Skip to content

[Bug] Incorrect permission scope in API spec for load-entitlements-by-sources #1006

@SmeshBash

Description

@SmeshBash

Summary

The Identity Security Cloud API spec for load-entitlements-by-sources appears to list the wrong required permission.

Where I see the problem

  • API version: v2025
  • Endpoint: POST /load-entitlements-by-sources
  • File (from this repo): static/api-specs/idn/v2025/paths/load-entitlements-by-sources.yaml

What is currently in the spec

Under security -> userAuth, the scope is:

  • idn:entitlement:manage

What I expected / suggested fix

Based on how this API behaves and other examples, I believe the scope should be:

  • idn:sources:manage
  • idn:entitlement:manage

Suggested YAML change:

security:
  - userAuth:
      - idn:sources:manage
      - idn:entitlement:manage

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions