GET Certificates Identity Audit ID

The GET /Certificates/IdentityAudit/{id} method is used to return a list of all the users or groups defined in the system that have permission to the certificate ID entered. This method returns HTTP 200 OK on a success with certificate identity audit details in the message body.

Table 195: GET Certificates {id} History Input Parameters

Name In Description
id Path Required. An integer containing the Keyfactor Command reference ID of the certificate.
CollectionId Query

An integer specifying an optional certificate collection identifier to validate that the user executing the request has sufficient permissions to do so. If a certificate collection ID is not supplied, the user must have global permissions to complete the action. Supplying a certificate collection ID allows for a check of the user's certificate collection-level permissions to determine whether the user has sufficient permissions at a collection level to complete the action. See Certificate Permissions in the Keyfactor Command Reference Guide for more information.

Table 196: GET Certificates {id} History Response Data

Name Description
Id An integer containing the Keyfactor ID of the user/group.
AccountName A string containing the name of the Keyfactor user/group.
IdentityType A string that specifies if the account is a user or a group.
SID A string containing the SID of the user/group
Permissions

An array of the permissions for the certificate.

Parameter Description
Name A string containing the name of the permission (for example: Read, EditMetadata, Import, Recover, etc...)
GrantedBy A string containing the list of roles or collections that grant the given permission to the user/group.