Skip to content
Identity and Access Management

26 November 2025

Production release: 26 November 2025
Staging release: 17 November 2025

17 November 2025

Section titled “17 November 2025”

Enhancements

Section titled “Enhancements”

  • Enhanced /users Endpoint with Username Filtering: The /users API now supports filtering by the username field, enabling more precise and efficient user searches. This enhancement improves search functionality and user management for administrators.

  • Enhanced Dealer Account Search API with CDH Information: The GET accounts/{dealerAccountId}/doingBusinessWith API endpoint now includes CDH information in its response. This enhancement provides additional CDH Id details, improving data retrieval and visibility when searching for accounts.

  • Extended Dealer Account User Listing API with Secondary Owner Role: The GET accounts/{dealerAccountId}/doingBusinessWith/{targetAccountId}/users API now includes users with the secondary_owner role, in addition to those with owner and admin roles. This enhancement improves visibility and management of all key account roles in the response.

  • Support for Sort and Filtering in Listing APIs Using OpenSearch: A hybrid implementation of list_resources in DAL using aoss along with DynamoDB has been introduced, allowing for sorting and filtering when sort_by is supplied in queryParams.

  • Address API Spec Enhancement: The address API specification now supports addressLine1, addressLine2, addressLine3, and addressLine4 as optional fields. This update provides greater flexibility for address data representation and improves compatibility with diverse address formats.

  • Update User Role in Group: Group owners and admins can now update a user’s role within a group using the updated endpoint. This feature improves user management by allowing authorized group members to modify roles for users in their group.

  • Nested Group Membership Cleanup on User Removal: When a user is removed from a group, the system now ensures that the user is also removed from all nested local groups within that group. This update improves consistency and prevents lingering user memberships in nested group hierarchies.

  • IAM Subject Role Assignment on Application: Applications can now assign its roles to subjects without requiring additional relation-based permission checks, simplifying the assignment process

  • Retrieve All Accounts for Organization: A new API endpoint allows clients to fetch all accounts associated with a specific organization. This feature provides a comprehensive overview of linked accounts, improving visibility and management of organizational relationships.

Bugfix

Section titled “Bugfix”

  • Max Query ID Enforcement in /groups API: Implemented a check to restrict the number of query IDs to a maximum of 20 when onlyID is set to true in the list groups of a user API call, preventing excessive queries.

  • CDH to IAM Roles Live Sync: Resolved an issue where the retry mechanism for the INSERT operation did not trigger when an account was not found during CDH to IAM roles live sync.

  • User Search Authorization Correction: Fixed improper authorization logic in user search, ensuring correct permission checks are applied.

  • Resend Invite Expiry Days Propagation Fix: The expiry days set in resend invite were not being propagated to the invitation service, defaulting to 7 days. This issue has been corrected.

  • IAM Events Chronological Order Correction: Events were not being received chronologically, with some going backward in time. This unexpected behavior has been addressed.

  • MTP Team Organization Creation Issue Resolved: Fixed an issue where the MTP team faced exceptions due to an unrecognized field “type” in the create organization response.

  • Organizations Search 500 Server Error Fixed: Resolved a 500 server error in the organizations/search endpoint caused by enhancements to the users/search endpoint.