OAuth grants endpoints

Use these endpoints to view and revoke grants. To get new grants, follow the instructions in Auth REST for token management. All APIs require the Admin scope.

API endpoint

Summary

Required role (Admin can call all endpoints)

POST OAuth/EnumerateGrants

Enumerates all grants for an application, user, or combination of both

Grant Admin, Application Owner, Auditor, or User

POST OAuth/GetGrants

Gets all grants for a user

Grant Admin, Application Owner, Auditor, or User

POST OAuth/RevokeGrants

Revoke all grants for a user

Grant Admin or User

POST OAuth/GrantCount

Returns the number of grants issued for a particular application

Grant Admin, Auditor, or Application Owner

POST OAuth/GetScopes

Returns all known scopes

Any

POST OAuth/TotalCount

Returns the number of known applications, rules, and grants

Any