RBAC API v1 The role-based access control (RBAC) service enables you to manage users, directory groups, and roles. EndpointsThe role-based access control (RBAC) service enables you to manage users, directory groups, and roles. Forming RBAC API requestsToken-based authentication is required to access the RBAC API. You can authenticate requests by using either user authentication tokens or whitelisted certificates. Users endpointsRBAC enables you to manage local users as well as those who are created remotely, on a directory service. With the users endpoints, you can get lists of users and create new local users. User group endpointsGroups are used to assign roles to a group of users, which is vastly more efficient than managing roles for each user individually. The groups endpoints enable you to get lists of groups, and to add a new directory group. User roles endpointsBy assigning roles to users, you can manage them in sets that are granted access permissions to various PE objects. This makes tracking user access more organized and easier to manage. The roles endpoints enable you to get lists of roles and create new roles. Permissions endpointsYou assign permissions to user roles to manage user access to objects. The permissions endpoints enable you to get information about available objects and the permissions that can be constructed for those objects. Token endpointsA user's access to PE services can be controlled using authentication tokens. Users can generate their own authentication tokens using the token endpoint. Directory service endpoints Use the ds (directory service) API endpoints to get information about the directory service, test your directory service connection, and replace directory service connection settings. Password endpointsWhen local users forget passwords or lock themselves out of PE by attempting to log in with incorrect credentials too many times, you must generate a password reset token for them. The password endpoints enable you to generate password reset tokens for a specific local user or with a token that contains a temporary password in the body. RBAC service errorsYou’re likely to encounter some errors when using the RBAC API. You’ll want to familiarize yourself with the error response descriptions and the general error responses. Configuration optionsThere are various configuration options for the RBAC service. Each section can exist in its own file or in separate files. Related informationAPI index