Group mapping

Create a group → role mapping

Every member of the SCIM group receives these roles. The model is a UNION: mapped roles merge onto roles assigned manually through PATCH /member/{userId}, they do not replace them. Roles are recomputed for affected members immediately, and again on every SCIM membership change. Requires sso:manage. A browser session must also pass a fresh step-up reauthentication in the app (without it the call answers 428 step_up_required). An organization API token is not challenged.

post/group-mapping

Request

  • Base URL: https://api.elaichi.ai
  • URL: https://api.elaichi.ai/group-mapping
  • Auth: HTTP bearer

Headers

X-Organization-Idstring

Target organization (org_…). Required for cookie/session auth on org-scoped routes; optional for API tokens, which carry their organization, and rejected when it names a different one.

Request body

scim_group_idstring required

Group id from GET /scim-group.

role_idsstring[]

At most one role (role_…). Defaults to empty (no mapping).

Response

Created

idstring

Group mapping id (gmap_…).

scim_group_idstring

SCIM group from GET /scim-group.

role_idsstring[]

The single role (role_…) every member of that group receives.

created_atstring date-time
updated_atstring date-time

Changes

No recorded changes to this operation across all 1 revision of this API.