Skip to content
Identity and Access Management

23 March 2026

Production release: 23 March 2026
Staging release: 16 March 2026

23 March 2026

Section titled “23 March 2026”

Features

Section titled “Features”

  • Enhanced API for Listing Users Without PII and Filtering by RoleID: The API now supports listing users associated with an account without exposing PII and filtering results by roleId.

  • Accounts Authorized to Applications API: Introduced an API to list accounts authorized and subscribed to applications owned by the user.

  • Application Authorization API for Customers: Customers can now authorize applications on their accounts using a dedicated API.

  • Application Deauthorization API for Customers: Customers can deauthorize applications on their accounts with an optional reason parameter.

  • Application Subscription API for Marketplace: Customers can subscribe to applications available in the marketplace using a new API.

  • Redirect URL Support for Group Invitations: Added support for redirect URLs in the POST /groups/{groupId}/users endpoint, allowing invited users to land on a specified URL after accepting the invitation.

  • Resend and Cancel Group Member Invitations: Administrators can now resend or cancel group member invitations based on new functionality.

  • Group Data Indexing in OpenSearch: Group data is now synced to OpenSearch for improved search capabilities.

  • Device Application Sync During Transfers: Developed a Lambda function to handle device application sync during account transfers, ensuring data consistency.

  • Sorting Capability for Customer Account Devices: Dealers can now obtain a sorted list of devices from customer accounts, sorted by device model and account name.

  • Device Mediated Application Management APIs: Devices can now manage applications with capabilities like updating properties, unlocking applications, and validating subscription scopes.

  • List and Get APIs for Device Mediated Applications: Devices can list and retrieve applications associated with them, including subscription scopes.

Bug Fixes

Section titled “Bug Fixes”

  • Sonar Qube Issues in Roles BLU: Critical issues in Roles BLU endpoints have been resolved.

  • Pagination Issue in List Calls with Maximum PageSize: Fixed an issue where the ‘next’ link was not generated for the second call when pageSize was set to 50.

  • Roles Permissions Resolver Not Implemented Error: Resolved the issue where the roles resolver for Apollo Server was not implemented.

  • Restrict Passing DataRegion Field in Invitation API: Restricted the ability to pass the dataRegion field in the POST /invitation API call to avoid anomalies.

  • Restrict Updating DataRegion for Users: Users can no longer update their data region using the PUT /users/{uuid} endpoint.

  • Resource Not Found Error in Get Users Endpoint: Fixed the issue where the GET /users/{userId} endpoint returned a resource not found error.

  • Invalid JSON Issue in Roles BLU Endpoints: Resolved invalid JSON issues in multiple Roles BLU endpoints.

  • Managed User Account Relations in AOSS Index: Fixed the issue where managed user account relations were incorrectly pushed to the AOSS users index.

  • Next Cursor Display Issue in Pagination: Fixed the issue where the next cursor was displayed even when the list of items matched the default pageSize.

  • Empty List for Organizations API: Fixed the issue where the API returned an empty list for organizations associated with a given account ID.

  • Data Integrity During Event Replay: Updated handlers to ensure idempotency and data integrity during replay of events in IAM async invocations.

  • 500 Error in Group Users API: Fixed a 500 error in the PUT /groups/{groupId}/users/{userId} API caused by incorrect dictionary references.