GET Security Claims Roles

The GET /Security/Claims/Roles operation returns the security roles assigned to the security claim identified by the selected parameters. Use the GET Security Claims ID operation to determine the parameterClosed A parameter or argument is a value that is passed into a function in an application. values. On success, the operation returns HTTP 200 OK with  the details of the roles assigned to the claim.

Tip:  The following permissions (see Security Roles and Claims) are required to use this feature:

/security/read/

Table 757: GET Security Claims Roles Input Parameters

Name In Description
Claim Type Body

Required. An integer indicating the type of claim. ClosedShow supported values.

Claim Value Body Required. A string containing the identifying information for the entity specified in the claim. For implementations authenticated using Active Directory, this will be in NetBIOS format (DOMAIN\account-name). For example, group KEYEXAMPLE\PKI Administrators or for a computer, machine account KEYEXAMPLE\MyServer$. For implementations authenticated using OAuth, this will be in the format defined by the Name Claim Type.
Provider Authentication Scheme Body Required. A string indicating the provider authentication scheme (for example, Active Directory, or Client Certificate Authentication CA, or unknown). The value in the ProviderAuthenticationScheme parameter from GET Security Claims or GET Security Claims ID.

Table 758: GET Security Claims Roles Response Data

Name Description
Id An integer containing the Keyfactor Command reference ID for the security role.
Name A string containing the short reference name of the security role.
Description A string containing the description of the security role.
Permission SetId

A string containing the Keyfactor Command reference GUID for the permission set assigned to the security role.