okta-management-openapi-agent/skills/iam/SKILL.md

name, description

name	description
iam-routes	Handle 40 OpenAPI operation(s) under /api/v1/iam for the iam route group.

iam API Routes

Handle 40 OpenAPI operation(s) under /api/v1/iam for the iam route group.

Use the generated operation tools to make real API calls. Do not invent API responses. If a tool reports missing setup, return the exact setup field name to the caller. For write, update, or delete operations, state the intended action before calling the tool.

Operations

list_users_with_role_assignments

• Operation ID: list_users_with_role_assignments
• Route: GET /api/v1/iam/assignees/users
• Mode: READ
• Summary: List all users with role assignments
• Parameters:
  • after in query
  • limit in query

list_governance_bundles

• Operation ID: list_governance_bundles
• Route: GET /api/v1/iam/governance/bundles
• Mode: READ
• Summary: List all governance bundles
• Parameters:
  • after in query
  • limit in query

create_governance_bundle

• Operation ID: create_governance_bundle
• Route: POST /api/v1/iam/governance/bundles
• Mode: WRITE
• Summary: Create a governance bundle
• Body: JSON request body accepted.

get_governance_bundle

• Operation ID: get_governance_bundle
• Route: GET /api/v1/iam/governance/bundles/{bundleId}
• Mode: READ
• Summary: Retrieve a governance bundle
• Parameters:
  • bundleId in path required

replace_governance_bundle

• Operation ID: replace_governance_bundle
• Route: PUT /api/v1/iam/governance/bundles/{bundleId}
• Mode: WRITE
• Summary: Replace a governance bundle
• Parameters:
  • bundleId in path required
• Body: JSON request body accepted.

delete_governance_bundle

• Operation ID: delete_governance_bundle
• Route: DELETE /api/v1/iam/governance/bundles/{bundleId}
• Mode: WRITE
• Summary: Delete a governance bundle
• Parameters:
  • bundleId in path required

list_bundle_entitlements

• Operation ID: list_bundle_entitlements
• Route: GET /api/v1/iam/governance/bundles/{bundleId}/entitlements
• Mode: READ
• Summary: List all entitlements for a governance bundle
• Parameters:
  • bundleId in path required
  • after in query
  • limit in query

list_bundle_entitlement_values

• Operation ID: list_bundle_entitlement_values
• Route: GET /api/v1/iam/governance/bundles/{bundleId}/entitlements/{entitlementId}/values
• Mode: READ
• Summary: List all values for a governance bundle entitlement
• Parameters:
  • bundleId in path required
  • entitlementId in path required
  • after in query
  • limit in query

get_opt_in_status

• Operation ID: get_opt_in_status
• Route: GET /api/v1/iam/governance/optIn
• Mode: READ
• Summary: Retrieve the Admin Console opt-in status

opt_in

• Operation ID: opt_in
• Route: POST /api/v1/iam/governance/optIn
• Mode: WRITE
• Summary: Opt in the Admin Console to entitlement management

opt_out

• Operation ID: opt_out
• Route: POST /api/v1/iam/governance/optOut
• Mode: WRITE
• Summary: Opt out the Admin Console from entitlement management

list_resource_sets

• Operation ID: list_resource_sets
• Route: GET /api/v1/iam/resource-sets
• Mode: READ
• Summary: List all resource sets
• Parameters:
  • after in query

create_resource_set

• Operation ID: create_resource_set
• Route: POST /api/v1/iam/resource-sets
• Mode: WRITE
• Summary: Create a resource set
• Body: JSON request body accepted.

get_resource_set

• Operation ID: get_resource_set
• Route: GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}
• Mode: READ
• Summary: Retrieve a resource set
• Parameters:
  • resourceSetIdOrLabel in path required

replace_resource_set

• Operation ID: replace_resource_set
• Route: PUT /api/v1/iam/resource-sets/{resourceSetIdOrLabel}
• Mode: WRITE
• Summary: Replace a resource set
• Parameters:
  • resourceSetIdOrLabel in path required
• Body: JSON request body accepted.

delete_resource_set

• Operation ID: delete_resource_set
• Route: DELETE /api/v1/iam/resource-sets/{resourceSetIdOrLabel}
• Mode: WRITE
• Summary: Delete a resource set
• Parameters:
  • resourceSetIdOrLabel in path required

list_bindings

• Operation ID: list_bindings
• Route: GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings
• Mode: READ
• Summary: List all role resource set bindings
• Parameters:
  • resourceSetIdOrLabel in path required
  • after in query

create_resource_set_binding

• Operation ID: create_resource_set_binding
• Route: POST /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings
• Mode: WRITE
• Summary: Create a role resource set binding
• Parameters:
  • resourceSetIdOrLabel in path required
• Body: JSON request body accepted.

get_binding

• Operation ID: get_binding
• Route: GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}
• Mode: READ
• Summary: Retrieve a role resource set binding
• Parameters:
  • resourceSetIdOrLabel in path required
  • roleIdOrLabel in path required

delete_binding

• Operation ID: delete_binding
• Route: DELETE /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}
• Mode: WRITE
• Summary: Delete a role resource set binding
• Parameters:
  • resourceSetIdOrLabel in path required
  • roleIdOrLabel in path required

list_members_of_binding

• Operation ID: list_members_of_binding
• Route: GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members
• Mode: READ
• Summary: List all role resource set binding members
• Parameters:
  • resourceSetIdOrLabel in path required
  • roleIdOrLabel in path required
  • after in query

add_members_to_binding

• Operation ID: add_members_to_binding
• Route: PATCH /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members
• Mode: WRITE
• Summary: Add more role resource set binding members
• Parameters:
  • resourceSetIdOrLabel in path required
  • roleIdOrLabel in path required
• Body: JSON request body accepted.

get_member_of_binding

• Operation ID: get_member_of_binding
• Route: GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members/{memberId}
• Mode: READ
• Summary: Retrieve a role resource set binding member
• Parameters:
  • resourceSetIdOrLabel in path required
  • roleIdOrLabel in path required
  • memberId in path required

unassign_member_from_binding

• Operation ID: unassign_member_from_binding
• Route: DELETE /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members/{memberId}
• Mode: WRITE
• Summary: Unassign a role resource set binding member
• Parameters:
  • resourceSetIdOrLabel in path required
  • roleIdOrLabel in path required
  • memberId in path required

list_resource_set_resources

• Operation ID: list_resource_set_resources
• Route: GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources
• Mode: READ
• Summary: List all resource set resources
• Parameters:
  • resourceSetIdOrLabel in path required
  • after in query
  • limit in query

add_resource_set_resource

• Operation ID: add_resource_set_resource
• Route: POST /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources
• Mode: WRITE
• Summary: Add a resource set resource with conditions
• Parameters:
  • resourceSetIdOrLabel in path required
• Body: JSON request body accepted.

add_resource_set_resources

• Operation ID: add_resource_set_resources
• Route: PATCH /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources
• Mode: WRITE
• Summary: Add more resources to a resource set
• Parameters:
  • resourceSetIdOrLabel in path required
• Body: JSON request body accepted.

get_resource_set_resource

• Operation ID: get_resource_set_resource
• Route: GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId}
• Mode: READ
• Summary: Retrieve a resource set resource
• Parameters:
  • resourceSetIdOrLabel in path required
  • resourceId in path required

replace_resource_set_resource

• Operation ID: replace_resource_set_resource
• Route: PUT /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId}
• Mode: WRITE
• Summary: Replace the resource set resource conditions
• Parameters:
  • resourceSetIdOrLabel in path required
  • resourceId in path required
• Body: JSON request body accepted.

delete_resource_set_resource

• Operation ID: delete_resource_set_resource
• Route: DELETE /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId}
• Mode: WRITE
• Summary: Delete a resource set resource
• Parameters:
  • resourceSetIdOrLabel in path required
  • resourceId in path required

list_roles

• Operation ID: list_roles
• Route: GET /api/v1/iam/roles
• Mode: READ
• Summary: List all custom roles
• Parameters:
  • after in query

create_role

• Operation ID: create_role
• Route: POST /api/v1/iam/roles
• Mode: WRITE
• Summary: Create a custom role
• Body: JSON request body accepted.

get_role

• Operation ID: get_role
• Route: GET /api/v1/iam/roles/{roleIdOrLabel}
• Mode: READ
• Summary: Retrieve a role
• Parameters:
  • roleIdOrLabel in path required

replace_role

• Operation ID: replace_role
• Route: PUT /api/v1/iam/roles/{roleIdOrLabel}
• Mode: WRITE
• Summary: Replace a custom role
• Parameters:
  • roleIdOrLabel in path required
• Body: JSON request body accepted.

delete_role

• Operation ID: delete_role
• Route: DELETE /api/v1/iam/roles/{roleIdOrLabel}
• Mode: WRITE
• Summary: Delete a custom role
• Parameters:
  • roleIdOrLabel in path required

list_role_permissions

• Operation ID: list_role_permissions
• Route: GET /api/v1/iam/roles/{roleIdOrLabel}/permissions
• Mode: READ
• Summary: List all custom role permissions
• Parameters:
  • roleIdOrLabel in path required

get_role_permission

• Operation ID: get_role_permission
• Route: GET /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType}
• Mode: READ
• Summary: Retrieve a custom role permission
• Parameters:
  • roleIdOrLabel in path required
  • permissionType in path required

create_role_permission

• Operation ID: create_role_permission
• Route: POST /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType}
• Mode: WRITE
• Summary: Create a custom role permission
• Parameters:
  • roleIdOrLabel in path required
  • permissionType in path required
• Body: JSON request body accepted.

replace_role_permission

• Operation ID: replace_role_permission
• Route: PUT /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType}
• Mode: WRITE
• Summary: Replace a custom role permission
• Parameters:
  • roleIdOrLabel in path required
  • permissionType in path required
• Body: JSON request body accepted.

delete_role_permission

• Operation ID: delete_role_permission
• Route: DELETE /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType}
• Mode: WRITE
• Summary: Delete a custom role permission
• Parameters:
  • roleIdOrLabel in path required
  • permissionType in path required