Skip to main content
GET
Get

Authorizations

Authorization
string
header
required

OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as Authorization: Bearer <token>.

Path Parameters

id
string
required

Global id of the managed-via relationship.

Response

The managed-via relationship.

An Oleria EntityManagedViaObject relationship connects an entity (Oleria Account, Oleria Role, or Oleria UserGroup) to the Oleria ResourceInstance that also represents it in the graph, so that ownership and management of the entity can be expressed separately from the entity itself. Direction: entity to managed-via object. globalEntityId/Type identify the entity; globalManagedViaObjectId/Type identify the representing object.

entityId
string
required

An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration

Minimum string length: 1
entityType
enum<string>
required

The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage

Available options:
Account,
AccountRole,
Activity,
AssignedApplication,
Authenticator,
AuthenticatorEnrollment,
Department,
DirectoryProvider,
Employee,
IntegratedApplication,
None,
ObjectDirectory,
PermissionSet,
Person,
ResourceClass,
ResourceInstance,
RiskDefinition,
RiskViolation,
Role,
UserGroup
Example:

"Account"

id
string
required

An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration

Minimum string length: 1
managedViaObjectId
string
required

An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration

Minimum string length: 1
managedViaObjectType
enum<string>
required

The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage

Available options:
Account,
AccountRole,
Activity,
AssignedApplication,
Authenticator,
AuthenticatorEnrollment,
Department,
DirectoryProvider,
Employee,
IntegratedApplication,
None,
ObjectDirectory,
PermissionSet,
Person,
ResourceClass,
ResourceInstance,
RiskDefinition,
RiskViolation,
Role,
UserGroup
Example:

"Account"

objectMetadata
object
required

The ObjectMetadata structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data

globalEntityId
string
required

Global ID of the entity that is owned or managed via the representing object. Valid values reference Oleria Account, Oleria Role, or Oleria UserGroup.

globalEntityType
enum<string>
required

Object type of the entity. Expected values: Oleria Account, Oleria Role, Oleria UserGroup.

Available options:
Oleria_Account,
Oleria_AccountRole,
Oleria_Activity,
Oleria_Application,
Oleria_ApplicationDeployment,
Oleria_AssignedApplication,
Oleria_Authenticator,
Oleria_AuthenticatorEnrollment,
Oleria_Department,
Oleria_DirectoryProvider,
Oleria_DiscoveredApplication,
Oleria_Employee,
Oleria_IntegratedApplication,
Oleria_ObjectDirectory,
Oleria_Person,
Oleria_ResourceClass,
Oleria_ResourceInstance,
Oleria_Role,
Oleria_UserGroup
Example:

"Oleria_IntegratedApplication"

globalId
string
required

Opaque platform-assigned identifier for this relationship instance.

globalManagedViaObjectId
string
required

Global ID of the object that represents the entity for ownership and management. References Oleria ResourceInstance.

globalManagedViaObjectType
enum<string>
required

Object type of the representing object. Expected value: Oleria ResourceInstance.

Available options:
Oleria_Account,
Oleria_AccountRole,
Oleria_Activity,
Oleria_Application,
Oleria_ApplicationDeployment,
Oleria_AssignedApplication,
Oleria_Authenticator,
Oleria_AuthenticatorEnrollment,
Oleria_Department,
Oleria_DirectoryProvider,
Oleria_DiscoveredApplication,
Oleria_Employee,
Oleria_IntegratedApplication,
Oleria_ObjectDirectory,
Oleria_Person,
Oleria_ResourceClass,
Oleria_ResourceInstance,
Oleria_Role,
Oleria_UserGroup
Example:

"Oleria_IntegratedApplication"

oleriaObjectMetadata
object
required

object metadata supersets object metadata with platform enrichment provenance — the enrichment version and the time the record was generated

federationSpecification
object

Used to specify if an emitted relationship is federated, and if so, how Oleria can connect the participating objects in a composite graph