Retrieve the collection origins for a batch of assignments

Okta Identity Governance

Management APIs

Retrieve the collection origins for a batch of assignments

Request

okta.governance.collections.read

APP_ADMIN

Retrieves the collection origins for a batch of assignments, anchored on a single principal (with many resources) or a single resource (with many principals). For each pair, it returns whether the assignment is managed by a collection and the owning collection. It's read-only.

Bodyapplication/jsonrequired

The assignments to look up, anchored on a principal or a resource

principalOrnstring

Anchor principal. Provide together with resourceOrns.

Example:"orn:okta:directory:00o11edPwGqbUrsDm0g4:users:00u15uaczkiiNcYf1698"

resourceOrnsArray of strings, [ 1 .. 200 ] items

Resource ORNs to check for the anchor principal

resourceOrnstring

Anchor resource. Provide together with principalOrns.

Example:"orn:okta:idp:00o11edPwGqbUrsDm0g4:apps:salesforce:0oafxqCAJWWGELFTYASJ"

principalOrnsArray of strings, [ 1 .. 200 ] items

Principal ORNs to check for the anchor resource

curl -i -X POST \
  https://subdomain.okta.com/governance/api/v2/collections/assignments/origins \
  -H 'Content-Type: application/json' \
  -d '{
    "principalOrn": "orn:okta:directory:00o11edPwGqbUrsDm0g4:users:00u15uaczkiiNcYf1698",
    "resourceOrns": [
      "string"
    ],
    "resourceOrn": "orn:okta:idp:00o11edPwGqbUrsDm0g4:apps:salesforce:0oafxqCAJWWGELFTYASJ",
    "principalOrns": [
      "string"
    ]
  }'

Responses

Collection origin for each requested assignment

Headers

X-Rate-Limit-Limitinteger, >= 1required

The rate-limit ceiling for the current request

Example:60

X-Rate-Limit-Remaininginteger, >= 0required

The number of requests left for the current rate-limit window

Example:60

X-Rate-Limit-Resetinteger, >= 0required

The time when the rate limit resets, specified in UTC epoch time (in seconds)

Example:1609459200

Bodyapplication/json

resultsArray of objects(collection-assignment-origin)

Response

{
  "results": [
    { … }
  ]
}