Skip to main content

This endpoint simulates provisioning a set of access items, and then checks against a set of policies to determine if granting the access items would cause creation of new policy violations.

POST 
/scim/v2/CheckedPolicyViolations

>This submits a set of access items to request and a set of policies to check after the access provisioning is simulated in order to determine if policy violations would be created by provisioning the access items. It receives a payload that includes:

>An identity: Used as the recipient for the access items on the simulation.

>A provisioning plan: To specify the changes to be simulatedly provisioned in the provided identity

>A list of policies: to check after the simulation of provisioning plan was applied to the identity in order to determine if the access granted in the simulation causes new policy violations.

>Optionally you can pass a list of attributes, as query params, to be included or excluded from the response, this setting is applicable only to top level attributes as defined in the schema urn:ietf:params:scim:schemas:sailpoint:1.0:CheckedPolicyViolation.

>Valid values: - policies - identity - plan - violations - leftBundles - rightBundles

Request​

Responses​

Returns a list of violations based on simulated requested access