Add iTwin group IMS groups - Access Control

Access Control

This operation is a Technical Preview and is available for testing purposes only. Do not use in production.

POST https://dev-api.bentley.com/accesscontrol/itwins/{id}/groups/{groupId}/ims-groups

Add IMS groups to the specified iTwin group. Every user that belongs to an assigned IMS group inherits the roles assigned to the iTwin group. A maximum of 50 IMS groups can be added in a single request.

Authentication

Requires Authorization header with valid Bearer token for scope itwin-platform.

For more documentation on authorization and how to get access token visit OAUTH2 Authorization page.

Authorization

User must have the administration_manage_groups and administration_invite_member permissions assigned at the iTwin level, or be an Organization Administrator for the Organization that owns the given iTwin, or an owner of the iTwin.

An Organization Administrator must have at least one of the following roles assigned in User Management: Account Administrator, Co-Administrator, or CONNECT Services Administrator. For more information about User Management please visit our Bentley Communities Licensing, Cloud, and Web Services wiki page.

Request

Request parameters

Yes

The iTwin ID.

groupId

Yes

The group ID.

Request headers

Authorization

Yes

OAuth access token with itwin-platform scope

Yes

Setting to application/vnd.bentley.itwin-platform.v2+json is recommended.

Request body

Add iTwin group IMS groups (request)

imsGroups

String[]

Yes

List of IMS group names to add to the group. Max size of 50.

Example

json

{
    "imsGroups": ["Sample IMS Group", "Another Sample IMS Group"]
}

Response

Response 201 Created

iTwin group IMS groups were successfully added.

json

{
    "imsGroups": [{
        "id": "4f1c2dc7-1dc9-4a3a-9c0f-7a5e7d3e7a12",
        "name": "Sample IMS Group",
        "usersCount": 12
    }, {
        "id": "b7d4f1a0-1f2f-4a6b-9c1d-0f3a2b5c6d7e",
        "name": "Another Sample IMS Group",
        "usersCount": 3
    }]
}

Response 401 Unauthorized

This response indicates that request lacks valid authentication credentials. Access token might not been provided, issued by the wrong issuer, does not have required scopes or request headers were malformed.

json

{
    "error": {
        "code": "HeaderNotFound",
        "message": "Header Authorization was not found in the request. Access denied."
    }
}

Response 403 Forbidden

The user has insufficient permissions for the requested operation.

json

{
    "error": {
        "code": "InsufficientPermissions",
        "message": "The user has insufficient permissions for the requested operation."
    }
}

Response 404 Not Found

This response indicates that iTwin, group, or IMS group with specified ID was not found.

json

{
    "error": {
        "code": "ItwinNotFound",
        "message": "Requested iTwin is not available."
    }
}

Response 409 Conflict

Invalid request to add iTwin group IMS groups. IMS group already exists in the iTwin group.

json

{
    "error": {
        "code": "ImsGroupExists",
        "message": "Requested IMS group already exists in iTwin group.",
        "target": "imsGroups[0]"
    }
}

Response 422 Unprocessable Entity

Invalid request to add iTwin group IMS groups. Make sure request has required properties and does not exceed maximum size.

json

{
    "error": {
        "code": "InvalidGroupImsGroupsRequest",
        "message": "Request body is invalid.",
        "details": [{
            "code": "InvalidProperty",
            "message": "Collection size exceeds maximum size.",
            "target": "imsGroups"
        }, {
            "code": "InvalidValue",
            "message": "Value outside of valid range.",
            "target": "imsGroups[0]"
        }, {
            "code": "DuplicateValue",
            "message": "Value is repeated in the request.",
            "target": "imsGroups[1]"
        }, {
            "code": "InvalidRequestBody",
            "message": "Failed to parse request body or collection is empty."
        }]
    }
}

Response 429 Too many requests

This response indicates that the client sent more requests than allowed by this API for the current tier of the client.

json

{
    "error": {
        "code": "RateLimitExceeded",
        "message": "The client sent more requests than allowed by this API for the current tier of the client."
    }
}

Response headers

retry-after

Number of seconds to wait until client is allowed to make more requests.

Definitions

Error

Contains error information.

code

String

One of a server-defined set of error codes.

target

String, null

The target of the error.

message

String

A human-readable representation of the error.

json

{
    "type": "object",
    "required": [
        "code",
        "message"
    ],
    "properties": {
        "code": {
            "type": "string",
            "description": "One of a server-defined set of error codes."
        },
        "target": {
            "type": "string",
            "nullable": true,
            "description": "The target of the error."
        },
        "message": {
            "type": "string",
            "description": "A human-readable representation of the error."
        }
    },
    "description": "Contains error information.",
    "additionalProperties": true
}

DetailedError

Contains error information and an array of more specific errors.

code

String

One of a server-defined set of error codes.

target

String, null

The target of the error.

details

Error[]

Optional array of more specific errors.

message

String

A human-readable representation of the error.

json

{
    "type": "object",
    "required": [
        "code",
        "message",
        "details"
    ],
    "properties": {
        "code": {
            "type": "string",
            "description": "One of a server-defined set of error codes."
        },
        "target": {
            "type": "string",
            "nullable": true,
            "description": "The target of the error."
        },
        "details": {
            "type": "array",
            "items": {
                "$ref": "#/components/schemas/Error"
            },
            "description": "Optional array of more specific errors."
        },
        "message": {
            "type": "string",
            "description": "A human-readable representation of the error."
        }
    },
    "description": "Contains error information and an array of more specific errors.",
    "additionalProperties": true
}

Error Response

Gives details for an error that occurred while handling the request. Note that clients MUST NOT assume that every failed request will produce an object of this schema, or that all of the properties in the response will be non-null, as the error may have prevented this response from being constructed.

error

Error

Error information.

json

{
    "type": "object",
    "title": "Error Response",
    "required": [
        "error"
    ],
    "properties": {
        "error": {
            "$ref": "#/components/schemas/Error",
            "description": "Error information."
        }
    },
    "description": "Gives details for an error that occurred while handling the request. Note that clients MUST NOT assume that every failed request will produce an object of this schema, or that all of the properties in the response will be non-null, as the error may have prevented this response from being constructed.",
    "additionalProperties": false
}

iTwin group IMS group

String

The IMS group id.

name

String

The IMS group name.

usersCount

Integer

Number of users that belong to the IMS group.

json

{
    "type": "object",
    "title": "iTwin group IMS group",
    "properties": {
        "id": {
            "type": "string",
            "description": "The IMS group id."
        },
        "name": {
            "type": "string",
            "description": "The IMS group name."
        },
        "usersCount": {
            "type": "integer",
            "description": "Number of users that belong to the IMS group."
        }
    },
    "additionalProperties": false
}

Detailed Error Response

error

DetailedError

Error Detailed information.

json

{
    "type": "object",
    "title": "Detailed Error Response",
    "required": [
        "error"
    ],
    "properties": {
        "error": {
            "$ref": "#/components/schemas/DetailedError",
            "description": "Error Detailed information."
        }
    },
    "description": "Gives details for an error that occurred while handling the request. Note that clients MUST NOT assume that every failed request will produce an object of this schema, or that all of the properties in the response will be non-null, as the error may have prevented this response from being constructed.",
    "additionalProperties": false
}

iTwin group IMS groups (response)

imsGroups

GroupImsGroup[]

List of IMS groups that were added to the group.

json

{
    "type": "object",
    "title": "iTwin group IMS groups (response)",
    "required": [
        "imsGroups"
    ],
    "properties": {
        "imsGroups": {
            "type": "array",
            "items": {
                "$ref": "#/components/schemas/GroupImsGroup"
            },
            "description": "List of IMS groups that were added to the group."
        }
    },
    "additionalProperties": false
}

Add iTwin group IMS groups (request)

imsGroups

String[]

List of IMS group names to add to the group. Max size of 50.

json

{
    "type": "object",
    "title": "Add iTwin group IMS groups (request)",
    "required": [
        "imsGroups"
    ],
    "properties": {
        "imsGroups": {
            "type": "array",
            "items": {
                "type": "string"
            },
            "description": "List of IMS group names to add to the group. Max size of 50."
        }
    },
    "additionalProperties": false
}

Was this page helpful?