Get
Returns an access assignment by its global id. Requires the https://devx.{environment}.oleria.io/read scope.
Authorizations
OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as Authorization: Bearer <token>.
Path Parameters
Global id of the access assignment.
Response
The access assignment.
An Oleria EntityAssignedAccessToObject relationship represents an entity (Oleria Account, Oleria Role, or Oleria UserGroup) assigned access to an object - an application (Oleria AssignedApplication or Oleria ApplicationDeployment) or a resource (Oleria ResourceClass or Oleria ResourceInstance). Direction: entity to assigned object. globalEntityId/Type identify the entity; globalAssignedObjectId/Type identify the object it is granted access to. It is the connector from the IdP layer to the application and resource layers.
An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration
1The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage
Account, AccountRole, Activity, AssignedApplication, Authenticator, AuthenticatorEnrollment, Department, DirectoryProvider, Employee, IntegratedApplication, None, ObjectDirectory, PermissionSet, Person, ResourceClass, ResourceInstance, RiskDefinition, RiskViolation, Role, UserGroup "Account"
The EntitlementSpecification describes the entitlements associated with an AssignedAccessTo relationship used for access control entitlement or SSO entitlement purposes
An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration
1The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage
Account, AccountRole, Activity, AssignedApplication, Authenticator, AuthenticatorEnrollment, Department, DirectoryProvider, Employee, IntegratedApplication, None, ObjectDirectory, PermissionSet, Person, ResourceClass, ResourceInstance, RiskDefinition, RiskViolation, Role, UserGroup "Account"
An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration
1The ObjectMetadata structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data
Global ID of the object the entity is assigned access to. References Oleria AssignedApplication, Oleria ApplicationDeployment, Oleria ResourceClass, or Oleria ResourceInstance.
Object type of the assigned object. Expected values: Oleria AssignedApplication, Oleria ApplicationDeployment, Oleria ResourceClass, Oleria ResourceInstance.
Oleria_Account, Oleria_AccountRole, Oleria_Activity, Oleria_Application, Oleria_ApplicationDeployment, Oleria_AssignedApplication, Oleria_Authenticator, Oleria_AuthenticatorEnrollment, Oleria_Department, Oleria_DirectoryProvider, Oleria_DiscoveredApplication, Oleria_Employee, Oleria_IntegratedApplication, Oleria_ObjectDirectory, Oleria_Person, Oleria_ResourceClass, Oleria_ResourceInstance, Oleria_Role, Oleria_UserGroup "Oleria_IntegratedApplication"
The EntitlementSpecification describes the entitlements associated with an AssignedAccessTo relationship used for access control entitlement or SSO entitlement purposes
Global ID of the entity granted access. Valid values reference Oleria Account, Oleria Role, or Oleria UserGroup.
Object type of the entity granted access. Expected values: Oleria Account, Oleria Role, Oleria UserGroup.
Oleria_Account, Oleria_AccountRole, Oleria_Activity, Oleria_Application, Oleria_ApplicationDeployment, Oleria_AssignedApplication, Oleria_Authenticator, Oleria_AuthenticatorEnrollment, Oleria_Department, Oleria_DirectoryProvider, Oleria_DiscoveredApplication, Oleria_Employee, Oleria_IntegratedApplication, Oleria_ObjectDirectory, Oleria_Person, Oleria_ResourceClass, Oleria_ResourceInstance, Oleria_Role, Oleria_UserGroup "Oleria_IntegratedApplication"
Opaque platform-assigned identifier for this relationship instance.
object metadata supersets object metadata with platform enrichment provenance — the enrichment version and the time the record was generated
Used to specify if an emitted relationship is federated, and if so, how Oleria can connect the participating objects in a composite graph
Cached count of authentication/login events observed on this assignment. Populated for entity-to-application entitlement assignments (an identity or group granted access to an application); null for entity-to-resource (ResourceClass/ResourceInstance) access.
Cached count of resource-access events observed on this assignment, inclusive of events on contained resources. Populated for entity-to-resource (ResourceClass/ResourceInstance) access; null for application entitlement assignments.
Most recent activity of any kind observed on this assignment relationship. Null when no activity has been observed on this assignment.
Dormancy of the assignment - days since the most recent observed activity. Null when no activity has been observed or dormancy is not tracked for this assignment.
Earliest activity observed on this assignment relationship (first-seen) - the counterpart to analyticsLastActivityDate. Null when no first-seen activity has been recorded for this assignment.

