/
Permissions Required to Invoke Admin Services

This site contains the documentation that is relevant to older WSO2 product versions and offerings.
For the latest WSO2 documentation, visit https://wso2.com/documentation/.

Permissions Required to Invoke Admin Services

Jan 11, 2018

The following table lists out the various operations that can be performed with different permission levels.

Permission level

Service

Operations

Tenant level permissions

/admin

UserStoreConfigAdminService

  • addUserStore

  • changeUserStoreState

  • deleteUserStore

  • deleteUserStoresSet

  • editUserStore

  • editUserStoreWithDomainName

  • getAvailableUserStoreClasses

  • getSecondaryRealmConfigurations

  • getUserStoreManagerProperties

/admin/configure/security          

RemoteAuthorizationManagerService

  • authorizeRole

  • authorizeUser

  • clearAllRoleAuthorization

  • clearAllUserAuthorization

  • clearResourceAuthorizations

  • clearRoleActionOnAllResources

  • clearRoleAuthorization

  • clearUserAuthorization

  • denyRole

  • denyUser

  • getAllowedRolesForResource

  • getAllowedUIResourcesForUser

  • getDeniedRolesForResource

  • getExplicitlyAllowedUsersForResource

  • getExplicitlyDeniedUsersForResource

  • isRoleAuthorized

  • isUserAuthorized

  • resetPermissionOnUpdateRole

RemoteClaimManagerService

  • addNewClaimMapping

  • deleteClaimMapping

  • getAllClaimMappings

  • getAllClaimUris

  • getAllRequiredClaimMappings

  • getAllSupportClaimMappingsByDefault

  • getAttributeName

  • getAttributeNameFromDomain

  • getClaim

  • getClaimMapping

  • updateClaimMapping

RemoteProfileConfigurationManagerService

  • addProfileConfig

  • deleteProfileConfig

  • getAllProfiles

  • getProfileConfig

  • updateProfileConfig

RemoteUserStoreManagerService

  • addRole

  • addUser

  • addUserClaimValue

  • addUserClaimValues

  • authenticate

  • deleteRole

  • deleteUser

  • deleteUserClaimValue

  • deleteUserClaimValues

  • getAllProfileNames

  • getHybridRoles

  • getPasswordExpirationTime

  • getProfileNames

  • getProperties

  • getRoleListOfUser

  • getRoleNames

  • getTenantId

  • getTenantIdofUser

  • getUserClaimValue

  • getUserClaimValues

  • getUserClaimValuesForClaims

  • getUserId

  • getUserList

  • getUserListOfRole

  • isExistingRole

  • isExistingUser

  • isReadOnly

  • listUsers

  • setUserClaimValue

  • setUserClaimValues

  • updateCredential

  • updateCredentialByAdmin

  • updateRoleListOfUser

  • updateRoleName

  • updateUserListOfRole

SCIMConfigAdminService

  • addGlobalProvider

  • deleteGlobalProvider

  • getAllGlobalProviders

  • getGlobalProvider

  • updateGlobalProvider

 UserAdmin

  • addInternalRole

  • addRemoveRolesOfUser

  • addRemoveUsersOfRole

  • addRole

  • bulkImportUsers

  • deleteRole

  • getAllSharedRoleNames

  • getAllUIPermissions

  • getRolePermissions

  • getRolesOfUser

  • isSharedRolesEnabled

  • listUserByClaim

  • setRoleUIPermission

  • updateRoleName

  • updateRolesOfUser

  • updateUsersOfRole

/admin/configure/security/rolemgt

UserAdmin

  • getUsersOfRole

/admin/configure/security/usermgt

MultipleCredentialsUserAdmin

  • addUserWithUserId

  • authenticate

  • deleteUserClaimValue

  • deleteUserClaimValues

  • getUserClaimValue

  • getUserClaimValues

  • getUserId

  • setUserClaimValue

  • setUserClaimValues

/admin/configure/security/usermgt/passwords

MultipleCredentialsUserAdmin 

  • addCredential

  • deleteCredential

  • getCredentials

  • updateCredential

UserAdmin

  • changePassword

 /admin/configure/security/usermgt/provisioning

SCIMConfigAdminService

  • addUserProvider

  • deleteUserProvider

  • getAllUserProviders

  • getUserProvider

  • updateUserProvider

/admin/configure/security/usermgt/users

MultipleCredentialsUserAdmin

  • addUser

  • addUsers

  • deleteUser

UserAdmin

  • addUser

  • deleteUser

/admin/login

AccountCredentialMgtConfigService

  • getEmailConfig

  • saveEmailConfig

EntitlementService

  • getAllEntitlements

  • getBooleanDecision

  • getDecision

  • getDecisionByAttributes

  • getEntitledAttributes

  • XACMLAuthzDecisionQuery

IdentityProviderAdminService

  • addOpenID

  • extractPrimaryUserName

  • getAllOpenIDs

  • getPrimaryOpenID

  • removeOpenID

  • getAllIdPs

IWAAuthenticator

  • canHandle

  • login

LoggedUserInfoAdmin

  • getUserInfo

MultipleCredentialsUserAdmin

  • getAllUserClaimValues

OAuthAdminService

  • getAppsAuthorizedByUser

  • revokeAuthzForAppsByResoureOwner

UserAdmin

  • changePasswordByUser

  • getRolesOfCurrentUser

  • getUserRealmInfo

  • hasMultipleUserStores

UserInformationRecoveryService

  • confirmUserSelfRegistration

  • getAllChallengeQuestions

  • getCaptcha

  • getUserChallengeQuestion

  • getUserChallengeQuestionIds

  • getUserIdentitySupportedClaims

  • registerUser

  • sendRecoveryNotification

  • updatePassword

  • verifyAccount

  • verifyConfirmationCode

  • verifyUser

  • verifyUserChallengeAnswer

XMPPConfigurationService

  • addUserXmppSettings

  • editXmppSettings

  • getUserIM

  • getXmppSettings

  • hasXMPPSettings

  • isXMPPSettingsEnabled

/admin/manage 

ClaimManagementService

  • addNewClaimDialect

  • addNewClaimMapping

  • getClaimMappingByDialect

  • getClaimMappings

  • removeClaimDialect

  • removeClaimMapping

  • updateClaimMapping

EntitlementAdminService

  • clearAllAttributeCaches

  • clearAllResourceCaches

  • clearAttributeFinderCache

  • clearAttributeFinderCacheByAt tributes

  • clearCarbonAttributeCache

  • clearCarbonResourceCache

  • clearDecisionCache

  • clearPolicyCache

  • clearResourceFinderCache

  • doTestRequest

  • doTestRequestForGivenPolicies

  • getGlobalPolicyAlgorithm

  • getPDPData

  • getPIPAttributeFinderData

  • getPIPResourceFinderData

  • getPolicyFinderData

  • refreshAttributeFinder

  • refreshPolicyFinders

  • refreshResourceFinder

  • setGlobalPolicyAlgorithm

EntitlementPolicyAdminService

  • addPolicies

  • addPolicy

  • addSubscriber

  • deleteSubscriber

  • dePromotePolicy

  • enableDisablePolicy

  • getAllPolicies

  • getAllPolicyIds

  • getEntitlementData

  • getEntitlementDataModules

  • getLightPolicy

  • getPolicy

  • getPolicyByVersion

  • getPolicyVersions

  • getPublisherModuleData

  • getStatusData

  • getSubscriber

  • getSubscriberIds

  • importPolicyFromRegistry

  • orderPolicy

  • publish

  • publishPolicies

  • publishToPDP

  • removePolicies

  • removePolicy

  • rollBackPolicy

  • updatePolicy

  • updateSubscriber

IdentityApplicationManagementService

  • createApplication

  • deleteApplication

  • getAllApplicationBasicInfo

  • getAllIdentityProviders

  • getAllLocalAuthenticators

  • getAllLocalClaimUris

  • getAllRequestPathAuthenticators

  • getApplication

  • getIdentityProvider

  • updateApplication

IdentityProviderMgtService

  • addIdP

  • deleteIdP

  • getAllFederatedAuthenticators

  • getAllLocalClaimUris

  • getAllProvisioningConnectors

  • getEnabledAllIdPs

  • getIdPByName

  • getResidentIdP

  • updateIdP

  • updateResidentIdP

IdentitySAMLSSOConfigService

  • addRPServiceProvider

  • getCertAliasOfPrimaryKeyStore

  • getClaimURIs

  • getServiceProviders

  • removeServiceProvider

IdentitySTSAdminService

  • readCardIssuerConfiguration

  • updateCardIssueConfiguration

KeyStoreAdminService

  • addKeyStore

  • addTrustStore

  • deleteStore

  • getKeyStores

  • getKeystoreInfo