PimEligibilityAdmin

PIM eligibility administration (SSO-1321) — define who may request elevation (create/list/read/revoke eligible assignments); gated on tenant:pim.admin.

Base URL: https://api.stg.thoryn.org

Operations

Method	Path	Summary	Scopes
GET	/api/v1/pim/eligible-assignments	Pim Eligibility Admin List	tenant:pim.admin
POST	/api/v1/pim/eligible-assignments	Pim Eligibility Admin Create	tenant:pim.admin
GET	/api/v1/pim/eligible-assignments/{id}	Pim Eligibility Admin Get	tenant:pim.admin
DELETE	/api/v1/pim/eligible-assignments/{id}	Pim Eligibility Admin Delete	tenant:pim.admin

Operation details

GET /api/v1/pim/eligible-assignments

Pim Eligibility Admin List

• Operation ID: pimEligibilityAdminList
• Required scopes: tenant:pim.admin

Parameters:

Name	In	Required	Type	Description
limit	query	no	integer
cursor	query	no	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

POST /api/v1/pim/eligible-assignments

Pim Eligibility Admin Create

• Operation ID: pimEligibilityAdminCreate
• Required scopes: tenant:pim.admin

Request body (required): application/json → CreateEligibleAssignmentRequest

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/pim/eligible-assignments/{id}

Pim Eligibility Admin Get

• Operation ID: pimEligibilityAdminGet
• Required scopes: tenant:pim.admin

Parameters:

Name	In	Required	Type	Description
id	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

DELETE /api/v1/pim/eligible-assignments/{id}

Pim Eligibility Admin Delete

• Operation ID: pimEligibilityAdminDelete
• Required scopes: tenant:pim.admin

Parameters:

Name	In	Required	Type	Description
id	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)