Add Permission To Vault Account

1 min

POST

{{url}}/aioc-rest-web/rest/sc/sapm/addPermissionToAccount

Overview

This API facilitates the assignment of specific permissions to a designated Vault account in KRON PAM. By inputting the sapmDbId of the Vault account, you can allocate permissions to either individual users or entire user groups.

Parameters

sapmDbId:
- Description: The unique identifier of the Vault account in KRON PAM.
newPermission:
- Description: An array of objects, each detailing a permission assignment.
- Components:
  - eid: External identifier for the user or user group.
  - permission: Defines the access level. Permissions include:
    - LIST_ONLY: View-only access.
    - MANAGE_PASSWORD: Ability to manage passwords.
    - READ_ONLY: Read-only access.
    - READ_ONLY_SECOND_PART: Limited read-only access to the latter part of data.
    - FULL_CONTROL: Full access and control.
    - READ_WRITE: Ability to read and modify.
    - READ_ONLY_FIRST_PART: Limited read-only access to the initial part of data.
  - type: Indicates if the permission is for a user or a user group

urlstring

X-XSRF-TOKENstring

bodyobject

200Add Permission To Vault Account

curl --request POST \
     --url {{url}}/aioc-rest-web/rest/sc/sapm/addPermissionToAccount \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --header 'x-xsrf-token: {{csrftoken}}' \
     --data '"{\r\n    \"sapmDbId\": 398881,\r\n    \"newPermission\": [\r\n        {\r\n            \"id\": \"3c895317-aac1-4ed8-b214-f53d9b582b77\",\r\n            \"eid\": \"SQL PROXY\",\r\n            \"permission\": \"READ_ONLY\",\r\n            \"type\": \"USER_GROUP\"\r\n        }\r\n    ]\r\n}\r\n"'