curl --request POST \
--url https://{tenantDomain}/api/v2/organization-templates \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"enforce_permission_ceiling": true,
"enforce_self_assignment_restriction": true,
"name": "<string>",
"admin_roles_assignment": [
"<string>"
],
"allowed_strategies": [],
"connection_profile_id": "<string>",
"invitation_landing_client_id": "<string>",
"is_default": true,
"role_visibility_policy": {
"overrides": [
{
"role_id": "<string>"
}
]
},
"use_for_organization_discovery": {
"default_value": true,
"allowed_values": [
true
]
},
"user_attribute_profile_id": "<string>"
}
'import requests
url = "https://{tenantDomain}/api/v2/organization-templates"
payload = {
"enforce_permission_ceiling": True,
"enforce_self_assignment_restriction": True,
"name": "<string>",
"admin_roles_assignment": ["<string>"],
"allowed_strategies": [],
"connection_profile_id": "<string>",
"invitation_landing_client_id": "<string>",
"is_default": True,
"role_visibility_policy": { "overrides": [{ "role_id": "<string>" }] },
"use_for_organization_discovery": {
"default_value": True,
"allowed_values": [True]
},
"user_attribute_profile_id": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
enforce_permission_ceiling: true,
enforce_self_assignment_restriction: true,
name: '<string>',
admin_roles_assignment: ['<string>'],
allowed_strategies: [],
connection_profile_id: '<string>',
invitation_landing_client_id: '<string>',
is_default: true,
role_visibility_policy: {overrides: [{role_id: '<string>'}]},
use_for_organization_discovery: {default_value: true, allowed_values: [true]},
user_attribute_profile_id: '<string>'
})
};
fetch('https://{tenantDomain}/api/v2/organization-templates', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{tenantDomain}/api/v2/organization-templates",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'enforce_permission_ceiling' => true,
'enforce_self_assignment_restriction' => true,
'name' => '<string>',
'admin_roles_assignment' => [
'<string>'
],
'allowed_strategies' => [
],
'connection_profile_id' => '<string>',
'invitation_landing_client_id' => '<string>',
'is_default' => true,
'role_visibility_policy' => [
'overrides' => [
[
'role_id' => '<string>'
]
]
],
'use_for_organization_discovery' => [
'default_value' => true,
'allowed_values' => [
true
]
],
'user_attribute_profile_id' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://{tenantDomain}/api/v2/organization-templates"
payload := strings.NewReader("{\n \"enforce_permission_ceiling\": true,\n \"enforce_self_assignment_restriction\": true,\n \"name\": \"<string>\",\n \"admin_roles_assignment\": [\n \"<string>\"\n ],\n \"allowed_strategies\": [],\n \"connection_profile_id\": \"<string>\",\n \"invitation_landing_client_id\": \"<string>\",\n \"is_default\": true,\n \"role_visibility_policy\": {\n \"overrides\": [\n {\n \"role_id\": \"<string>\"\n }\n ]\n },\n \"use_for_organization_discovery\": {\n \"default_value\": true,\n \"allowed_values\": [\n true\n ]\n },\n \"user_attribute_profile_id\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{tenantDomain}/api/v2/organization-templates")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"enforce_permission_ceiling\": true,\n \"enforce_self_assignment_restriction\": true,\n \"name\": \"<string>\",\n \"admin_roles_assignment\": [\n \"<string>\"\n ],\n \"allowed_strategies\": [],\n \"connection_profile_id\": \"<string>\",\n \"invitation_landing_client_id\": \"<string>\",\n \"is_default\": true,\n \"role_visibility_policy\": {\n \"overrides\": [\n {\n \"role_id\": \"<string>\"\n }\n ]\n },\n \"use_for_organization_discovery\": {\n \"default_value\": true,\n \"allowed_values\": [\n true\n ]\n },\n \"user_attribute_profile_id\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{tenantDomain}/api/v2/organization-templates")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"enforce_permission_ceiling\": true,\n \"enforce_self_assignment_restriction\": true,\n \"name\": \"<string>\",\n \"admin_roles_assignment\": [\n \"<string>\"\n ],\n \"allowed_strategies\": [],\n \"connection_profile_id\": \"<string>\",\n \"invitation_landing_client_id\": \"<string>\",\n \"is_default\": true,\n \"role_visibility_policy\": {\n \"overrides\": [\n {\n \"role_id\": \"<string>\"\n }\n ]\n },\n \"use_for_organization_discovery\": {\n \"default_value\": true,\n \"allowed_values\": [\n true\n ]\n },\n \"user_attribute_profile_id\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"admin_roles_assignment": [
"<string>"
],
"allowed_strategies": [
"adfs"
],
"connection_deletion_behavior": "allow",
"connection_profile_id": "<string>",
"created_at": "2023-11-07T05:31:56Z",
"enforce_permission_ceiling": true,
"enforce_self_assignment_restriction": true,
"id": "<string>",
"invitation_landing_client_id": "<string>",
"is_default": true,
"name": "<string>",
"organization_deletion_behavior": "allow",
"role_visibility_policy": {
"default_value": "write",
"overrides": [
{
"access": "write",
"role_id": "<string>"
}
]
},
"updated_at": "2023-11-07T05:31:56Z",
"use_for_organization_discovery": {
"default_value": true,
"allowed_values": [
true
]
},
"user_attribute_profile_id": "<string>"
}{
"error": "Bad Request",
"message": "<string>",
"statusCode": 400
}{
"error": "Unauthorized",
"message": "<string>",
"statusCode": 401
}{
"error": "Forbidden",
"message": "<string>",
"statusCode": 403
}{
"error": "Conflict",
"message": "<string>",
"statusCode": 409
}{
"error": "Too Many Requests",
"message": "<string>",
"statusCode": 429
}organization テンプレートを作成
Organization テンプレートを作成します。
curl --request POST \
--url https://{tenantDomain}/api/v2/organization-templates \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"enforce_permission_ceiling": true,
"enforce_self_assignment_restriction": true,
"name": "<string>",
"admin_roles_assignment": [
"<string>"
],
"allowed_strategies": [],
"connection_profile_id": "<string>",
"invitation_landing_client_id": "<string>",
"is_default": true,
"role_visibility_policy": {
"overrides": [
{
"role_id": "<string>"
}
]
},
"use_for_organization_discovery": {
"default_value": true,
"allowed_values": [
true
]
},
"user_attribute_profile_id": "<string>"
}
'import requests
url = "https://{tenantDomain}/api/v2/organization-templates"
payload = {
"enforce_permission_ceiling": True,
"enforce_self_assignment_restriction": True,
"name": "<string>",
"admin_roles_assignment": ["<string>"],
"allowed_strategies": [],
"connection_profile_id": "<string>",
"invitation_landing_client_id": "<string>",
"is_default": True,
"role_visibility_policy": { "overrides": [{ "role_id": "<string>" }] },
"use_for_organization_discovery": {
"default_value": True,
"allowed_values": [True]
},
"user_attribute_profile_id": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
enforce_permission_ceiling: true,
enforce_self_assignment_restriction: true,
name: '<string>',
admin_roles_assignment: ['<string>'],
allowed_strategies: [],
connection_profile_id: '<string>',
invitation_landing_client_id: '<string>',
is_default: true,
role_visibility_policy: {overrides: [{role_id: '<string>'}]},
use_for_organization_discovery: {default_value: true, allowed_values: [true]},
user_attribute_profile_id: '<string>'
})
};
fetch('https://{tenantDomain}/api/v2/organization-templates', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{tenantDomain}/api/v2/organization-templates",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'enforce_permission_ceiling' => true,
'enforce_self_assignment_restriction' => true,
'name' => '<string>',
'admin_roles_assignment' => [
'<string>'
],
'allowed_strategies' => [
],
'connection_profile_id' => '<string>',
'invitation_landing_client_id' => '<string>',
'is_default' => true,
'role_visibility_policy' => [
'overrides' => [
[
'role_id' => '<string>'
]
]
],
'use_for_organization_discovery' => [
'default_value' => true,
'allowed_values' => [
true
]
],
'user_attribute_profile_id' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://{tenantDomain}/api/v2/organization-templates"
payload := strings.NewReader("{\n \"enforce_permission_ceiling\": true,\n \"enforce_self_assignment_restriction\": true,\n \"name\": \"<string>\",\n \"admin_roles_assignment\": [\n \"<string>\"\n ],\n \"allowed_strategies\": [],\n \"connection_profile_id\": \"<string>\",\n \"invitation_landing_client_id\": \"<string>\",\n \"is_default\": true,\n \"role_visibility_policy\": {\n \"overrides\": [\n {\n \"role_id\": \"<string>\"\n }\n ]\n },\n \"use_for_organization_discovery\": {\n \"default_value\": true,\n \"allowed_values\": [\n true\n ]\n },\n \"user_attribute_profile_id\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{tenantDomain}/api/v2/organization-templates")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"enforce_permission_ceiling\": true,\n \"enforce_self_assignment_restriction\": true,\n \"name\": \"<string>\",\n \"admin_roles_assignment\": [\n \"<string>\"\n ],\n \"allowed_strategies\": [],\n \"connection_profile_id\": \"<string>\",\n \"invitation_landing_client_id\": \"<string>\",\n \"is_default\": true,\n \"role_visibility_policy\": {\n \"overrides\": [\n {\n \"role_id\": \"<string>\"\n }\n ]\n },\n \"use_for_organization_discovery\": {\n \"default_value\": true,\n \"allowed_values\": [\n true\n ]\n },\n \"user_attribute_profile_id\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{tenantDomain}/api/v2/organization-templates")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"enforce_permission_ceiling\": true,\n \"enforce_self_assignment_restriction\": true,\n \"name\": \"<string>\",\n \"admin_roles_assignment\": [\n \"<string>\"\n ],\n \"allowed_strategies\": [],\n \"connection_profile_id\": \"<string>\",\n \"invitation_landing_client_id\": \"<string>\",\n \"is_default\": true,\n \"role_visibility_policy\": {\n \"overrides\": [\n {\n \"role_id\": \"<string>\"\n }\n ]\n },\n \"use_for_organization_discovery\": {\n \"default_value\": true,\n \"allowed_values\": [\n true\n ]\n },\n \"user_attribute_profile_id\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"admin_roles_assignment": [
"<string>"
],
"allowed_strategies": [
"adfs"
],
"connection_deletion_behavior": "allow",
"connection_profile_id": "<string>",
"created_at": "2023-11-07T05:31:56Z",
"enforce_permission_ceiling": true,
"enforce_self_assignment_restriction": true,
"id": "<string>",
"invitation_landing_client_id": "<string>",
"is_default": true,
"name": "<string>",
"organization_deletion_behavior": "allow",
"role_visibility_policy": {
"default_value": "write",
"overrides": [
{
"access": "write",
"role_id": "<string>"
}
]
},
"updated_at": "2023-11-07T05:31:56Z",
"use_for_organization_discovery": {
"default_value": true,
"allowed_values": [
true
]
},
"user_attribute_profile_id": "<string>"
}{
"error": "Bad Request",
"message": "<string>",
"statusCode": 400
}{
"error": "Unauthorized",
"message": "<string>",
"statusCode": 401
}{
"error": "Forbidden",
"message": "<string>",
"statusCode": 403
}{
"error": "Conflict",
"message": "<string>",
"statusCode": 409
}{
"error": "Too Many Requests",
"message": "<string>",
"statusCode": 429
}承認
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
ボディ
このテンプレートを使用する組織に対して権限上限を適用するかどうか。
このテンプレートを使用する組織に対して自己割り当て制限を適用するかどうか。
組織テンプレートの名前。
1 - 100^[^\x00]*$このテンプレートを使用する組織を削除できるかどうかを制御します。
allow, allow_if_empty 組織の作成者に割り当てるデフォルトの管理者ロール。
10ロール識別子。
このテンプレートで許可される接続戦略のリスト。
許可されるエンタープライズ接続の方式。
adfs, google-apps, oidc, okta, pingfederate, samlp, waad このテンプレートから作成された接続を削除できるかどうかを制御します。
allow, allow_if_empty 新しい接続に適用する接続プロファイル。
招待ランディングページのクライアントID。
新しい組織に適用されるデフォルトテンプレートかどうか。
組織管理者に対するロールの表示を制御します。
Show child attributes
Show child attributes
このテンプレートの接続を組織の検出に使用するかどうかを制御します。
Show child attributes
Show child attributes
組織に適用するユーザー属性プロファイル。
レスポンス
Organization テンプレートが正常に作成されました。
組織の作成者に割り当てるデフォルトの管理者ロール。
ロール識別子。
このテンプレートで許可される接続の方式のリスト。
許可されるエンタープライズ接続の方式。
adfs, google-apps, oidc, okta, pingfederate, samlp, waad このテンプレートから作成された接続を削除できるかどうかを制御します。
allow, allow_if_empty 新しい接続に適用する接続プロファイル。
テンプレートの作成日時を示すISO 8601形式のタイムスタンプ。
このテンプレートを使用する組織に対して権限上限を強制適用するかどうか。
このテンプレートを使用する組織に対して自己割り当ての制限を強制適用するかどうか。
Organization Templateの識別子。
招待用ランディングページのクライアントID。
新しい組織に適用されるデフォルトテンプレートかどうか。
organizationテンプレートの名前。
1 - 100^[^\x00]*$このテンプレートを使用する組織を削除できるかどうかを制御します。
allow, allow_if_empty 組織管理者に対するロールの表示を制御します。
Show child attributes
Show child attributes
テンプレートの最終更新日時を示すISO 8601形式のタイムスタンプ。
このテンプレートの接続を組織の検出に使用するかどうかを制御します。
Show child attributes
Show child attributes
組織に適用するユーザー属性プロファイル。