OAuth rules endpoints

Use these endpoints to view, create, update, and delete grant rules for applications. All APIs require the Admin scope.

API endpoint

Summary

Required role (Admin can call all endpoints)

POST OAuth/CreateRule

Creates a new grant rule for an application

Application Owner

POST OAuth/GetRules

Looks up rules for users, applications, or a combination of both

Application Owner, Grant Admin, or Auditor

POST OAuth/EnumerateRules

Enumerates all rules, optionally for a particular application

Application Owner, Grant Admin, or Auditor

POST OAuth/UpdateRule

Updates an existing rule

Application Owner

POST OAuth/DeleteRule

Deletes a rule for a specific user from a given application

Application Owner

POST OAuth/DeleteRules

Deletes all rules for a given user or application

Application Owner