03 November 2025

Production release: 03 November 2025
Staging release: 27 October 2025

IAM Events Now Distinguish Invitation Expiry: IAM events now differentiate between invitation acceptance failures and expirations, enabling more accurate and efficient workflow handling.
User Creation Permission Refactoring: The permission structure for user creation operations has been refactored to enhance performance and maintain consistency.
Internal PATCH API for Bootstrap Migration: Introduced a new internal PATCH API to facilitate seamless migration from bootstrap v1 to IAM bootstrap.
Enhanced Account API for Application Role Assignment: The IAM API now enables account administrators to assign subject delegation roles and additional scopes to applications.
Error Codes Added to Documentation: Added error codes USR_300 and USR_600, related to invitation and identity service errors, to improve documentation clarity and troubleshooting efficiency.

Shared Roles Not Working for Device Role Addition: Identified a bug where shared roles were not being correctly added to devices.
Devices Not Synced from Profiles to IAM: Detected an issue where devices created in Profiles were not being fetched in IAM.
Expiry Days Not Transmitted to Invitation Service: Identified a bug where expiry days set via the POST /invitation API were not being transmitted to the Invitation Service.
Listing Accounts in GQL Returns Empty Array: Found an issue where listing accounts through GraphQL returned an empty array.
DAL Private Variables Filter Not Working: Identified an issue with the DAL private variables filter not applying correctly.
Unhandled Exception in Profiles-IAM Sync MemberOf Lambda: Addressed unhandled exceptions occurring in the Profiles-IAM sync MemberOf Lambda.
Invalid Values Accepted for newUserTemplateId and existingUserTemplateId: Detected a bug where these fields accepted null or invalid values in the invitation resend workflow.