Skip to content
Identity and Access Management

06 April 2026

Production release: 06 April 2026
Staging release: 30 March 2026

06 April 2026

Section titled “06 April 2026”

Features

Section titled “Features”

  • Cross-Account User Role Designation in Groups: Users invited to a group from another account can now be explicitly marked as Guest members, ensuring proper access policies are applied.

  • Enhanced Account Ownership Transfer API with Re-Send Capability: The account ownership transfer API now supports re-sending ownership transfer invites to users.

  • Improved AOSS Sync Failure Handling: Automated handling of AOSS device sync failures caused by out-of-order events has been implemented.

  • Dealer Opt-In Expiry Handling Enhanced: Expiry records will no longer be added for dealer opt-in requests initiated by the customer themselves.

  • GraphQL Resolvers Added to Applications BLU: New GraphQL resolvers have been implemented for enhanced application management.

  • Change Data Capture (CDC) for Relationships Between Accounts, Organizations, and Addresses: Incremental changes to relationships between these entities are now captured for downstream analytics.

  • Static Export of Relationships Between Accounts, Organizations, and Addresses: A one-time export of structured relationship data has been provided for reporting and analytics.

  • List Users in a Group API Enhanced with Role Filtering: Role IDs returned by the API are now filtered based on the calling application context.

  • GET /users/{userId}/roles Endpoint Enhanced: The endpoint now includes the status field in the response if available.

  • Email Notifications for User Removal from Groups: Administrators and removed users now receive email notifications when a user is removed from a group.

  • Support for Email Template Variables in Group Invitations: The POST /groups/{groupId}/users endpoint now honors email template variables provided in the request body.

  • Incremental CDC for New User Creation Epoch: Newly created users are now captured incrementally with standardized creation timestamps for downstream reporting.

  • Static Export of Existing User Creation Epoch: A one-time dataset of existing users with standardized creation timestamps has been generated for analytics.

  • Latency Optimization in Organization and Account APIs: Performance improvements have been made to reduce latency in key APIs.

Bug Fixes

Section titled “Bug Fixes”

  • Partial Update of ‘lastName’ No Longer Triggers Unnecessary Validation: Updating the lastName field no longer causes validation errors for unrelated fields like country and timezone.

  • User Status and Picture Fields Preserved During Updates: The status and hasPicture fields of user entities are no longer removed during updates.

  • Certificate API Error Handling Improved: The API now returns proper error responses when attempting to add more than five certificates to a device.

  • User Invitation Webhook 500 Error Resolved: The issue causing 500 errors in the user invitation webhook has been fixed.

  • GraphQL ExternalSystems Resolver Error Fixed: Timeout issues causing inconsistent behavior in the Address externalSystem resolver have been resolved.

  • GraphQL Get User by ID Assertion Error Fixed: The query for fetching user details by ID no longer throws assertion errors.

  • Unexpected Error in SearchByName Query Resolved: The SearchAccountByName query now executes without errors related to broken code.

  • User Invitation 404 Error Fixed: Users present in TID but not in IAM no longer contribute to 404 errors during invitations.

  • OSR Edge Case Handling Improved: Deterministic updates of sourceSystem and references in IAM accounts have been implemented.

  • Latency Increase in Organization and Account APIs Addressed: Performance issues in specific APIs have been resolved to improve response times.

  • 500 Error in Certificate API for EC520 Model Fixed: The API now handles requests for adding more than five certificates to EC520 devices correctly.

  • Invitation Re-Send Workflow Validation Relaxed: Schema validation for country-state combinations has been relaxed to prevent errors during invitation re-sends.

  • GraphQL Search Accounts by Name Error Fixed: The query now executes without errors related to pagination links.

  • Role Filtering in Group User List API Fixed: Role IDs returned by the API are now filtered correctly based on the application context.

  • Error Reporting in Apollo Server Enhanced: Improved error reporting for BLU errors in Apollo Server has been implemented.

  • Application CRUD Authorization Fixed: Regression issues in application CRUD authorization for non-API cloud cases have been resolved.

  • Latency Increase in DELETE accounts/{accountId}/users/{userId} API Addressed: Performance improvements have been made to reduce latency in this API.

  • Latency Increase in GET organization/{organizationId} API Addressed: Response times for this API have been optimized.

  • GraphQL Resolvers for CDH Sync Implemented: CDH Sync mutations have been ported to Apollo Server for better integration.

  • GraphQL Error Reporting Enhanced: BLU errors in Apollo Server now provide more accurate and actionable error messages.

  • Unexpected Error in SearchByName Query Resolved: The query now executes without errors related to broken code.

  • GraphQL Get User by ID Assertion Error Fixed: The query for fetching user details by ID no longer throws assertion errors.

  • GraphQL ExternalSystems Resolver Error Fixed: Timeout issues causing inconsistent behavior in the Address externalSystem resolver have been resolved.

  • User Invitation Webhook 500 Error Resolved: The issue causing 500 errors in the user invitation webhook has been fixed.

  • Certificate API Error Handling Improved: The API now returns proper error responses when attempting to add more than five certificates to a device.

  • User Status and Picture Fields Preserved During Updates: The status and hasPicture fields of user entities are no longer removed during updates.

  • Partial Update of ‘lastName’ No Longer Triggers Unnecessary Validation: Updating the lastName field no longer causes validation errors for unrelated fields like country and timezone.