Skip to content
Okta Identity Governance
/
Management APIs
/
/
List all unowned resource...

List all unowned resources

Request

OAuth 2.0 scope:
  • okta.governance.resourceOwner.read
Admin roles:
  • SUPER_ADMIN
Permissions:
  • okta.apps.read

Lists all unowned resources for an app (the parent resource).

For this request, you must specify the filter query parameter with a parentResourceOrn filter expression. This method returns all the resources for an app, such as entitlements or entitlement bundles, that don't have owners assigned.

Query
filterstring, (scim-filter)(scim-filter)required

A filter expression that returns entries based on the following properties and supported operators:

  • parentResourceOrn: supports eq (required)
  • resource.type: supports eq
  • resource.profile.*: supports sw and co (both parentResourceOrn and resource.type filters are required for resource.profile.* filtering)

Note: Query parameter percent encoding is required. See Special characters.

Examples:
Filter by resource type
filter=parentResourceOrn eq "orn:okta:idp:00o11edPwGqbUrsDm0g4:apps:salesforce:0oafxqCAJWWGELFTYASJ" AND resource.type eq "entitlement-bundles"
Filter by the resource name for a specified resource type, starting with the provided prefix
filter=parentResourceOrn eq "orn:okta:idp:00o11edPwGqbUrsDm0g4:apps:salesforce:0oafxqCAJWWGELFTYASJ" AND resource.type eq "entitlement-bundles" AND re
Filter by the resource name for a specified resource type that contains the provided substring
filter=parentResourceOrn eq "orn:okta:idp:00o11edPwGqbUrsDm0g4:apps:salesforce:0oafxqCAJWWGELFTYASJ" AND resource.type eq "entitlement-bundles" AND re
Filter by resource type and parent ID
filter=parentResourceOrn eq "orn:okta:idp:00o11edPwGqbUrsDm0g4:apps:salesforce:0oafxqCAJWWGELFTYASJ" AND resource.type eq "entitlement-values AND reso
Filter by the resource name for a specified resource type, starting with the provided prefix and parent ID
filter=parentResourceOrn eq "orn:okta:idp:00o11edPwGqbUrsDm0g4:apps:salesforce:0oafxqCAJWWGELFTYASJ" AND resource.type eq "entitlement-values" AND res
Filter by the resource name for a specified resource type that contains the provided substring and parent ID
filter=parentResourceOrn eq "orn:okta:idp:00o11edPwGqbUrsDm0g4:apps:salesforce:0oafxqCAJWWGELFTYASJ" AND resource.type eq "entitlement-values" AND res
limitinteger, [ 1 .. 200 ]

The maximum number of records returned in a response

Default:20
afterstring

Specifies the pagination cursor for the next page of results. Treat this as an opaque value obtained through the standard link headers. See pagination.

Example:after=00u68w6vzKLultXS97g6
GET
/governance/api/v1/resource-owners/catalog/resources
curl -i -X GET \
  'https://okta-subdomain.pixtulate.com/governance/api/v1/resource-owners/catalog/resources?filter=parentResourceOrn%20eq%20%22orn%3Aokta%3Aidp%3A00o11edPwGqbUrsDm0g4%3Aapps%3Asalesforce%3A0oafxqCAJWWGELFTYASJ%22%20AND%20resource.type%20eq%20%22entitlement-bundles%22&limit=20&after=00u68w6vzKLultXS97g6'

Responses

Resource owners catalog resources success response

Headers
X-Rate-Limit-Limitinteger, >= 1required

The rate-limit ceiling for the current request

Example:60
X-Rate-Limit-Remaininginteger, >= 0required

The number of requests left for the current rate-limit window

Example:60
X-Rate-Limit-Resetinteger, >= 0required

The time when the rate limit resets, specified in UTC epoch time (in seconds)

Example:1609459200
Bodyapplication/json
parentResourceOrnstring, (okta-resource-orn)(resource-orn)required

The Okta resource in ORN format

See the ORN format for supported resources.

dataArray of objects(resource-owner-resource)

Resource owner details

Response
{
  "parentResourceOrn": "orn:okta:idp:00o11edPwGqbUrsDm0g4:apps:salesforce:0oafxqCAJWWGELFTYASJ",
  "data": [
    { … },
    { … }
  ],
  "_links": {
    "self": { … }
  }
}