id: non-employee-lifecycle-management
title: NonEmployeeLifecycleManagement
pagination_label: NonEmployeeLifecycleManagement
sidebar_label: NonEmployeeLifecycleManagement
sidebar_class_name: powershellsdk
keywords: ['powershell', 'PowerShell', 'sdk', 'NonEmployeeLifecycleManagement', 'NonEmployeeLifecycleManagement']
slug: /tools/sdk/powershell/v3/methods/non-employee-lifecycle-management
tags: ['SDK', 'Software Development Kit', 'NonEmployeeLifecycleManagement', 'NonEmployeeLifecycleManagement']
NonEmployeeLifecycleManagement
Use this API to implement non-employee lifecycle management functionality.
With this functionality in place, administrators can create non-employee records and configure them for use in their organizations.
This allows organizations to provide secure access to non-employees and control that access.
The 'non-employee' term refers to any consultant, contractor, intern, or other user in an organization who is not a full-time permanent employee.
Organizations can track non-employees' access and activity in Identity Security Cloud by creating and maintaining non-employee sources.
Organizations can have a maximum of 50 non-employee sources.
By using SailPoint's Non-Employee Lifecycle Management functionality, you agree to the following:
-
SailPoint is not responsible for storing sensitive data.
You may only add account attributes to non-employee identities that are necessary for business operations and are consistent with your contractual limitations on data that may be sent or stored in Identity Security Cloud.
-
You are responsible for regularly downloading your list of non-employee accounts for all the sources you create and storing this list of accounts in a managed location to maintain an authoritative system of record and backup data for these accounts.
To manage non-employees in Identity Security Cloud, administrators must create a non-employee source and add accounts to the source.
To create a non-employee source in Identity Security Cloud, administrators must use the Admin panel to go to Connections > Sources.
They must then specify 'Non-Employee' in the 'Source Type' field.
Refer to Creating a Non-Employee Source for more details about how to create non-employee sources.
To add accounts to a non-employee source in Identity Security Cloud, administrators can select the non-employee source and add the accounts.
They can also use the 'Manage Non-Employees' widget on their user dashboards to reach the list of sources and then select the non-employee source they want to add the accounts to.
Administrators can either add accounts individually or in bulk. Each non-employee source can have a maximum of 20,000 accounts.
To add accounts in bulk, they must select the 'Bulk Upload' option and upload a CSV file.
Refer to Adding Accounts for more details about how to add accounts to non-employee sources.
Once administrators have created the non-employee source and added accounts to it, they can create identity profiles to generate identities for the non-employee accounts and manage the non-employee identities the same way they would any other identities.
Refer to Managing Non-Employee Sources and Accounts for more information about non-employee lifecycle management.
All URIs are relative to https://sailpoint.api.identitynow.com/v3
approve-non-employee-request
Approves a non-employee approval request and notifies the next approver. The current user must be the requested approver.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Non-Employee approval item id (UUID) |
| Body |
NonEmployeeApprovalDecision |
NonEmployeeApprovalDecision |
True |
|
Return type
NonEmployeeApprovalItem
Responses
| Code |
Description |
Data Type |
| 200 |
Non-Employee approval item object. |
NonEmployeeApprovalItem |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json
- Accept: application/json
Example
[Back to top]
create-non-employee-record
This request will create a non-employee record.
Requires role context of idn:nesr:create
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Body |
NonEmployeeRequestBody |
NonEmployeeRequestBody |
True |
Non-Employee record creation request body. |
Return type
NonEmployeeRecord
Responses
| Code |
Description |
Data Type |
| 200 |
Created non-employee record. |
NonEmployeeRecord |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json
- Accept: application/json
Example
[Back to top]
create-non-employee-request
This request will create a non-employee request and notify the approver. Requires role context of idn:nesr:create or the user must own the source.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Body |
NonEmployeeRequestBody |
NonEmployeeRequestBody |
True |
Non-Employee creation request body |
Return type
NonEmployeeRequest
Responses
| Code |
Description |
Data Type |
| 200 |
Non-Employee request creation object |
NonEmployeeRequest |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json
- Accept: application/json
Example
[Back to top]
create-non-employee-source
This request will create a non-employee source. Requires role context of idn:nesr:create
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Body |
NonEmployeeSourceRequestBody |
NonEmployeeSourceRequestBody |
True |
Non-Employee source creation request body. |
Return type
NonEmployeeSourceWithCloudExternalId
Responses
| Code |
Description |
Data Type |
| 200 |
Created non-employee source. |
NonEmployeeSourceWithCloudExternalId |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json
- Accept: application/json
Example
[Back to top]
create-non-employee-source-schema-attributes
This API creates a new schema attribute for Non-Employee Source. The schema technical name must be unique in the source. Attempts to create a schema attribute with an existing name will result in a "400.1.409 Reference conflict" response. At most, 10 custom attributes can be created per schema. Attempts to create more than 10 will result in a "400.1.4 Limit violation" response.
Requires role context of idn:nesr:create
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
SourceId |
String |
True |
The Source id |
| Body |
NonEmployeeSchemaAttributeBody |
NonEmployeeSchemaAttributeBody |
True |
|
Return type
NonEmployeeSchemaAttribute
Responses
| Code |
Description |
Data Type |
| 200 |
Schema Attribute created. |
NonEmployeeSchemaAttribute |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json
- Accept: application/json
Example
[Back to top]
delete-non-employee-record
This request will delete a non-employee record.
Requires role context of idn:nesr:delete
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Non-Employee record id (UUID) |
Return type
(empty response body)
Responses
| Code |
Description |
Data Type |
| 204 |
No content - indicates the request was successful but there is no content to be returned in the response. |
|
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
delete-non-employee-records-in-bulk
This request will delete multiple non-employee records based on the non-employee ids provided. Requires role context of idn:nesr:delete
Parameters
Return type
(empty response body)
Responses
| Code |
Description |
Data Type |
| 204 |
No content - indicates the request was successful but there is no content to be returned in the response. |
|
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json
- Accept: application/json
Example
[Back to top]
delete-non-employee-request
This request will delete a non-employee request.
Requires role context of idn:nesr:delete
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Non-Employee request id in the UUID format |
Return type
(empty response body)
Responses
| Code |
Description |
Data Type |
| 204 |
No content - indicates the request was successful but there is no content to be returned in the response. |
|
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 404 |
Not Found - returned if the request URL refers to a resource or object that does not exist |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
delete-non-employee-schema-attribute
This end-point deletes a specific schema attribute for a non-employee source.
Requires role context of idn:nesr:delete
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
AttributeId |
String |
True |
The Schema Attribute Id (UUID) |
| Path |
SourceId |
String |
True |
The Source id |
Return type
(empty response body)
Responses
| Code |
Description |
Data Type |
| 204 |
No content - indicates the request was successful but there is no content to be returned in the response. |
|
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
delete-non-employee-source
This request will delete a non-employee source. Requires role context of idn:nesr:delete.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
SourceId |
String |
True |
Source Id |
Return type
(empty response body)
Responses
| Code |
Description |
Data Type |
| 204 |
No content - indicates the request was successful but there is no content to be returned in the response. |
|
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
delete-non-employee-source-schema-attributes
This end-point deletes all custom schema attributes for a non-employee source. Requires role context of idn:nesr:delete
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
SourceId |
String |
True |
The Source id |
Return type
(empty response body)
Responses
| Code |
Description |
Data Type |
| 204 |
No content - indicates the request was successful but there is no content to be returned in the response. |
|
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
export-non-employee-records
This requests a CSV download for all non-employees from a provided source. Requires role context of idn:nesr:read
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Source Id (UUID) |
Return type
(empty response body)
Responses
| Code |
Description |
Data Type |
| 200 |
Exported CSV |
|
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 404 |
Not Found - returned if the request URL refers to a resource or object that does not exist |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: text/csv, application/json
Example
[Back to top]
export-non-employee-source-schema-template
This requests a download for the Source Schema Template for a provided source. Requires role context of idn:nesr:read
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Source Id (UUID) |
Return type
(empty response body)
Responses
| Code |
Description |
Data Type |
| 200 |
Exported Source Schema Template |
|
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 404 |
Not Found - returned if the request URL refers to a resource or object that does not exist |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: text/csv, application/json
Example
[Back to top]
get-non-employee-approval
Gets a non-employee approval item detail. There are two contextual uses for this endpoint:
- The user has the role context of
idn:nesr:read, in which case they
can get any approval.
- The user owns the requested approval.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Non-Employee approval item id (UUID) |
| Query |
IncludeDetail |
Boolean |
(optional) |
The object nonEmployeeRequest will not be included detail when set to false. Default value is true |
Return type
NonEmployeeApprovalItemDetail
Responses
| Code |
Description |
Data Type |
| 200 |
Non-Employee approval item object. |
NonEmployeeApprovalItemDetail |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
get-non-employee-approval-summary
This request will retrieve a summary of non-employee approval requests. There are two contextual uses for the requested-for path parameter:
- The user has the role context of
idn:nesr:read, in which case he or
she may request a summary of all non-employee approval requests assigned to a particular approver by passing in that approver's id.
- The current user is an approver, in which case "me" should be provided
as the
requested-for value. This will provide the approver with a summary of the approval items assigned to him or her.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
RequestedFor |
String |
True |
The identity (UUID) of the approver for whom for whom the summary is being retrieved. Use ""me"" instead to indicate the current user. |
Return type
NonEmployeeApprovalSummary
Responses
| Code |
Description |
Data Type |
| 200 |
summary of non-employee approval requests |
NonEmployeeApprovalSummary |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
get-non-employee-bulk-upload-status
The nonEmployeeBulkUploadStatus API returns the status of the newest bulk upload job for the specified source.
Requires role context of idn:nesr:read
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Source ID (UUID) |
Return type
NonEmployeeBulkUploadStatus
Responses
| Code |
Description |
Data Type |
| 200 |
Status of the newest bulk-upload job, if any. |
NonEmployeeBulkUploadStatus |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
get-non-employee-record
This gets a non-employee record.
Requires role context of idn:nesr:read
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Non-Employee record id (UUID) |
Return type
NonEmployeeRecord
Responses
| Code |
Description |
Data Type |
| 200 |
Non-Employee record object |
NonEmployeeRecord |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
get-non-employee-request
This gets a non-employee request.
There are two contextual uses for this endpoint:
- The user has the role context of
idn:nesr:read, in this case the user
can get the non-employee request for any user.
- The user must be the owner of the non-employee request.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Non-Employee request id (UUID) |
Return type
NonEmployeeRequest
Responses
| Code |
Description |
Data Type |
| 200 |
Non-Employee request object. |
NonEmployeeRequest |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 404 |
Not Found - returned if the request URL refers to a resource or object that does not exist |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
get-non-employee-request-summary
This request will retrieve a summary of non-employee requests. There are two contextual uses for the requested-for path parameter:
- The user has the role context of
idn:nesr:read, in which case he or
she may request a summary of all non-employee approval requests assigned to a particular account manager by passing in that manager's id.
- The current user is an account manager, in which case "me" should be
provided as the
requested-for value. This will provide the user with a summary of the non-employee requests in the source(s) he or she manages.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
RequestedFor |
String |
True |
The identity (UUID) of the non-employee account manager for whom the summary is being retrieved. Use ""me"" instead to indicate the current user. |
Return type
NonEmployeeRequestSummary
Responses
| Code |
Description |
Data Type |
| 200 |
Non-Employee request summary object. |
NonEmployeeRequestSummary |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
get-non-employee-schema-attribute
This API gets a schema attribute by Id for the specified Non-Employee SourceId. Requires role context of idn:nesr:read or the user must be an account manager of the source.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
AttributeId |
String |
True |
The Schema Attribute Id (UUID) |
| Path |
SourceId |
String |
True |
The Source id |
Return type
NonEmployeeSchemaAttribute
Responses
| Code |
Description |
Data Type |
| 200 |
The Schema Attribute |
NonEmployeeSchemaAttribute |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
get-non-employee-source
This gets a non-employee source. There are two contextual uses for the requested-for path parameter:
- The user has the role context of
idn:nesr:read, in which case he or
she may request any source.
- The current user is an account manager, in which case the user can only
request sources that they own.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
SourceId |
String |
True |
Source Id |
Return type
NonEmployeeSource
Responses
| Code |
Description |
Data Type |
| 200 |
Non-Employee source object. |
NonEmployeeSource |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
get-non-employee-source-schema-attributes
This API gets the list of schema attributes for the specified Non-Employee SourceId. There are 8 mandatory attributes added to each new Non-Employee Source automatically. Additionaly, user can add up to 10 custom attributes. This interface returns all the mandatory attributes followed by any custom attributes. At most, a total of 18 attributes will be returned.
Requires role context of idn:nesr:read or the user must be an account manager of the source.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
SourceId |
String |
True |
The Source id |
Return type
NonEmployeeSchemaAttribute[]
Responses
| Code |
Description |
Data Type |
| 200 |
A list of Schema Attributes |
NonEmployeeSchemaAttribute[] |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 404 |
Not Found - returned if the request URL refers to a resource or object that does not exist |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
import-non-employee-records-in-bulk
This post will import, or update, Non-Employee records found in the CSV. Requires role context of idn:nesr:create
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Source Id (UUID) |
| Data |
System.IO.FileInfo |
True |
|
|
Return type
NonEmployeeBulkUploadJob
Responses
| Code |
Description |
Data Type |
| 202 |
The CSV was accepted to be bulk inserted now or at a later time. |
NonEmployeeBulkUploadJob |
| 400 |
Client Error - Returned if the request body is invalid. The response body will contain the list of specific errors with one on each line. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 404 |
Not Found - returned if the request URL refers to a resource or object that does not exist |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: multipart/form-data
- Accept: application/json
Example
[Back to top]
list-non-employee-approvals
This gets a list of non-employee approval requests.
There are two contextual uses for this endpoint:
- The user has the role context of
idn:nesr:read, in which case they
can list the approvals for any approver.
- The user owns the requested approval.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Query |
RequestedFor |
String |
(optional) |
The identity for whom the request was made. me indicates the current user. |
| Query |
Limit |
Int32 |
(optional) (default to 250) |
Max number of results to return. See V3 API Standard Collection Parameters for more information. |
| Query |
Offset |
Int32 |
(optional) (default to 0) |
Offset into the full result set. Usually specified with limit to paginate through the results. See V3 API Standard Collection Parameters for more information. |
| Query |
Count |
Boolean |
(optional) (default to $false) |
If true it will populate the X-Total-Count response header with the number of results that would be returned if limit and offset were ignored. Since requesting a total count can have a performance impact, it is recommended not to send count=true if that value will not be used. See V3 API Standard Collection Parameters for more information. |
| Query |
Filters |
String |
(optional) |
Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: approvalStatus: eq |
| Query |
Sorters |
String |
(optional) |
Sort results using the standard syntax described in V3 API Standard Collection Parameters Sorting is supported for the following fields: created, modified |
Return type
NonEmployeeApprovalItem[]
Responses
| Code |
Description |
Data Type |
| 200 |
List of approval items. |
NonEmployeeApprovalItem[] |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
list-non-employee-records
This gets a list of non-employee records. There are two contextual uses for this endpoint:
- The user has the role context of
idn:nesr:read, in which case they can get a list of all of the non-employees.
- The user is an account manager, in which case they can get a list of the non-employees that they manage.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Query |
Limit |
Int32 |
(optional) (default to 250) |
Max number of results to return. See V3 API Standard Collection Parameters for more information. |
| Query |
Offset |
Int32 |
(optional) (default to 0) |
Offset into the full result set. Usually specified with limit to paginate through the results. See V3 API Standard Collection Parameters for more information. |
| Query |
Count |
Boolean |
(optional) (default to $false) |
If true it will populate the X-Total-Count response header with the number of results that would be returned if limit and offset were ignored. Since requesting a total count can have a performance impact, it is recommended not to send count=true if that value will not be used. See V3 API Standard Collection Parameters for more information. |
| Query |
Sorters |
String |
(optional) |
Sort results using the standard syntax described in V3 API Standard Collection Parameters Sorting is supported for the following fields: id, accountName, sourceId, manager, firstName, lastName, email, phone, startDate, endDate, created, modified |
| Query |
Filters |
String |
(optional) |
Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: sourceId: eq |
Return type
NonEmployeeRecord[]
Responses
| Code |
Description |
Data Type |
| 200 |
Non-Employee record objects |
NonEmployeeRecord[] |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
list-non-employee-requests
This gets a list of non-employee requests. There are two contextual uses for the requested-for path parameter:
- The user has the role context of
idn:nesr:read, in which case he or
she may request a list non-employee requests assigned to a particular account manager by passing in that manager's id.
- The current user is an account manager, in which case "me" should be
provided as the
requested-for value. This will provide the user with a list of the non-employee requests in the source(s) he or she manages.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Query |
RequestedFor |
String |
True |
The identity for whom the request was made. me indicates the current user. |
| Query |
Limit |
Int32 |
(optional) (default to 250) |
Max number of results to return. See V3 API Standard Collection Parameters for more information. |
| Query |
Offset |
Int32 |
(optional) (default to 0) |
Offset into the full result set. Usually specified with limit to paginate through the results. See V3 API Standard Collection Parameters for more information. |
| Query |
Count |
Boolean |
(optional) (default to $false) |
If true it will populate the X-Total-Count response header with the number of results that would be returned if limit and offset were ignored. Since requesting a total count can have a performance impact, it is recommended not to send count=true if that value will not be used. See V3 API Standard Collection Parameters for more information. |
| Query |
Sorters |
String |
(optional) |
Sort results using the standard syntax described in V3 API Standard Collection Parameters Sorting is supported for the following fields: created, approvalStatus, firstName, lastName, email, phone, accountName, startDate, endDate |
| Query |
Filters |
String |
(optional) |
Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: sourceId: eq |
Return type
NonEmployeeRequest[]
Responses
| Code |
Description |
Data Type |
| 200 |
List of non-employee request objects. |
NonEmployeeRequest[] |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
list-non-employee-sources
This gets a list of non-employee sources. There are two contextual uses for the requested-for path parameter:
- The user has the role context of
idn:nesr:read, in which case he or
she may request a list sources assigned to a particular account manager by passing in that manager's id.
- The current user is an account manager, in which case "me" should be
provided as the
requested-for value. This will provide the user with a list of the sources that he or she owns.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Query |
RequestedFor |
String |
True |
The identity for whom the request was made. me indicates the current user. |
| Query |
Limit |
Int32 |
(optional) (default to 250) |
Max number of results to return. See V3 API Standard Collection Parameters for more information. |
| Query |
Offset |
Int32 |
(optional) (default to 0) |
Offset into the full result set. Usually specified with limit to paginate through the results. See V3 API Standard Collection Parameters for more information. |
| Query |
Count |
Boolean |
(optional) (default to $false) |
If true it will populate the X-Total-Count response header with the number of results that would be returned if limit and offset were ignored. Since requesting a total count can have a performance impact, it is recommended not to send count=true if that value will not be used. See V3 API Standard Collection Parameters for more information. |
| Query |
NonEmployeeCount |
Boolean |
(optional) |
The flag to determine whether return a non-employee count associate with source. |
| Query |
Sorters |
String |
(optional) |
Sort results using the standard syntax described in V3 API Standard Collection Parameters Sorting is supported for the following fields: name, created, sourceId |
Return type
NonEmployeeSourceWithNECount[]
Responses
| Code |
Description |
Data Type |
| 200 |
List of non-employee sources objects. |
NonEmployeeSourceWithNECount[] |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: Not defined
- Accept: application/json
Example
[Back to top]
patch-non-employee-record
This request will patch a non-employee record. There are two contextual uses for this endpoint:
- The user has the role context of
idn:nesr:update, in which case they
update all available fields.
- The user is owner of the source, in this case they can only update the
end date.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Non-employee record id (UUID) |
| Body |
JsonPatchOperation |
[]JsonPatchOperation |
True |
A list of non-employee update operations according to the JSON Patch standard. Attributes are restricted by user type. Owner of source can update end date. Organization admins can update all available fields. |
Return type
NonEmployeeRecord
Responses
| Code |
Description |
Data Type |
| 200 |
A patched non-employee record. |
NonEmployeeRecord |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 404 |
Not Found - returned if the request URL refers to a resource or object that does not exist |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json-patch+json
- Accept: application/json
Example
[Back to top]
patch-non-employee-schema-attribute
This end-point patches a specific schema attribute for a non-employee SourceId.
Requires role context of idn:nesr:update
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
AttributeId |
String |
True |
The Schema Attribute Id (UUID) |
| Path |
SourceId |
String |
True |
The Source id |
| Body |
JsonPatchOperation |
[]JsonPatchOperation |
True |
A list of schema attribute update operations according to the JSON Patch standard. The following properties are allowed for update ':' 'label', 'helpText', 'placeholder', 'required'. |
Return type
NonEmployeeSchemaAttribute
Responses
| Code |
Description |
Data Type |
| 200 |
The Schema Attribute was successfully patched. |
NonEmployeeSchemaAttribute |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 404 |
Not Found - returned if the request URL refers to a resource or object that does not exist |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json-patch+json
- Accept: application/json
Example
[Back to top]
patch-non-employee-source
patch a non-employee source. (partial update)
Patchable field: name, description, approvers, accountManagers Requires role context of idn:nesr:update.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
SourceId |
String |
True |
Source Id |
| Body |
JsonPatchOperation |
[]JsonPatchOperation |
True |
A list of non-employee source update operations according to the JSON Patch standard. |
Return type
NonEmployeeSource
Responses
| Code |
Description |
Data Type |
| 200 |
A patched non-employee source object. |
NonEmployeeSource |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json-patch+json
- Accept: application/json
Example
[Back to top]
reject-non-employee-request
This endpoint will reject an approval item request and notify user. The current user must be the requested approver.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Non-Employee approval item id (UUID) |
| Body |
NonEmployeeRejectApprovalDecision |
NonEmployeeRejectApprovalDecision |
True |
|
Return type
NonEmployeeApprovalItem
Responses
| Code |
Description |
Data Type |
| 200 |
Non-Employee approval item object. |
NonEmployeeApprovalItem |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json
- Accept: application/json
Example
[Back to top]
update-non-employee-record
This request will update a non-employee record. There are two contextual uses for this endpoint:
- The user has the role context of
idn:nesr:update, in which case they
update all available fields.
- The user is owner of the source, in this case they can only update the
end date.
Parameters
| Param Type |
Name |
Data Type |
Required |
Description |
| Path |
Id |
String |
True |
Non-employee record id (UUID) |
| Body |
NonEmployeeRequestBody |
NonEmployeeRequestBody |
True |
Non-employee record creation request body. Attributes are restricted by user type. Owner of source can update end date. Organization admins can update all available fields. |
Return type
NonEmployeeRecord
Responses
| Code |
Description |
Data Type |
| 200 |
An updated non-employee record. |
NonEmployeeRecord |
| 400 |
Client Error - Returned if the request body is invalid. |
ErrorResponseDto |
| 401 |
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired. |
ListAccessProfiles401Response |
| 403 |
Forbidden - Returned if the user you are running as, doesn't have access to this end-point. |
ErrorResponseDto |
| 404 |
Not Found - returned if the request URL refers to a resource or object that does not exist |
ErrorResponseDto |
| 429 |
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again. |
ListAccessProfiles429Response |
| 500 |
Internal Server Error - Returned if there is an unexpected error. |
ErrorResponseDto |
- Content-Type: application/json
- Accept: application/json
Example
[Back to top]