments",
"classifier": "groupRoleAssignments",
"description": "Delete group role assignments"
},
{
"id": "dir:read:groupSyncedRules",
"classifier": "groupSyncedRules",
"description": "get group's provisioning rule sync status"
},
{
"id": "licensing:read:license",
"classifier": "license",
"description": "Read licenses"
},
{
"id": "risk:read:policy",
"classifier": "policy",
"description": "Read risk policies"
},
{
"id": "applicationRoles:delete:applicationRoleAssignment",
"classifier": "applicationRoleAssignment",
"description": "Unassign application roles"
},
{
"id": "dir:update:group",
"classifier": "group",
"description": "Update Group"
},
{
"id": "idverifications:get:verifiedUserData",
"classifier": "verifiedUserData",
"description": "Get PingOne Verify Verified User Data"
},
{
"id": "pingid:read:integration",
"classifier": "integration",
"description": "Read PingID user integrations(services)"
},
{
"id": "idverifications:read:voicePhrase",
"classifier": "voicePhrase",
"description": "Read PingOne Verify Voice Phrase"
},
{
"id": "applicationRoles:update:applicationPermission",
"classifier": "applicationPermission",
"description": "Update application permissions"
},
{
"id": "dir:delete:groupMembership",
"classifier": "groupMembership",
"description": "Delete Group Membership"
},
{
"id": "dir:update:user",
"classifier": "user",
"description": "Update users"
},
{
"id": "dir:read:user",
"classifier": "user",
"description": "Read users"
},
{
"id": "applicationRoles:delete:applicationRoleEntry",
"classifier": "applicationRoleEntry",
"description": "Remove application role entries"
},
{
"id": "idverifications:delete:verifiedUserData",
"classifier": "verifiedUserData",
"description": "Delete PingOne Verify Verified User Data"
},
{
"id": "idverifications:delete:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Delete PingOne Verify Policies"
},
{
"id": "fraud:create:evaluation",
"classifier": "evaluation",
"description": "Create fraud evaluation"
},
{
"id": "applicationRoles:read:applicationRoleEntry",
"classifier": "applicationRoleEntry",
"description": "List application role entries"
},
{
"id": "authn:update:sessions",
"classifier": "sessions",
"description": "Update anonymous or user sessions"
},
{
"id": "audit_reporting:read:activity",
"classifier": "activity",
"description": "Get Audit Activity"
},
{
"id": "idverifications:create:voicePhrase",
"classifier": "voicePhrase",
"description": "Create PingOne Verify Voice Phrase"
},
{
"id": "dir:read:groupMembership",
"classifier": "groupMembership",
"description": "Read Group Membership"
},
{
"id": "agreements:create:userConsent",
"classifier": "userConsent",
"description": "Create User Consent"
},
{
"id": "permissions:create:groupRoleAssignments",
"classifier": "groupRoleAssignments",
"description": "Create group role assignments"
},
{
"id": "dir:set:userPassword",
"classifier": "userPassword",
"description": "Set a user's cleartext or pre-encoded password"
},
{
"id": "dir:update:userIdentityProvider",
"classifier": "userIdentityProvider",
"description": "Update user's identity provider"
},
{
"id": "pingid:delete:user",
"classifier": "user",
"description": "Reset PingID user"
},
{
"id": "notifications:reset:userQuota",
"classifier": "userQuota",
"description": "Reset notifications quota"
},
{
"id": "orgmgt:read:deployment",
"classifier": "deployment",
"description": "Read deployment resource"
},
{
"id": "idverifications:update:voicePhrase",
"classifier": "voicePhrase",
"description": "Update PingOne Verify Voice Phrase"
},
{
"id": "credentialsIssuance:create:issuerProfile",
"classifier": "issuerProfile",
"description": "Define Credential Issuer Profile"
},
{
"id": "idverifications:read:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Read PingOne Verify Policies"
},
{
"id": "pingid:update:integration",
"classifier": "integration",
"description": "Update PingID user integration(service)"
},
{
"id": "dir:lock:userAccount",
"classifier": "userAccount",
"description": "Lock User Account"
},
{
"id": "idverifications:update:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Update PingOne Verify Voice Phrase Content"
},
{
"id": "applicationRoles:read:applicationPermission",
"classifier": "applicationPermission",
"description": "List application permissions"
},
{
"id": "idverifications:delete:verifyTransactions",
"classifier": "verifyTransactions",
"description": "Delete PingOne Verify Transaction"
},
{
"id": "ldapGateway:validate:userPassword",
"classifier": "userPassword",
"description": "Validate user credentials via LDAP gateway"
},
{
"id": "visualization:create:exploration",
"classifier": "exploration",
"description": "Create data exploration"
},
{
"id": "devices:update:userSeenDevice",
"classifier": "userSeenDevice",
"description": "Update user association with accessing device"
},
{
"id": "dir:read:schema",
"classifier": "schema",
"description": "Read schemas"
},
{
"id": "applicationRoles:create:applicationRoleEntry",
"classifier": "applicationRoleEntry",
"description": "Add application role entries"
},
{
"id": "dir:delete:user",
"classifier": "user",
"description": "Delete users"
},
{
"id": "dir:update:userEnabled",
"classifier": "userEnabled",
"description": "Update user's enabled status"
},
{
"id": "mfa:create:device",
"classifier": "device",
"description": "Create user's device"
},
{
"id": "prediction:create:prediction",
"classifier": "prediction",
"description": "Create a prediction"
},
{
"id": "fraud:create:feedback",
"classifier": "feedback",
"description": "Create fraud feedback"
},
{
"id": "credentialsIssuance:read:credentials",
"classifier": "credentials",
"description": "Read a credential type or issue credential to a user"
},
{
"id": "permissions:create:roles",
"classifier": "roles",
"description": "Create Custom Roles"
},
{
"id": "visualization:read:template",
"classifier": "template",
"description": "Read data exploration template"
},
{
"id": "idverifications:delete:referenceData",
"classifier": "referenceData",
"description": "Delete PingOne Verify Reference Data"
},
{
"id": "riskDetection:create:evaluation",
"classifier": "evaluation",
"description": "Create detection evaluations for risk service"
},
{
"id": "applicationRoles:create:applicationPermission",
"classifier": "applicationPermission",
"description": "Create application permissions"
},
{
"id": "applicationRoles:create:applicationRole",
"classifier": "applicationRole",
"description": "Create application roles"
},
{
"id": "mfa:read:device",
"classifier": "device",
"description": "Retrieve user's device"
},
{
"id": "ratelimiting:read:rateLimits",
"classifier": "rateLimits",
"description": "Read rate limits"
},
{
"id": "dir:verify:user",
"classifier": "user",
"description": "Verify a user using a verification code"
},
{
"id": "applicationRoles:delete:applicationRole",
"classifier": "applicationRole",
"description": "Delete application roles"
},
{
"id": "image:read:image",
"classifier": "image",
"description": "Retrieve an image"
},
{
"id": "fraud:read:feedback",
"classifier": "feedback",
"description": "Read fraud feedback"
},
{
"id": "visualization:read:exploration",
"classifier": "exploration",
"description": "Read data exploration"
},
{
"id": "agreements:delete:userConsent",
"classifier": "userConsent",
"description": "Delete User Consents"
},
{
"id": "fraud:update:cluster",
"classifier": "cluster",
"description": "Update fraud clusters"
},
{
"id": "idverifications:create:verifyTransactions",
"classifier": "verifyTransactions",
"description": "Create PingOne Verify Transaction"
},
{
"id": "credentialsIssuance:read:issuerProfile",
"classifier": "issuerProfile",
"description": "Read Credential Issuer Profile"
},
{
"id": "idverifications:read:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Read PingOne Verify Voice Phrase Content"
},
{
"id": "risk:read:evaluation",
"classifier": "evaluation",
"description": "Read risk evaluations"
},
{
"id": "credentialsIssuance:update:issuerProfile",
"classifier": "issuerProfile",
"description": "Update Credential Issuer Profile"
},
{
"id": "credentialsIssuance:create:credentials",
"classifier": "credentials",
"description": "Create credential type or issue credential to a user"
},
{
"id": "idverifications:update:verifyTransactions",
"classifier": "verifyTransactions",
"description": "Update PingOne Verify Transaction"
},
{
"id": "risk:read:predictor",
"classifier": "predictor",
"description": "Read risk predictors"
},
{
"id": "dir:unlock:userPassword",
"classifier": "userPassword",
"description": "Unlock a user's password"
},
{
"id": "devices:create:userSeenDevice",
"classifier": "userSeenDevice",
"description": "Create user association with accessing device"
},
{
"id": "mfa:create:pairingKey",
"classifier": "pairingKey",
"description": "Create new pairing key for a user"
},
{
"id": "visualization:read:dashboard",
"classifier": "dashboard",
"description": "Read dashboards"
},
{
"id": "applicationRoles:delete:applicationResource",
"classifier": "applicationResource",
"description": "Delete application resources"
},
{
"id": "dir:read:group",
"classifier": "group",
"description": "Read Group"
},
{
"id": "idverifications:update:document",
"classifier": "document",
"description": "Update PingOne Verify Document"
},
{
"id": "scim:update:user",
"classifier": "user",
"description": "Update users via SCIM"
},
{
"id": "dir:update:userMfaEnabled",
"classifier": "userMfaEnabled",
"description": "Update user's mfaEnabled status"
},
{
"id": "devices:read:seenDevice",
"classifier": "seenDevice",
"description": "Read accessing device"
},
{
"id": "ldapGateway:validate:kerberos",
"classifier": "kerberos",
"description": "Validate user credentials using Kerberos"
},
{
"id": "devices:read:userSeenDevice",
"classifier": "userSeenDevice",
"description": "Read user association with accessing device"
},
{
"id": "radiusGateway:read:session",
"classifier": "session",
"description": "Read RADIUS session associated with the environment"
},
{
"id": "dir:create:userLinkedAccounts",
"classifier": "userLinkedAccounts",
"description": "Create linked accounts for users"
},
{
"id": "mfa:read:pairingKey",
"classifier": "pairingKey",
"description": "Retrieve a user's pairing key information"
},
{
"id": "dir:create:user",
"classifier": "user",
"description": "Create users"
},
{
"id": "applicationRoles:delete:applicationPermission",
"classifier": "applicationPermission",
"description": "Delete application permissions"
},
{
"id": "identityProviders:read:identityProvider",
"classifier": "identityProvider",
"description": "Retrieve Identity Provider information"
},
{
"id": "mfa:delete:device",
"classifier": "device",
"description": "Delete user's device"
},
{
"id": "pingid:read:activity",
"classifier": "activity",
"description": "Read PingID user last activity"
},
{
"id": "dir:create:groupMembership",
"classifier": "groupMembership",
"description": "Create Group Membership"
},
{
"id": "idverifications:get:document",
"classifier": "document",
"description": "Read PingOne Verify Document"
},
{
"id": "image:delete:image",
"classifier": "image",
"description": "Delete an image"
},
{
"id": "fraud:read:ssoLogin",
"classifier": "ssoLogin",
"description": "Read fraud SSO login"
},
{
"id": "permissions:update:userRoleAssignments",
"classifier": "userRoleAssignments",
"description": "Update roles assigned to users"
},
{
"id": "dir:import:user",
"classifier": "user",
"description": "Import users"
},
{
"id": "agreements:update:userConsent",
"classifier": "userConsent",
"description": "Update User Consent"
},
{
"id": "fraud:read:session",
"classifier": "session",
"description": "Read fraud session"
},
{
"id": "delegatedadmin:read:delegatedAdminSdkToken",
"classifier": "delegatedAdminSdkToken",
"description": "Read Delegated Admin SdkToken"
},
{
"id": "dir:create:group",
"classifier": "group",
"description": "Create Group"
},
{
"id": "idverifications:delete:document",
"classifier": "document",
"description": "Delete PingOne Verify Document"
},
{
"id": "dir:forceChange:userPassword",
"classifier": "userPassword",
"description": "Force a user to change password at next login"
}
],
"canAssign": [
{
"id": "ce00e15f-f845-4df1-abf3-fdc4ff4e176c"
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/b5057d0d-7281-47f6-9398-8a7e4cb71397"
}
},
"id": "b5057d0d-7281-47f6-9398-8a7e4cb71397",
"name": "Client Application Developer",
"description": "Client Application Developer",
"applicableTo": [
"ENVIRONMENT"
],
"permissions": [
{
"id": "solutions:read:config",
"classifier": "config",
"description": "Retrieve the workflow configuration."
},
{
"id": "fraud:read:cluster",
"classifier": "cluster",
"description": "Read fraud clusters"
},
{
"id": "resources:create:resource",
"classifier": "resource",
"description": "Create resources on an environment"
},
{
"id": "applications:update:pushCredentials",
"classifier": "pushCredentials",
"description": "Update application's push credentials information"
},
{
"id": "applications:create:flowPolicyAssignment",
"classifier": "flowPolicyAssignment",
"description": "Create a flow policy assignment"
},
{
"id": "applicationRoles:read:applicationRoleEntry",
"classifier": "applicationRoleEntry",
"description": "List application role entries"
},
{
"id": "orgmgt:read:organization",
"classifier": "organization",
"description": "Read organizations"
},
{
"id": "applications:update:flowPolicyAssignment",
"classifier": "flowPolicyAssignment",
"description": "Update flow policy assignments"
},
{
"id": "authz:deploy:apiServerDeployment",
"classifier": "apiServerDeployment",
"description": "Deploy API Services"
},
{
"id": "image:create:image",
"classifier": "image",
"description": "Create an image"
},
{
"id": "resources:delete:scope",
"classifier": "scope",
"description": "Delete scopes from a resource"
},
{
"id": "orgmgt:read:environment",
"classifier": "environment",
"description": "Read environments"
},
{
"id": "formBuilder:read:recaptchaV2Config",
"classifier": "recaptchaV2Config",
"description": "Read a reCAPTCHA V2 config"
},
{
"id": "applications:update:signOnPolicyAssignment",
"classifier": "signOnPolicyAssignment",
"description": "Update sign-on policy assignments"
},
{
"id": "orgmgt:read:deployment",
"classifier": "deployment",
"description": "Read deployment resource"
},
{
"id": "authz:delete:apiServer",
"classifier": "apiServer",
"description": "Delete API Services"
},
{
"id": "solutions:update:config",
"classifier": "config",
"description": "Update the workflow configuration."
},
{
"id": "certmgt:read:certificate",
"classifier": "certificate",
"description": "Read a certificate"
},
{
"id": "applications:delete:secret",
"classifier": "secret",
"description": "Delete an application's previous client secret"
},
{
"id": "integrations:read:integration",
"classifier": "integration",
"description": "Read an integration in integration catalog"
},
{
"id": "applicationRoles:read:applicationEntitlement",
"classifier": "applicationEntitlement",
"description": "Read application entitlements"
},
{
"id": "applications:read:grant",
"classifier": "grant",
"description": "Retrieve a single resource access grant for an application"
},
{
"id": "applicationRoles:read:applicationPermission",
"classifier": "applicationPermission",
"description": "List application permissions"
},
{
"id": "authn:read:signOnPolicy",
"classifier": "signOnPolicy",
"description": "Retrieve sign-on policies"
},
{
"id": "identityProviders:create:identityProvider",
"classifier": "identityProvider",
"description": "Create new Identity Provider"
},
{
"id": "visualization:create:exploration",
"classifier": "exploration",
"description": "Create data exploration"
},
{
"id": "dir:read:schema",
"classifier": "schema",
"description": "Read schemas"
},
{
"id": "formBuilder:read:form",
"classifier": "form",
"description": "Read or list forms"
},
{
"id": "applications:read:signOnPolicyAssignment",
"classifier": "signOnPolicyAssignment",
"description": "Retrieve sign-on policy assignments"
},
{
"id": "applications:delete:flowPolicyAssignment",
"classifier": "flowPolicyAssignment",
"description": "Delete flow policy assignments"
},
{
"id": "resources:delete:secret",
"classifier": "secret",
"description": "Delete a resource's previous client secret"
},
{
"id": "visualization:read:template",
"classifier": "template",
"description": "Read data exploration template"
},
{
"id": "pingenterprise:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve Orchestration flow for Ping Enterprise deployment"
},
{
"id": "applications:create:pushCredentials",
"classifier": "pushCredentials",
"description": "Create new push credentials for an application"
},
{
"id": "applicationRoles:read:applicationRole",
"classifier": "applicationRole",
"description": "List and read application roles"
},
{
"id": "ratelimiting:read:rateLimits",
"classifier": "rateLimits",
"description": "Read rate limits"
},
{
"id": "applications:delete:signOnPolicyAssignment",
"classifier": "signOnPolicyAssignment",
"description": "Delete sign-on policy assignments"
},
{
"id": "branding:read:customDomain",
"classifier": "customDomain",
"description": "Read or list custom domains"
},
{
"id": "identityProviders:delete:identityProvider",
"classifier": "identityProvider",
"description": "Delete an Identity Provider"
},
{
"id": "resources:delete:resource",
"classifier": "resource",
"description": "Delete resources from an environment"
},
{
"id": "image:read:image",
"classifier": "image",
"description": "Retrieve an image"
},
{
"id": "flow:read:flowDefinition",
"classifier": "flowDefinition",
"description": "Read a flow definition"
},
{
"id": "visualization:read:exploration",
"classifier": "exploration",
"description": "Read data exploration"
},
{
"id": "applications:delete:grant",
"classifier": "grant",
"description": "Delete a single resource access grant for an application"
},
{
"id": "applicationRoles:read:applicationResource",
"classifier": "applicationResource",
"description": "List and read application resources"
},
{
"id": "resources:create:scope",
"classifier": "scope",
"description": "Create scopes in a resource"
},
{
"id": "permissions:read:applicationRoleAssignments",
"classifier": "applicationRoleAssignments",
"description": "Read roles assigned to applications"
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
},
{
"id": "solutions:read:flow",
"classifier": "flow",
"description": "Retrieve all available workflows."
},
{
"id": "applications:update:application",
"classifier": "application",
"description": "Update an application's OIDC settings"
},
{
"id": "applications:read:secret",
"classifier": "secret",
"description": "Retrieve an application’s client secret"
},
{
"id": "authz:create:apiServer",
"classifier": "apiServer",
"description": "Create API Services"
},
{
"id": "enduseruiconfig:read:configs",
"classifier": "configs",
"description": "Read End User UI Configurations"
},
{
"id": "applications:update:secret",
"classifier": "secret",
"description": "Generate a new client secret"
},
{
"id": "resources:update:attribute",
"classifier": "attribute",
"description": "Update attributes in a resource"
},
{
"id": "permissions:update:applicationRoleAssignments",
"classifier": "applicationRoleAssignments",
"description": "Update roles assigned to applications"
},
{
"id": "certmgt:read:key",
"classifier": "key",
"description": "Read a KeyPair, excluding private key portion"
},
{
"id": "mfa:read:mobileInfo",
"classifier": "mobileInfo",
"description": "Read mobile phone & app info"
},
{
"id": "resources:update:resource",
"classifier": "resource",
"description": "Update resources on an environment"
},
{
"id": "visualization:read:dashboard",
"classifier": "dashboard",
"description": "Read dashboards"
},
{
"id": "resources:read:scope",
"classifier": "scope",
"description": "Retrieve scopes from a resource"
},
{
"id": "dir:read:group",
"classifier": "group",
"description": "Read Group"
},
{
"id": "branding:read:brandingSettings",
"classifier": "brandingSettings",
"description": "Read or list branding settings"
},
{
"id": "pingintelligence:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve Orchestration flow for Ping Intelligence deployment"
},
{
"id": "applications:create:signOnPolicyAssignment",
"classifier": "signOnPolicyAssignment",
"description": "Create a sign-on policy assignment"
},
{
"id": "ratelimiting:read:rateLimitConfigs",
"classifier": "rateLimitConfigs",
"description": "Read rate limit configurations"
},
{
"id": "branding:read:theme",
"classifier": "theme",
"description": "Read or list themes"
},
{
"id": "authz:read:apiServerDeployment",
"classifier": "apiServerDeployment",
"description": "Read API Service deployment status"
},
{
"id": "solutions:read:token",
"classifier": "token",
"description": "Retrieve a DaVinci access token."
},
{
"id": "identityProviders:update:identityProvider",
"classifier": "identityProvider",
"description": "Update Identity Provider information"
},
{
"id": "applicationRoles:read:applicationRoleAssignment",
"classifier": "applicationRoleAssignment",
"description": "List application role assignments"
},
{
"id": "resources:delete:attribute",
"classifier": "attribute",
"description": "Delete attributes from a resource"
},
{
"id": "resources:update:secret",
"classifier": "secret",
"description": "Generate a new client secret for a resource"
},
{
"id": "dir:read:population",
"classifier": "population",
"description": "Read populations"
},
{
"id": "authz:update:apiServer",
"classifier": "apiServer",
"description": "Update API Services"
},
{
"id": "authz:read:apiServer",
"classifier": "apiServer",
"description": "Retrieve API Services"
},
{
"id": "applications:read:pushCredentials",
"classifier": "pushCredentials",
"description": "Retrieve application's push credentials information"
},
{
"id": "identityProviders:read:identityProvider",
"classifier": "identityProvider",
"description": "Retrieve Identity Provider information"
},
{
"id": "licensing:read:license",
"classifier": "license",
"description": "Read licenses"
},
{
"id": "applications:delete:application",
"classifier": "application",
"description": "Delete an application's OIDC settings"
},
{
"id": "resources:read:resource",
"classifier": "resource",
"description": "Retrieve resources from an environment"
},
{
"id": "applications:update:grant",
"classifier": "grant",
"description": "Update a single resource access grant for an application"
},
{
"id": "applications:read:application",
"classifier": "application",
"description": "Retrieve an application's OIDC settings"
},
{
"id": "resources:create:attribute",
"classifier": "attribute",
"description": "Create attributes in a resource"
},
{
"id": "applications:read:flowPolicyAssignment",
"classifier": "flowPolicyAssignment",
"description": "Retrieve flow policy assignments"
},
{
"id": "applications:create:application",
"classifier": "application",
"description": "Create an application's OIDC settings"
},
{
"id": "resources:read:secret",
"classifier": "secret",
"description": "Retrieve a resource’s client secret"
},
{
"id": "applications:create:grant",
"classifier": "grant",
"description": "Create a new resource access grant for an application"
},
{
"id": "image:delete:image",
"classifier": "image",
"description": "Delete an image"
},
{
"id": "fraud:read:ssoLogin",
"classifier": "ssoLogin",
"description": "Read fraud SSO login"
},
{
"id": "flowPolicies:read:flowPolicy",
"classifier": "flowPolicy",
"description": "Retrieve flow policies"
},
{
"id": "applications:delete:pushCredentials",
"classifier": "pushCredentials",
"description": "Delete an application's push credentials information"
},
{
"id": "resources:update:scope",
"classifier": "scope",
"description": "Update scopes in a resource"
},
{
"id": "resources:read:attribute",
"classifier": "attribute",
"description": "Retrieve attributes from a resource"
},
{
"id": "advancedservices:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve PingOne Advanced Services Orchestration"
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/ce00e15f-f845-4df1-abf3-fdc4ff4e176c"
}
},
"id": "ce00e15f-f845-4df1-abf3-fdc4ff4e176c",
"name": "Identity Data Read Only",
"description": "Identity Data Read Only",
"applicableTo": [
"ENVIRONMENT",
"POPULATION"
],
"permissions": [
{
"id": "dir:read:user",
"classifier": "user",
"description": "Read users"
},
{
"id": "fraud:read:cluster",
"classifier": "cluster",
"description": "Read fraud clusters"
},
{
"id": "applicationRoles:read:applicationRoleEntry",
"classifier": "applicationRoleEntry",
"description": "List application role entries"
},
{
"id": "orgmgt:read:organization",
"classifier": "organization",
"description": "Read organizations"
},
{
"id": "scim:read:user",
"classifier": "user",
"description": "Read users via SCIM"
},
{
"id": "fraud:read:eventsDetails",
"classifier": "eventsDetails",
"description": "Read fraud eventsDetails"
},
{
"id": "audit_reporting:read:activity",
"classifier": "activity",
"description": "Get Audit Activity"
},
{
"id": "dir:read:groupMembership",
"classifier": "groupMembership",
"description": "Read Group Membership"
},
{
"id": "orgmgt:read:environment",
"classifier": "environment",
"description": "Read environments"
},
{
"id": "delegatedadmin:read:delegatedAdminConfigurations",
"classifier": "delegatedAdminConfigurations",
"description": "Read Delegated Admin Configurations"
},
{
"id": "orgmgt:read:deployment",
"classifier": "deployment",
"description": "Read deployment resource"
},
{
"id": "agreements:read:userConsent",
"classifier": "userConsent",
"description": "Read User Consents"
},
{
"id": "dir:read:userSyncedStores",
"classifier": "userSyncedStores",
"description": "get user's target store sync status"
},
{
"id": "idverifications:read:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Read PingOne Verify Policies"
},
{
"id": "dir:read:userPassword",
"classifier": "userPassword",
"description": "Read a user's password state"
},
{
"id": "certmgt:read:certificate",
"classifier": "certificate",
"description": "Read a certificate"
},
{
"id": "applicationRoles:read:applicationEntitlement",
"classifier": "applicationEntitlement",
"description": "Read application entitlements"
},
{
"id": "applicationRoles:read:applicationPermission",
"classifier": "applicationPermission",
"description": "List application permissions"
},
{
"id": "permissions:read:roles",
"classifier": "roles",
"description": "Read Custom Roles"
},
{
"id": "visualization:create:exploration",
"classifier": "exploration",
"description": "Create data exploration"
},
{
"id": "dir:read:schema",
"classifier": "schema",
"description": "Read schemas"
},
{
"id": "permissions:read:userRoleAssignments",
"classifier": "userRoleAssignments",
"description": "Read roles assigned to users"
},
{
"id": "credentialsIssuance:read:credentials",
"classifier": "credentials",
"description": "Read a credential type or issue credential to a user"
},
{
"id": "visualization:read:template",
"classifier": "template",
"description": "Read data exploration template"
},
{
"id": "mfa:read:device",
"classifier": "device",
"description": "Retrieve user's device"
},
{
"id": "scim:read:schema",
"classifier": "schema",
"description": "Read schemas via SCIM"
},
{
"id": "applicationRoles:read:applicationRole",
"classifier": "applicationRole",
"description": "List and read application roles"
},
{
"id": "ratelimiting:read:rateLimits",
"classifier": "rateLimits",
"description": "Read rate limits"
},
{
"id": "image:read:image",
"classifier": "image",
"description": "Retrieve an image"
},
{
"id": "fraud:read:feedback",
"classifier": "feedback",
"description": "Read fraud feedback"
},
{
"id": "visualization:read:exploration",
"classifier": "exploration",
"description": "Read data exploration"
},
{
"id": "dir:read:passwordPolicy",
"classifier": "passwordPolicy",
"description": "Read Password Policies"
},
{
"id": "applicationRoles:read:applicationResource",
"classifier": "applicationResource",
"description": "List and read application resources"
},
{
"id": "fraud:read:evaluation",
"classifier": "evaluation",
"description": "Read fraud evaluation"
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
},
{
"id": "credentialsIssuance:read:issuerProfile",
"classifier": "issuerProfile",
"description": "Read Credential Issuer Profile"
},
{
"id": "idverifications:read:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Read PingOne Verify Voice Phrase Content"
},
{
"id": "risk:read:evaluation",
"classifier": "evaluation",
"description": "Read risk evaluations"
},
{
"id": "dir:read:userLinkedAccounts",
"classifier": "userLinkedAccounts",
"description": "Read linked accounts for users"
},
{
"id": "risk:read:predictor",
"classifier": "predictor",
"description": "Read risk predictors"
},
{
"id": "idverifications:read:verifyTransactions",
"classifier": "verifyTransactions",
"description": "Read PingOne Verify Transaction(s)"
},
{
"id": "visualization:read:dashboard",
"classifier": "dashboard",
"description": "Read dashboards"
},
{
"id": "dir:read:group",
"classifier": "group",
"description": "Read Group"
},
{
"id": "fraud:read:analytics",
"classifier": "analytics",
"description": "Read fraud analytics"
},
{
"id": "ratelimiting:read:rateLimitConfigs",
"classifier": "rateLimitConfigs",
"description": "Read rate limit configurations"
},
{
"id": "devices:read:seenDevice",
"classifier": "seenDevice",
"description": "Read accessing device"
},
{
"id": "devices:read:userSeenDevice",
"classifier": "userSeenDevice",
"description": "Read user association with accessing device"
},
{
"id": "radiusGateway:read:session",
"classifier": "session",
"description": "Read RADIUS session associated with the environment"
},
{
"id": "mfa:read:pairingKey",
"classifier": "pairingKey",
"description": "Retrieve a user's pairing key information"
},
{
"id": "authn:read:sessions",
"classifier": "sessions",
"description": "Read a user's sessions"
},
{
"id": "agreements:read:oauthConsent",
"classifier": "oauthConsent",
"description": "Read OAuth Consents"
},
{
"id": "applicationRoles:read:applicationRoleAssignment",
"classifier": "applicationRoleAssignment",
"description": "List application role assignments"
},
{
"id": "dir:read:population",
"classifier": "population",
"description": "Read populations"
},
{
"id": "permissions:read:groupRoleAssignments",
"classifier": "groupRoleAssignments",
"description": "Read group role assignments"
},
{
"id": "dir:read:groupSyncedRules",
"classifier": "groupSyncedRules",
"description": "get group's provisioning rule sync status"
},
{
"id": "licensing:read:license",
"classifier": "license",
"description": "Read licenses"
},
{
"id": "identityProviders:read:identityProvider",
"classifier": "identityProvider",
"description": "Retrieve Identity Provider information"
},
{
"id": "risk:read:policy",
"classifier": "policy",
"description": "Read risk policies"
},
{
"id": "pingid:read:activity",
"classifier": "activity",
"description": "Read PingID user last activity"
},
{
"id": "fraud:read:ssoLogin",
"classifier": "ssoLogin",
"description": "Read fraud SSO login"
},
{
"id": "fraud:read:session",
"classifier": "session",
"description": "Read fraud session"
},
{
"id": "delegatedadmin:read:delegatedAdminSdkToken",
"classifier": "delegatedAdminSdkToken",
"description": "Read Delegated Admin SdkToken"
},
{
"id": "pingid:read:integration",
"classifier": "integration",
"description": "Read PingID user integrations(services)"
},
{
"id": "idverifications:read:voicePhrase",
"classifier": "voicePhrase",
"description": "Read PingOne Verify Voice Phrase"
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/7aba580c-5ec7-4b26-987d-85f462767455"
}
},
"id": "7aba580c-5ec7-4b26-987d-85f462767455",
"name": "Configuration Read Only",
"description": "Configuration Read Only",
"applicableTo": [
"ENVIRONMENT",
"ORGANIZATION"
],
"permissions": [
{
"id": "authz:read:entity",
"classifier": "entity",
"description": "Read PingOne Authorize Entity"
},
{
"id": "notifications:read:templateContent",
"classifier": "templateContent",
"description": "Retrieve a notification template's content"
},
{
"id": "orgmgt:read:organization",
"classifier": "organization",
"description": "Read organizations"
},
{
"id": "authz:read:condition",
"classifier": "condition",
"description": "Read a PingOne Authorize Condition"
},
{
"id": "fraud:read:eventsDetails",
"classifier": "eventsDetails",
"description": "Read fraud eventsDetails"
},
{
"id": "orgmgt:read:environment",
"classifier": "environment",
"description": "Read environments"
},
{
"id": "formBuilder:read:recaptchaV2Config",
"classifier": "recaptchaV2Config",
"description": "Read a reCAPTCHA V2 config"
},
{
"id": "delegatedadmin:read:delegatedAdminConfigurations",
"classifier": "delegatedAdminConfigurations",
"description": "Read Delegated Admin Configurations"
},
{
"id": "dir:read:userSyncedStores",
"classifier": "userSyncedStores",
"description": "get user's target store sync status"
},
{
"id": "certmgt:read:certificate",
"classifier": "certificate",
"description": "Read a certificate"
},
{
"id": "osmosis:read:rule",
"classifier": "rule",
"description": "Read rule"
},
{
"id": "osmosis:read:mapping",
"classifier": "mapping",
"description": "Read mapping"
},
{
"id": "authz:read:service",
"classifier": "service",
"description": "Read a PingOne Authorize Service"
},
{
"id": "applicationRoles:read:applicationEntitlement",
"classifier": "applicationEntitlement",
"description": "Read application entitlements"
},
{
"id": "applications:read:grant",
"classifier": "grant",
"description": "Retrieve a single resource access grant for an application"
},
{
"id": "authn:read:signOnPolicy",
"classifier": "signOnPolicy",
"description": "Retrieve sign-on policies"
},
{
"id": "permissions:read:roles",
"classifier": "roles",
"description": "Read Custom Roles"
},
{
"id": "agreements:read:agreement",
"classifier": "agreement",
"description": "Read Agreements"
},
{
"id": "applicationRoles:read:applicationRole",
"classifier": "applicationRole",
"description": "List and read application roles"
},
{
"id": "mfa:read:fidoPolicy",
"classifier": "fidoPolicy",
"description": "Retrieve a FIDO policy"
},
{
"id": "flow:read:flowDefinition",
"classifier": "flowDefinition",
"description": "Read a flow definition"
},
{
"id": "subscriptions:read:subscription",
"classifier": "subscription",
"description": "Read a subscription"
},
{
"id": "dir:read:passwordPolicy",
"classifier": "passwordPolicy",
"description": "Read Password Policies"
},
{
"id": "applicationRoles:read:applicationResource",
"classifier": "applicationResource",
"description": "List and read application resources"
},
{
"id": "permissions:read:applicationRoleAssignments",
"classifier": "applicationRoleAssignments",
"description": "Read roles assigned to applications"
},
{
"id": "fraud:read:evaluation",
"classifier": "evaluation",
"description": "Read fraud evaluation"
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
},
{
"id": "applications:read:secret",
"classifier": "secret",
"description": "Retrieve an application’s client secret"
},
{
"id": "permissions:read:gatewayRoleAssignments",
"classifier": "gatewayRoleAssignments",
"description": "Read gateway role assignments"
},
{
"id": "enduseruiconfig:read:configs",
"classifier": "configs",
"description": "Read End User UI Configurations"
},
{
"id": "promotion:read:promotionVariable",
"classifier": "promotionVariable",
"description": "Read promotion variable definition"
},
{
"id": "resources:read:scope",
"classifier": "scope",
"description": "Retrieve scopes from a resource"
},
{
"id": "branding:read:brandingSettings",
"classifier": "brandingSettings",
"description": "Read or list branding settings"
},
{
"id": "pingintelligence:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve Orchestration flow for Ping Intelligence deployment"
},
{
"id": "authz:read:decisionendpoint",
"classifier": "decisionendpoint",
"description": "Read PingOne Authorize Decision Endpoint"
},
{
"id": "certmgt:read:krp",
"classifier": "krp",
"description": "Read Key Rotation Policies (KRP)"
},
{
"id": "ratelimiting:read:rateLimitConfigs",
"classifier": "rateLimitConfigs",
"description": "Read rate limit configurations"
},
{
"id": "authz:read:apiServerDeployment",
"classifier": "apiServerDeployment",
"description": "Read API Service deployment status"
},
{
"id": "applicationRoles:read:applicationRoleAssignment",
"classifier": "applicationRoleAssignment",
"description": "List application role assignments"
},
{
"id": "authz:read:adaptiveTrustPolicy",
"classifier": "adaptiveTrustPolicy",
"description": "Read a PingOne Adaptive Trust Policy"
},
{
"id": "dir:read:population",
"classifier": "population",
"description": "Read populations"
},
{
"id": "authz:read:apiServer",
"classifier": "apiServer",
"description": "Retrieve API Services"
},
{
"id": "dir:read:groupSyncedRules",
"classifier": "groupSyncedRules",
"description": "get group's provisioning rule sync status"
},
{
"id": "applications:read:pushCredentials",
"classifier": "pushCredentials",
"description": "Retrieve application's push credentials information"
},
{
"id": "licensing:read:license",
"classifier": "license",
"description": "Read licenses"
},
{
"id": "alerting:read:channel",
"classifier": "channel",
"description": "Read AlertChannels"
},
{
"id": "resources:read:resource",
"classifier": "resource",
"description": "Retrieve resources from an environment"
},
{
"id": "risk:read:policy",
"classifier": "policy",
"description": "Read risk policies"
},
{
"id": "authz:read:tag",
"classifier": "tag",
"description": "Read PingOne Authorize Policy Version Tag"
},
{
"id": "authz:read:processor",
"classifier": "processor",
"description": "Read a PingOne Authorize Processor"
},
{
"id": "authz:read:attribute",
"classifier": "attribute",
"description": "Read a PingOne Authorize Attribute"
},
{
"id": "applications:read:application",
"classifier": "application",
"description": "Retrieve an application's OIDC settings"
},
{
"id": "resources:read:attribute",
"classifier": "attribute",
"description": "Retrieve attributes from a resource"
},
{
"id": "idverifications:read:voicePhrase",
"classifier": "voicePhrase",
"description": "Read PingOne Verify Voice Phrase"
},
{
"id": "solutions:read:config",
"classifier": "config",
"description": "Retrieve the workflow configuration."
},
{
"id": "notifications:read:notificationsPolicy",
"classifier": "notificationsPolicy",
"description": "Retrieve notifications policy"
},
{
"id": "applicationRoles:read:applicationRoleEntry",
"classifier": "applicationRoleEntry",
"description": "List application role entries"
},
{
"id": "authz:read:recentdecisions",
"classifier": "recentdecisions",
"description": "Read Recent Decisions of a PingOne Authorize Decision Endpoint"
},
{
"id": "audit_reporting:read:activity",
"classifier": "activity",
"description": "Get Audit Activity"
},
{
"id": "pingid:read:migration",
"classifier": "migration",
"description": "Read PingID migration status to P1"
},
{
"id": "notifications:read:emailDomain",
"classifier": "emailDomain",
"description": "Read or list email domains"
},
{
"id": "osmosis:read:store",
"classifier": "store",
"description": "Read store"
},
{
"id": "promotion:read:snapshot",
"classifier": "snapshot",
"description": "Read promotion snapshot"
},
{
"id": "orgmgt:read:deployment",
"classifier": "deployment",
"description": "Read deployment resource"
},
{
"id": "idverifications:read:verifyPolicy",
"classifier": "verifyPolicy",
"description": "Read PingOne Verify Policies"
},
{
"id": "promotion:read:promotion",
"classifier": "promotion",
"description": "Read promotion"
},
{
"id": "integrations:read:integration",
"classifier": "integration",
"description": "Read an integration in integration catalog"
},
{
"id": "applicationRoles:read:applicationPermission",
"classifier": "applicationPermission",
"description": "List application permissions"
},
{
"id": "visualization:create:exploration",
"classifier": "exploration",
"description": "Create data exploration"
},
{
"id": "dir:read:schema",
"classifier": "schema",
"description": "Read schemas"
},
{
"id": "externalServices:read:secrets",
"classifier": "secrets",
"description": "Read external service secrets"
},
{
"id": "notifications:read:quota",
"classifier": "quota",
"description": "Read quota"
},
{
"id": "notifications:read:template",
"classifier": "template",
"description": "Retrieve a notification template"
},
{
"id": "formBuilder:read:form",
"classifier": "form",
"description": "Read or list forms"
},
{
"id": "externalServices:read:externalService",
"classifier": "externalService",
"description": "Read a external service(s)"
},
{
"id": "applications:read:signOnPolicyAssignment",
"classifier": "signOnPolicyAssignment",
"description": "Retrieve sign-on policy assignments"
},
{
"id": "credentialsIssuance:read:credentials",
"classifier": "credentials",
"description": "Read a credential type or issue credential to a user"
},
{
"id": "visualization:read:template",
"classifier": "template",
"description": "Read data exploration template"
},
{
"id": "pingenterprise:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve Orchestration flow for Ping Enterprise deployment"
},
{
"id": "ratelimiting:read:rateLimits",
"classifier": "rateLimits",
"description": "Read rate limits"
},
{
"id": "mfa:read:mfaSettings",
"classifier": "mfaSettings",
"description": "Retrieve MFA settings"
},
{
"id": "langmgt:read:language",
"classifier": "language",
"description": "Read or list languages"
},
{
"id": "mfa:read:fidoDeviceMetadata",
"classifier": "fidoDeviceMetadata",
"description": "Retrieve FIDO Device Metadata"
},
{
"id": "branding:read:customDomain",
"classifier": "customDomain",
"description": "Read or list custom domains"
},
{
"id": "mfa:read:oathToken",
"classifier": "oathToken",
"description": "Retrieve an OATH Token"
},
{
"id": "image:read:image",
"classifier": "image",
"description": "Retrieve an image"
},
{
"id": "fraud:read:feedback",
"classifier": "feedback",
"description": "Read fraud feedback"
},
{
"id": "visualization:read:exploration",
"classifier": "exploration",
"description": "Read data exploration"
},
{
"id": "solutions:read:flow",
"classifier": "flow",
"description": "Retrieve all available workflows."
},
{
"id": "credentialsIssuance:read:issuerProfile",
"classifier": "issuerProfile",
"description": "Read Credential Issuer Profile"
},
{
"id": "notifications:read:notificationsSettings",
"classifier": "notificationsSettings",
"description": "Read notifications settings"
},
{
"id": "mfa:read:deviceAuthenticationPolicy",
"classifier": "deviceAuthenticationPolicy",
"description": "Retrieve device authentication policy"
},
{
"id": "idverifications:read:voicePhraseContent",
"classifier": "voicePhraseContent",
"description": "Read PingOne Verify Voice Phrase Content"
},
{
"id": "authz:read:deploymentpackage",
"classifier": "deploymentpackage",
"description": "Read PingOne Authorize Deployment Packages"
},
{
"id": "certmgt:read:key",
"classifier": "key",
"description": "Read a KeyPair, excluding private key portion"
},
{
"id": "mfa:read:mobileInfo",
"classifier": "mobileInfo",
"description": "Read mobile phone & app info"
},
{
"id": "risk:read:predictor",
"classifier": "predictor",
"description": "Read risk predictors"
},
{
"id": "visualization:read:dashboard",
"classifier": "dashboard",
"description": "Read dashboards"
},
{
"id": "dir:read:group",
"classifier": "group",
"description": "Read Group"
},
{
"id": "authz:read:version",
"classifier": "version",
"description": "Read PingOne Authorize Policy Version"
},
{
"id": "branding:read:theme",
"classifier": "theme",
"description": "Read or list themes"
},
{
"id": "solutions:read:token",
"classifier": "token",
"description": "Retrieve a DaVinci access token."
},
{
"id": "identityProviders:read:identityProvider",
"classifier": "identityProvider",
"description": "Retrieve Identity Provider information"
},
{
"id": "gateways:read:gateway",
"classifier": "gateway",
"description": "Read gateways"
},
{
"id": "applications:read:flowPolicyAssignment",
"classifier": "flowPolicyAssignment",
"description": "Retrieve flow policy assignments"
},
{
"id": "resources:read:secret",
"classifier": "secret",
"description": "Retrieve a resource’s client secret"
},
{
"id": "fraud:read:ssoLogin",
"classifier": "ssoLogin",
"description": "Read fraud SSO login"
},
{
"id": "flowPolicies:read:flowPolicy",
"classifier": "flowPolicy",
"description": "Retrieve flow policies"
},
{
"id": "fraud:read:session",
"classifier": "session",
"description": "Read fraud session"
},
{
"id": "delegatedadmin:read:delegatedAdminSdkToken",
"classifier": "delegatedAdminSdkToken",
"description": "Read Delegated Admin SdkToken"
},
{
"id": "osmosis:read:plan",
"classifier": "plan",
"description": "Read plan"
},
{
"id": "advancedservices:read:orchestration",
"classifier": "orchestration",
"description": "Retrieve PingOne Advanced Services Orchestration"
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/c65f13f5-f42c-4ffc-aa3a-4858d4ac3f6d"
}
},
"id": "c65f13f5-f42c-4ffc-aa3a-4858d4ac3f6d",
"name": "PingFederate Administrator",
"description": "PingFederate Administrator",
"applicableTo": [
"ENVIRONMENT",
"ORGANIZATION"
],
"permissions": [
{
"id": "pingfederate:admin:system",
"classifier": "system",
"description": "Configure partner connections and most system settings, except the management of local accounts and the handling of local keys and certificates."
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/ec21ef32-0885-4210-8fe3-247bc2f40e7d"
}
},
"id": "ec21ef32-0885-4210-8fe3-247bc2f40e7d",
"name": "PingFederate Expression Administrator",
"description": "PingFederate Expression Administrator",
"applicableTo": [
"ENVIRONMENT",
"ORGANIZATION"
],
"permissions": [
{
"id": "pingfederate:admin:system",
"classifier": "system",
"description": "Configure partner connections and most system settings, except the management of local accounts and the handling of local keys and certificates."
},
{
"id": "pingfederate:admin:expressions",
"classifier": "expressions",
"description": "Map user attributes by using the expression language, Object-Graph Navigation Language (OGNL)."
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
}
],
"canAssign": [
{
"id": "c65f13f5-f42c-4ffc-aa3a-4858d4ac3f6d"
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/03643153-e396-4c35-b527-ac05b43a64fb"
}
},
"id": "03643153-e396-4c35-b527-ac05b43a64fb",
"name": "PingFederate Crypto Administrator",
"description": "PingFederate Crypto Administrator",
"applicableTo": [
"ENVIRONMENT",
"ORGANIZATION"
],
"permissions": [
{
"id": "pingfederate:admin:crypto",
"classifier": "crypto",
"description": "Manage local keys and certificates."
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/6f6793ad-4a5a-421b-8867-406ebee618de"
}
},
"id": "6f6793ad-4a5a-421b-8867-406ebee618de",
"name": "PingFederate User Administrator",
"description": "PingFederate User Administrator",
"applicableTo": [
"ENVIRONMENT",
"ORGANIZATION"
],
"permissions": [
{
"id": "pingfederate:admin:auditor",
"classifier": "auditor",
"description": "View-only permissions for all administrative functions."
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
},
{
"id": "pingfederate:admin:users",
"classifier": "users",
"description": "Create users, deactivate users, change or reset passwords, and install replacement license keys."
}
],
"canAssign": [
{
"id": "b812ab8e-8fbc-45a9-b965-136849148040"
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/b812ab8e-8fbc-45a9-b965-136849148040"
}
},
"id": "b812ab8e-8fbc-45a9-b965-136849148040",
"name": "PingFederate Auditor",
"description": "PingFederate Auditor",
"applicableTo": [
"ENVIRONMENT",
"ORGANIZATION"
],
"permissions": [
{
"id": "pingfederate:admin:auditor",
"classifier": "auditor",
"description": "View-only permissions for all administrative functions."
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/168d545c-8337-4a34-8426-9c173d60e331"
}
},
"id": "168d545c-8337-4a34-8426-9c173d60e331",
"name": "DaVinci Admin",
"description": "DaVinci Admin",
"applicableTo": [
"ENVIRONMENT",
"ORGANIZATION"
],
"permissions": [
{
"id": "langmgt:read:language",
"classifier": "language",
"description": "Read or list languages"
},
{
"id": "formBuilder:update:recaptchaV2Config",
"classifier": "recaptchaV2Config",
"description": "Update a reCAPTCHA V2 config"
},
{
"id": "davinci:delete:dvFlows",
"classifier": "dvFlows",
"description": "Delete DaVinci flows"
},
{
"id": "davinci:update:constructs",
"classifier": "constructs",
"description": "Update DaVinci variables"
},
{
"id": "davinci:read:dvFlows",
"classifier": "dvFlows",
"description": "Read DaVinci flows"
},
{
"id": "davinci:delete:connections",
"classifier": "connections",
"description": "Delete DaVinci connections"
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
},
{
"id": "orgmgt:read:organization",
"classifier": "organization",
"description": "Read organizations"
},
{
"id": "formBuilder:delete:recaptchaV2Config",
"classifier": "recaptchaV2Config",
"description": "Delete a reCAPTCHA V2 config"
},
{
"id": "formBuilder:update:form",
"classifier": "form",
"description": "Update a form"
},
{
"id": "orgmgt:read:environment",
"classifier": "environment",
"description": "Read environments"
},
{
"id": "formBuilder:read:recaptchaV2Config",
"classifier": "recaptchaV2Config",
"description": "Read a reCAPTCHA V2 config"
},
{
"id": "langmgt:update:language",
"classifier": "language",
"description": "Update a language"
},
{
"id": "davinci:create:connections",
"classifier": "connections",
"description": "Create DaVinci connections"
},
{
"id": "branding:read:brandingSettings",
"classifier": "brandingSettings",
"description": "Read or list branding settings"
},
{
"id": "davinci:create:constructs",
"classifier": "constructs",
"description": "Create DaVinci variables"
},
{
"id": "davinci:create:dvFlows",
"classifier": "dvFlows",
"description": "Create DaVinci flows"
},
{
"id": "davinci:deploy:dvFlows",
"classifier": "dvFlows",
"description": "Deploy DaVinci flows"
},
{
"id": "orgmgt:read:deployment",
"classifier": "deployment",
"description": "Read deployment resource"
},
{
"id": "davinci:update:dvFlows",
"classifier": "dvFlows",
"description": "Update DaVinci flows"
},
{
"id": "branding:read:theme",
"classifier": "theme",
"description": "Read or list themes"
},
{
"id": "davinci:update:connections",
"classifier": "connections",
"description": "Update DaVinci connections"
},
{
"id": "davinci:delete:constructs",
"classifier": "constructs",
"description": "Delete DaVinci variables"
},
{
"id": "licensing:read:license",
"classifier": "license",
"description": "Read licenses"
},
{
"id": "davinci:read:constructs",
"classifier": "constructs",
"description": "Read DaVinci variables"
},
{
"id": "dir:read:schema",
"classifier": "schema",
"description": "Read schemas"
},
{
"id": "davinci:read:connections",
"classifier": "connections",
"description": "Read DaVinci connections"
},
{
"id": "formBuilder:read:form",
"classifier": "form",
"description": "Read or list forms"
},
{
"id": "formBuilder:create:form",
"classifier": "form",
"description": "Create a form"
},
{
"id": "formBuilder:delete:form",
"classifier": "form",
"description": "Delete a form"
}
],
"canAssign": [
{
"id": "e23fed81-8c98-4c20-b823-8d29514ab5f6"
}
]
},
{
"_links": {
"self": {
"href": "https://api.pingone.com/v1/roles/e23fed81-8c98-4c20-b823-8d29514ab5f6"
}
},
"id": "e23fed81-8c98-4c20-b823-8d29514ab5f6",
"name": "DaVinci Admin Read Only",
"description": "DaVinci Admin Read Only",
"applicableTo": [
"ENVIRONMENT",
"ORGANIZATION"
],
"permissions": [
{
"id": "orgmgt:read:deployment",
"classifier": "deployment",
"description": "Read deployment resource"
},
{
"id": "langmgt:read:language",
"classifier": "language",
"description": "Read or list languages"
},
{
"id": "branding:read:theme",
"classifier": "theme",
"description": "Read or list themes"
},
{
"id": "davinci:read:dvFlows",
"classifier": "dvFlows",
"description": "Read DaVinci flows"
},
{
"id": "globalregistry:read:console",
"classifier": "console",
"description": "Access to PingOne administrator console."
},
{
"id": "licensing:read:license",
"classifier": "license",
"description": "Read licenses"
},
{
"id": "orgmgt:read:organization",
"classifier": "organization",
"description": "Read organizations"
},
{
"id": "davinci:read:constructs",
"classifier": "constructs",
"description": "Read DaVinci variables"
},
{
"id": "dir:read:schema",
"classifier": "schema",
"description": "Read schemas"
},
{
"id": "davinci:read:connections",
"classifier": "connections",
"description": "Read DaVinci connections"
},
{
"id": "formBuilder:read:form",
"classifier": "form",
"description": "Read or list forms"
},
{
"id": "orgmgt:read:environment",
"classifier": "environment",
"description": "Read environments"
},
{
"id": "formBuilder:read:recaptchaV2Config",
"classifier": "recaptchaV2Config",
"description": "Read a reCAPTCHA V2 config"
},
{
"id": "branding:read:brandingSettings",
"classifier": "brandingSettings",
"description": "Read or list branding settings"
}
]
}
]
},
"count": 13,
"size": 13
}