Get
Returns an impersonation grant by its global id. Requires the https://devx.{environment}.oleria.io/read scope.
Authorizations
OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as Authorization: Bearer <token>.
Path Parameters
Global id of the impersonation grant.
Response
The impersonation grant.
An Oleria EntityCanImpersonateEntity relationship represents an explicit authorization for one entity (Oleria Account, Oleria Role, or Oleria UserGroup) to act on behalf of another entity. Direction: impersonating to impersonated. globalImpersonatingEntityId/Type identify the entity granted the authorization; globalImpersonatedEntityId/Type identify the target. Impersonation grants apply transitively to entities nested under the target.
An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration
1An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration
1The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage
Account, AccountRole, Activity, AssignedApplication, Authenticator, AuthenticatorEnrollment, Department, DirectoryProvider, Employee, IntegratedApplication, None, ObjectDirectory, PermissionSet, Person, ResourceClass, ResourceInstance, RiskDefinition, RiskViolation, Role, UserGroup "Account"
An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration
1The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage
Account, AccountRole, Activity, AssignedApplication, Authenticator, AuthenticatorEnrollment, Department, DirectoryProvider, Employee, IntegratedApplication, None, ObjectDirectory, PermissionSet, Person, ResourceClass, ResourceInstance, RiskDefinition, RiskViolation, Role, UserGroup "Account"
The ObjectMetadata structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data
Opaque platform-assigned identifier for this relationship instance.
Global ID of the entity that may be impersonated. Valid values reference Oleria Account, Oleria Role, or Oleria UserGroup.
Object type of the impersonated entity. Expected values: Oleria Account, Oleria Role, Oleria UserGroup.
Oleria_Account, Oleria_AccountRole, Oleria_Activity, Oleria_Application, Oleria_ApplicationDeployment, Oleria_AssignedApplication, Oleria_Authenticator, Oleria_AuthenticatorEnrollment, Oleria_Department, Oleria_DirectoryProvider, Oleria_DiscoveredApplication, Oleria_Employee, Oleria_IntegratedApplication, Oleria_ObjectDirectory, Oleria_Person, Oleria_ResourceClass, Oleria_ResourceInstance, Oleria_Role, Oleria_UserGroup "Oleria_IntegratedApplication"
Global ID of the entity granted authorization to impersonate. Valid values reference Oleria Account, Oleria Role, or Oleria UserGroup.
Object type of the impersonating entity. Expected values: Oleria Account, Oleria Role, Oleria UserGroup.
Oleria_Account, Oleria_AccountRole, Oleria_Activity, Oleria_Application, Oleria_ApplicationDeployment, Oleria_AssignedApplication, Oleria_Authenticator, Oleria_AuthenticatorEnrollment, Oleria_Department, Oleria_DirectoryProvider, Oleria_DiscoveredApplication, Oleria_Employee, Oleria_IntegratedApplication, Oleria_ObjectDirectory, Oleria_Person, Oleria_ResourceClass, Oleria_ResourceInstance, Oleria_Role, Oleria_UserGroup "Oleria_IntegratedApplication"
object metadata supersets object metadata with platform enrichment provenance — the enrichment version and the time the record was generated
Used to specify if an emitted relationship is federated, and if so, how Oleria can connect the participating objects in a composite graph
The ImpersonationRestrictions describes any resource and scope (permission) restrictions that apply in the context of an impersonation relationship
The ImpersonationRestrictions describes any resource and scope (permission) restrictions that apply in the context of an impersonation relationship

