Skip to main content

In API docs, it is stated that ReadAccounts permission is required for /scim/v2/Users API call. However, when I look into API Analytics or Graduating Requirements, this permission is not used. Is it safe to drop this permission for graduating the app?

You need to keep the permission. We've verified this issue and are working on a fix to track these API calls for graduation.


To graduate your app, please create a support ticket so we can get your app details to graduate.


For verification, when I call "GET /scim/v2/Users" without ReadAccounts permissions, I get a "403 Forbidden - CMN-401 Insufficient Permissions" error so you need the permission.


Reply