WPB-20055 Endpoint for updating user group with SCIM

[battermann]

Checklist

• Add a new entry in an appropriate subdirectory of changelog.d
• Read and follow the PR guidelines

[Copilot]

Pull Request Overview

This PR implements SCIM support for updating user groups (WPB-20055), enabling group name changes and member list modifications through the SCIM API endpoint.

Key Changes:

• Implements putGroup in the SCIM Group API to handle group updates via SCIM
• Adds new internal Brig endpoints for creating and updating user groups with enhanced error handling
• Refactors existing CreateGroupFull and GetGroupUnsafe operations to CreateGroupInternal and GetGroupInternal for naming consistency

Reviewed Changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated 8 comments.

Show a summary per file

File	Description
services/spar/src/Spar/Scim/Group.hs	Implements putGroup method by calling scimUpdateUserGroup
services/spar/src/Spar/Error.hs	Updates error mapping for SCIM subsystem errors, refines error messages for invalid members
services/brig/src/Brig/API/Internal.hs	Adds updateGroupInternalH handler and renames create/get group handlers for consistency
libs/wire-subsystems/src/Wire/ScimSubsystem.hs	Adds ScimUpdateUserGroup operation to subsystem interface
libs/wire-subsystems/src/Wire/ScimSubsystem/Interpreter.hs	Implements scimUpdateUserGroupImpl with validation for team membership and SCIM management
libs/wire-subsystems/src/Wire/UserGroupSubsystem.hs	Adds internal operations: CreateGroupInternal, GetGroupInternal, ResetUserGroupInternal
libs/wire-subsystems/src/Wire/UserGroupSubsystem/Interpreter.hs	Implements access control bypass for internal operations and resetUserGroupInternal
libs/wire-subsystems/src/Wire/BrigAPIAccess.hs	Updates API interface with new internal group operations and error handling
libs/wire-subsystems/src/Wire/BrigAPIAccess/Rpc.hs	Implements RPC calls for internal group operations with proper error handling
libs/wire-api/src/Wire/API/Routes/Internal/Brig.hs	Defines UpdateGroupInternalRequest type and API route for group updates
libs/wire-subsystems/test/unit/Wire/ScimSubsystem/InterpreterSpec.hs	Updates mock to align with renamed operations
integration/test/Test/Spar.hs	Adds comprehensive integration tests for SCIM group update and validation scenarios
integration/test/API/Spar.hs	Adds updateScimUserGroup test helper function
changelog.d/2-features/update-scim-groups	Documents the new feature

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.