Skip to content
Identity and Access Management

05 June 2025

Production release: 05 June 2025
Staging release: 26 May 2025

05 June 2025

Section titled “05 June 2025”

Features

Section titled “Features”

  • Initial API Development for Public Organization Search: Developed the initial version of the API for public organization search.

  • Improved IAM Health Check Endpoint: The IAM health check endpoint has been upgraded to validate additional infrastructure components, ensuring robust system health monitoring.

  • Support for Group Roles in Permission Checks: Permission check endpoints now consider group roles when assessing access to accounts and applications, enhancing security and access control.

  • Profile Picture Resizing for Optimized Application Performance: Profile pictures are now resized into multiple dimensions to optimize performance across applications requiring different image sizes.

  • Logging Enhancements Applied Across Business Logic Units: Logging mechanisms have been enhanced across various business logic units to ensure better data handling and security.

  • Enhanced Group Endpoint Responses to Display Role IDs: The response for GET requests on /groups/{groupId} endpoints now includes role IDs, improving visibility and management of user roles.

  • API Endpoint for Establishing a Relationship Between a Dealer Account and an Organization - isPartnerFor.

  • POST applications/applicationId/roles/roleId?on=account: This endpoint allows you to assign a specific role to an application at the account level, ensuring that the application has the necessary permissions to operate within the specified account.

  • POST applications/applicationId/roles/roleId?on=groups: This endpoint enables the assignment of roles to applications at the group level, facilitating more granular control over application permissions within different groups.

  • Support for Unassigning Users from Applications, Accounts, or Groups with the Following Endpoints:

    • DELETE users/userId/roles/roleId?on=<accountTRN>
    • DELETE users/userId/roles/roleId?on=<applicationTRN>
    • DELETE users/userId/roles/roleId?on=<groupsTRN>

  • Remove Account-Level Relation While Removing the User from the Group: A user in a cross-account is added as a guest in an account. When that user is removed from the group, the respective relation with the account should be removed.

  • API Interface Exposed for Searching Similar Accounts: A new HTTP interface has been exposed for business systems to search for similar accounts, facilitating better integration and data retrieval.

  • Passthrough Gateway MTLS Certificate Rotation: MTLS certificates in the IAM passthrough gateway have been rotated to enhance security measures.

  • Mandatory Field Validation for Device Endpoint: Enhanced validation has been added for the mandatory fields model, manufacturer, and serial number in POST requests to the /devices endpoint. This ensures data integrity by verifying that all required fields are provided during device creation.

  • Partial Update of Device Attributes: The update process has been improved to ensure that only the specified fields, such as manufacturer or model, are updated. All other fields will retain their existing values unless they are explicitly modified. This enhancement prevents unintended data loss and maintains data integrity during updates.

  • Associate Multiple BYO Certificates for Device: This fix improves device management flexibility and functionality by enabling the association of multiple Bring Your Own (BYO) certificates with a single device. This enhancement boosts user experience and operational efficiency.

Bug Fixes

Section titled “Bug Fixes”

  • Account Description Length Error Handling Improved: Error messages now correctly display the maximum allowed length for account descriptions when exceeded.

  • Role Assignment Issue Fixed for Existing User-Account Relationships: Fixed an issue where roles could not be added to a user-account relationship despite existing connections.

  • Duplicate Role IDs Handling in Group Assignments: The system now checks for and handles duplicate role IDs during group assignments to prevent data inconsistencies.

  • Invalid Picture Size Error Handling for User Endpoint: Improved error handling for invalid picture size parameters in the GET users endpoint, ensuring appropriate error responses.

  • Error Handling Enhanced for User Picture Updates: Improved error handling for the PUT users/{userId}/picture endpoint to provide clearer error messages when no input is provided.

  • User Invitation Success Webhook Error Resolved: Fixed an issue where the user invitation success webhook was failing due to incorrect attribute handling.

  • Mandatory ID Field Validation for Group Endpoint: Added validation for the mandatory ‘id’ field in POST requests to /groups/{groupId} endpoints, ensuring data integrity.

  • Unassign Role Functionality Corrected Across Contexts: Corrected the functionality to unassign roles from users in various contexts, such as applications, accounts, and groups, ensuring proper access control.

  • API Documentation Updated for User Invitations: Updated API documentation to include details about user invitations when adding users to accounts, ensuring clarity and completeness.

  • Account-Level Relation Removal on User Group Exit: Ensured that when a user is removed from a group, any related account-level relations are also removed, maintaining data consistency and integrity.