Creates a new entitlement.

The API creates a new entitlement of type role or permission for a specific tenant.
In case of roles it is possible to add a list of children which could possibly be a set of roles as well as permissions.
The children can be added or removed via API POST /authz/v1.0/entitlements/{entitlement}/children.
Entitlements required: tenantadmin [Tenant Administrator], manageAppAccessOwner [Manage Application Entitlements], manageEntitlements [Manage Entitlements].

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests

LoadingLoading

Body Params
string
required

Unique name of the entitlement across the application.

string

Description of the entitlement.

string
enum
required

Specifies the type of the entitlement. Supported values are:
1. role - To create an application role.
2. permission - To create a regular entitlement. Note: the created permission is not provisioned to target application.
Allowable values

Allowed:
string
required

Application code is the unique identifier of an application. If type is specified as 'permission' or 'role', then application identifier is necessary.

string

Category of the entitlement.

string

Unique identifier of the mapped object in the connected application.

rightsValuesV2
array of objects

Fixed multiple rights values associated to child permissions

rightsValuesV2
rightsValues
array of objects

Fixed rights value associated to child permissions which are fetched during application onboarding.

rightsValues
Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

500

Your request can't be processed because an internal server error occurred.

Language
URL
LoadingLoading

Response
Choose an example:
application/json
text/plain