Skip to content
Identity and Access Management

16 April 2026

Production release: 16 April 2026
Staging release: 13 April 2026

16 April 2026

Section titled “16 April 2026”

Features

Section titled “Features”

  • Account Mapping for Applications Based on Group Association: Applications created in the Developer Console are now mapped to accounts based on Group/Team membership, ensuring proper account assignment during creation.

  • Dealer Sub Type Support for DEALER Accounts: Accounts of type DEALER now support a new dealerSubType attribute, allowing categorization into predefined subtypes for better account management.

  • Enhanced Customer Details API for Dealer Users: Dealer account users can now retrieve detailed customer information, including name, reference, and metadata, for better account insights.

  • Retrieve All Customer Users Upon Dealer Opt-In: Dealer account users can now fetch all users of a customer account, including end users, when the customer accepts opt-in requests. Pagination is supported for seamless data retrieval.

  • Scheduled Device Transfer API Enhancement: The Device Transfer API now supports scheduled transfers with a startDate parameter, allowing delayed device license assignments. Dealers can also cancel transfers before the scheduled date.

  • Cross-Region User Listing with mTLS Infra: The Base region now supports cross-region user listing using mTLS bulk-fetch endpoints, aggregating responses from all regions into a single result.

  • Lambda RequestID Added to Device BLU Logs: Device BLU logs now include the Lambda’s requestID for better tracking and debugging of execution processes.

  • Support for Account Owner Transfer Using Application Access Token: Account ownership can now be transferred using the AXP Support API authenticated with an application token, streamlining the process for support requests.

  • Group Resolver for Applications: Group resolvers have been created to handle groups on applications using the list_groups_of_applications from Group Service.

  • Email Support for Dealer Opt-In Flow: Transactional emails are now triggered for various dealer opt-in scenarios, including requests, approvals, declines, and expirations.

  • Migration of SSM Parameters to Config Management: SSM parameters used in roles, groups, users, and GraphQL services have been migrated to config management for better configuration handling.

  • Execution of IAM UAT Migration with Anonymized PII Data: SRE support provided for UAT stack validation, including data copy script execution and deployment changes.

Bug Fixes

Section titled “Bug Fixes”

  • Correct Error Thrown for Invalid Account ID in GraphQL: The GraphQL API now throws the correct error for invalid account IDs, improving error handling.

  • Cancel Invitation for Account Ownership Transfer Fixed: Users can now cancel invitations for ownership transfer requests initiated to existing account users without encountering a 400 Bad Request error.

  • Admin User Invite Restrictions Implemented: Approve/Reject operations are now restricted for admin user invites, ensuring proper API functionality.

  • Device Data Sync to OpenSearch Fixed: Device and account relationships are now correctly synced with OpenSearch, resolving previous data inconsistencies.

  • Physical Device Relation Sync Retry Mechanism: Failed device syncs due to missing “PhysicalDevice” details are now retried and pushed to a retry queue or DLQ to prevent permanent data loss.

  • Data Region Update in Central Table During Live Sync: Data region updates now synchronize correctly between regional and central tables, ensuring consistency.

  • Error Codes Generator Pipeline Fixed: The error codes generator pipeline has been updated to resolve module import errors, ensuring successful deployments.

  • Device Sync Failure Due to Incorrect Event Order Resolved: Synchronization issues caused by incorrect event order between “Device” and “PhysicalDevice” have been addressed, ensuring smooth data sync.

  • GraphQL First Parameter Issue Fixed: Resolvers now respect the first parameter specified in GraphQL queries, ensuring accurate data retrieval.

  • SonarQube Issues in Devices BLU Addressed: Critical issues identified in SonarQube for Devices BLU have been resolved.

  • Regional Data Cleanup in Production: Regional data cleanup has been successfully executed in production as part of Phase 2.

  • Performance Improvement in DELETE Group Users API: The DELETE /groups/{groupId}/users/{userId} API has been optimized for better performance.

  • Fix for JoinedAt Field in User and Group Fetch APIs: The joinedAt field is now included in user and group fetch APIs for sorting purposes.

  • Device Data Integrity Verified in AOSS: Root causes of devices having partial information in AOSS have been identified and addressed.

  • Live Sync Enhancements for Data Region Updates: Updates to the data region field now synchronize correctly across regional and central tables.

  • IAM User Migration Validation Script QA Completed: QA for the user migration validation script has been successfully carried out.

  • Cross-Account Group Members Migrated to Home/Guest Designation: Existing cross-account group membership records have been updated to include the new HOME/GUEST designation field.

  • Prod Migration of User Data Fix: User data migration in production now includes the addition of data region and email verified fields.