In API docs, it is stated that ReadAccounts permission is required for /scim/v2/Users API call. However, when I look into API Analytics or Graduating Requirements, this permission is not used. Is it safe to drop this permission for graduating the app?
What permissions are needed for /scim/v2/Users/ API call?
A
You need to keep the permission. We've verified this issue and are working on a fix to track these API calls for graduation.
To graduate your app, please create a support ticket so we can get your app details to graduate.
For verification, when I call "GET /scim/v2/Users" without ReadAccounts permissions, I get a "403 Forbidden - CMN-401 Insufficient Permissions" error so you need the permission.
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.