How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Zededa IdentityAccessManagement API

The IdentityAccessManagement API from Zededa — 38 operation(s) for identityaccessmanagement.

Zededa IdentityAccessManagement API is one of 35 APIs that Zededa publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Identity Access Management. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 58 operations across 38 paths, and defines 140 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against a single base URL, /api.

58 operations 38 paths 140 schemas 7 DELETE24 GET16 POST11 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://zedcontrol.zededa.net/api
Authentication
API Key
License
Terms of Service
Resource Areas
1

Authentication & Security 1

Zededa IdentityAccessManagement API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (BearerToken). By default, every request must be authenticated.

  • BearerToken — Bearer token for user session

Paths & Operations 58

Across 38 paths, the API surfaces 58 operations — 7 DELETE, 24 GET, 16 POST, 11 PUT. Each is listed below with its method, path, parameters, and response codes.

IdentityAccessManagement 58
GET
/v1/authorization/profiles
Query AAA profiles
IdentityAccessManagement_QueryAuthProfiles 14 params → 200400401403500504default
POST
/v1/authorization/profiles
Create AAA profile
IdentityAccessManagement_CreateAuthProfile 1 param body → 200400401403409500504default
GET
/v1/authorization/profiles/id/{id}
Get AAA profile
IdentityAccessManagement_GetAuthProfile 2 params → 200401403404500504default
DELETE
/v1/authorization/profiles/id/{id}
Delete AAA profile
IdentityAccessManagement_DeleteAuthProfile 2 params → 200401403404500504default
PUT
/v1/authorization/profiles/id/{id}
Update AAA profile
IdentityAccessManagement_UpdateAuthProfile 2 params body → 200401403404409500504default
GET
/v1/authorization/profiles/name/{name}
Get AAA profile
IdentityAccessManagement_GetAuthProfileByName 2 params → 200401403404500504default
GET
/v1/cloud/policies
Query document policy
IdentityAccessManagement_QueryDocPolicy 14 params → 200400401403500504default
POST
/v1/cloud/policies
Create document policy
IdentityAccessManagement_CreateDocPolicy 1 param body → 200400401403409500504default
GET
/v1/cloud/policies/id/{id}
Get document policy by id
IdentityAccessManagement_GetDocPolicy 2 params → 200401403404500504default
DELETE
/v1/cloud/policies/id/{id}
Deletes document policy by id
IdentityAccessManagement_DeleteDocPolicy 2 params → 200401403404500504default
PUT
/v1/cloud/policies/latest
Mark document policy as latest
IdentityAccessManagement_UpdateDocPolicyLatest 1 param body → 200401403404409500504default
POST
/v1/credentials
Create IAM credential
IdentityAccessManagement_CreateCredential 1 param body → 200400401403409500504default
PUT
/v1/credentials
Update IAM credential
IdentityAccessManagement_UpdateCredential 1 param body → 200401403404409500504default
DELETE
/v1/credentials/id/{id}
Delete IAM credential
IdentityAccessManagement_DeleteCredential 2 params → 200401403404500504default
PUT
/v1/credentials/self
Update IAM credential
IdentityAccessManagement_UpdateCredentialSelf 1 param body → 200401403404409500504default
GET
/v1/enterprises
Query IAM Enterprises
IdentityAccessManagement_QueryEnterprises 14 params → 200400401403500504default
POST
/v1/enterprises
Create IAM Enterprise
IdentityAccessManagement_CreateEnterprise 1 param body → 200400401403409500504default
GET
/v1/enterprises/id/{id}
Get enterprise
IdentityAccessManagement_GetEnterprise 2 params → 200401403404500504default
DELETE
/v1/enterprises/id/{id}
Delete IAM role
IdentityAccessManagement_DeleteEnterprise 2 params → 200401403404409500504default
PUT
/v1/enterprises/id/{id}
Update enterprise
IdentityAccessManagement_UpdateEnterprise2 2 params body → 200401403404409500504default
GET
/v1/enterprises/name/{name}
Get enterprise
IdentityAccessManagement_GetEnterpriseByName 2 params → 200401403404500504default
GET
/v1/enterprises/self
Get own enterprise
IdentityAccessManagement_GetEnterpriseSelf 1 param → 200401403404500504default
PUT
/v1/enterprises/self
Update enterprise
IdentityAccessManagement_UpdateEnterprise 1 param body → 200401403404409500504default
POST
/v1/login
Login locally
IdentityAccessManagement_Login 1 param body → 200401403500504default
POST
/v1/login/external
Login externally
IdentityAccessManagement_LoginExternal 1 param body → 200401403500504default
POST
/v1/login/forgot
Reset forgotten password
IdentityAccessManagement_LoginForgotPassword 1 param body → 200401403500504default
POST
/v1/login/mode
Get AAA mode of the user
IdentityAccessManagement_LoginMode 1 param body → 200401403500504default
POST
/v1/login/oauth/callback
Login callback
IdentityAccessManagement_LoginExternalOAuth2Callback 1 param body → 200401403500504default
POST
/v1/login/signup/enterprise
Sign up for a new enterprise account
IdentityAccessManagement_SignupEnterprise 1 param body → 200401403500504default
POST
/v1/login/signup/user
Get enterprise
IdentityAccessManagement_SignupUser 1 param body → 200401403500504default
POST
/v1/logout
Logout
IdentityAccessManagement_Logout 1 param body → 200401403500504default
GET
/v1/realms
Query all realms
IdentityAccessManagement_QueryRealms 14 params → 200400401403500504default
POST
/v1/realms
Create a realm for an enterprise
IdentityAccessManagement_CreateRealm 1 param body → 200400401403409500504default
GET
/v1/realms/id/{id}
Get a realm
IdentityAccessManagement_GetRealm 2 params → 200401403404500504default
DELETE
/v1/realms/id/{id}
Delete a realm
IdentityAccessManagement_DeleteRealm 2 params → 200401403404500504default
PUT
/v1/realms/id/{id}
Update a realm
IdentityAccessManagement_UpdateRealm 2 params body → 200401403404409500504default
GET
/v1/realms/name/{name}
Get IAM realm
IdentityAccessManagement_GetRealmByName 2 params → 200401403404500504default
GET
/v1/roles
Query IAM Roles
IdentityAccessManagement_QueryRoles 14 params → 200400401403500504default
POST
/v1/roles
Create IAM role
IdentityAccessManagement_CreateRole 1 param body → 200400401403409500504default
GET
/v1/roles/id/{id}
Get IAM role
IdentityAccessManagement_GetRole 2 params → 200401403404500504default
DELETE
/v1/roles/id/{id}
Delete IAM role
IdentityAccessManagement_DeleteRole 2 params → 200401403404409500504default
PUT
/v1/roles/id/{id}
Update IAM role
IdentityAccessManagement_UpdateRole 2 params body → 200401403404409500504default
GET
/v1/roles/name/{name}
Get IAM role
IdentityAccessManagement_GetRoleByName 2 params → 200401403404500504default
GET
/v1/roles/self
Get own IAM role
IdentityAccessManagement_GetRoleSelf 1 param → 200401403404500504default
GET
/v1/sessions
Query user sessions
IdentityAccessManagement_QueryUserSessions 1 param → 200401403500504default
PUT
/v1/sessions/refresh
Refresh current user session
IdentityAccessManagement_RefreshUserSession 1 param → 200401403500504default
GET
/v1/sessions/self
Get current user session
IdentityAccessManagement_GetUserSessionSelf 1 param → 200401403500504default
GET
/v1/sessions/token
Get user session
IdentityAccessManagement_GetUserSession2 2 params → 200401403500504default
POST
/v1/sessions/token/self
Generate a new session token
IdentityAccessManagement_CreateUserSessionSelf 1 param → 200401403500504default
GET
/v1/sessions/token/{sessionToken.base64}
Get user session
IdentityAccessManagement_GetUserSession 2 params → 200401403500504default
GET
/v1/users
Query IAM users
IdentityAccessManagement_QueryUsers 14 params → 200400401403500504default
POST
/v1/users
Create IAM user
IdentityAccessManagement_CreateUser 1 param body → 200400401403409500504default
GET
/v1/users/id/{id}
Get IAM user
IdentityAccessManagement_GetUser 2 params → 200401403404500504default
DELETE
/v1/users/id/{id}
Delete IAM user
IdentityAccessManagement_DeleteUser 2 params → 200401403404500504default
PUT
/v1/users/id/{id}
Update IAM user
IdentityAccessManagement_UpdateUser2 2 params body → 200401403404409500504default
GET
/v1/users/name/{name}
Get IAM user
IdentityAccessManagement_GetUserByName 2 params → 200401403404500504default
GET
/v1/users/self
Get own IAM user
IdentityAccessManagement_GetUserSelf 1 param → 200401403404500504default
PUT
/v1/users/self
Update IAM user
IdentityAccessManagement_UpdateUser 1 param body → 200401403404409500504default

Schemas 140

The contract defines 140 schemas that model the data the API accepts and returns. The most detailed are DetailedUser (26 properties), CrudResponseQuery (20 properties), Enterprise (20 properties), AAA_Frontend_LoginResponse (16 properties). Each schema is shown below with its type and property counts.

AllowedEnterprise
object
3 properties
OAUTHProfileJWTAuthProfile
object
Config for JWT based authentication, jwksuri is derived from OIDC Well Known Endpoints
1 property
EnterpriseSummary
object
2 properties
AAARedirectResponse
object
2 properties
AAAFailureResponseLogin
object
5 properties
CrudResultWithContent
object
3 properties
CrudContentJSON
object
1 property
UserUsagePerEnterpriseList
object
1 property
AuthProfileType
string
TOTPSettings
object
3 properties
SessionDetails
object
Details of all logged in session
5 properties
EnterpriseType
string
DocPolicySummary
object
DocPolicy meta data
4 properties
CrudStatisticsUser
object
3 properties
UserEntitlement
object
2 properties
ZsrvResponse
object
15 properties
Policies
object
3 properties
AuthorizationProfile
object
Authorization profile meta data
14 properties 3 required
AAASuccessResponseQueryAllSessionDetails
object
2 properties
Identifier64
object
1 property
LastLoggedinUserInfo
object
2 properties
CrudAction
string
DeviceEntitlement
object
3 properties
CrudResponseQuery
object
20 properties
Token64
object
2 properties
AAA_Frontend_RefreshResponse
object
3 properties
AuthorizationProfiles
object
3 properties
DocPolicy
object
DocPolicy meta data
7 properties 1 required
AAANotifyResponseType
string
Enterprises
object
3 properties
AAALoginModeResponseMode
string
AAARequestEnterpriseSignup
object
7 properties
UserSummaryReport
object
3 properties
TOTPEnrolmentURL
object
2 properties
ZsrvErrorCode
string
- zMsgErrorNone: common validation errors - IncompleteData: message had fields that weren't filled in - InvalidData: message contained the field that wasn't ex…
Credentials
object
3 properties
AAA_Frontend_LoginModeResponse
object
2 properties
AAA_Frontend_LoginResponse
object
16 properties
Realm
object
Realm meta data
6 properties 3 required
AAA_Frontend_LogoutResponse
object
2 properties
AAAFailureResponseQueryAllSessionDetails
object
2 properties
Credential
object
7 properties
CrudContentProtobuf
object
12 properties
EnterpriseState
string
AAAFailureTokenRefresh
object
3 properties
AAASuccessResponseType
string
AAASuccessResponseGenerateToken
object
2 properties
AAASuccessSessionDetailsResponse
object
3 properties
JWTAuthProfileAlgorithm
string
Entitlement
object
Get Entitlement data
6 properties
CredentialType
string
AAAFailureResponseCredentialChange
object
1 property
AAA_Frontend_LoginWithOauthRequest
object
2 properties
PolicyScope
string
protobufAny
object
2 properties
AAAFailureTokenRefreshCause
string
AAA_Frontend_LoginModeResponseMode
string
AAASuccessResponseCredentialChange
object
1 property
ZcOpsType
string
Scope
object
11 properties
AAAFailureResponseQueryAllSessionDetailsCause
string
DetailedUsers
object
5 properties
ZcOpsStatus
string
- OPSSTATUSPENDING: In rare cases, system may not start operation when it was requested. Client will be notified that operation is PENDING - OPSSTATUSONGOING:…
UserRole
string
IdState
string
OpaqueToken64
object
1 property
AAA_Frontend_SessionDetailsResponseCause
string
AAA_Frontend_LoginModeRequest
object
1 property
PolicyAccess
string
CrudResultCode
string
DocPolicies
object
3 properties
AAANotifyResponse
object
3 properties
Policy
object
6 properties
PluginTypeEntitlement
object
3 properties
AAASuccessResponseLogout
object
1 property
AAALoginModeResponse
object
2 properties
CrudContentEncoding
string
AAAFailureResponse
object
8 properties
DetailedUser
object
User meta data
26 properties 3 required
Roles
object
3 properties
AAAResponseType
string
FeatureEntitlement
object
3 properties
AAA_Frontend_OAUTHCallbackRequest
object
2 properties
OAUTHProfile
object
9 properties
AuthType
string
RoleState
string
Values for this needs to match the const defined in libs/database/datamodel.go for backward compatibility.
Realms
object
3 properties
AAASuccessResponseLogin
object
15 properties
PolicyVersionList
object
1 property
AAAFailureResponseLogoutCause
string
AAAFailureResponseCredentialChangeCause
string
Enterprise
object
Enterprise meta data
20 properties 2 required
CrudResponse
object
5 properties
AAA_Frontend_LogoutRequest
object
CrudResponseRead
object
1 property
googlerpcStatus
object
3 properties
AAASuccessResponse
object
8 properties
PasswordProfile
object
10 properties
AAAFailureResponseGenerateToken
object
2 properties
AAAFailureResponseSessionDetailsCause
string
PluginType
string
AAAFailureResponseType
string
AAAFailureResponseGenerateTokenCause
string
AAA_Frontend_LoginWithPasswordRequest
object
User either a combination of (username, realm) or (usernameAtRealm) to specify login details
10 properties
ZksSyncStatus
object
2 properties
AAAFailureResponseLogout
object
3 properties
AdminUserSignup
object
6 properties
ZsrvError
object
3 properties
Summary
object
Summary is used to store the Summary details
3 properties
UserState
string
ModelClazz
string
Cursor
object
Cursor helps in filtering the various list response like edge-app bundle list, model list, bundle list etc.
5 properties
AAAFailureResponseLoginCause
string
CrudStatisticsContainer
object
2 properties
DeviceSize
string
AAA_Frontend_GenerateTokenResponse
object
7 properties
PluginEntitlement
object
3 properties
AAAFailureResponseSessionDetails
object
2 properties
AAA_Frontend_LoginResponseCause
string
ObjectType
string
DataStream
object
2 properties
AAA_Frontend_LogoutResponseCause
string
AAASuccessResponseQueryAllSessionDetailsCause
string
CrudContent
object
5 properties
AAA_Frontend_RefreshResponseCause
string
AAA_Frontend_SessionDetailsResponse
object
3 properties
Role
object
Role meta data
9 properties 4 required
AAARequestLoginForgotPassword
object
1 property
AAA_Frontend_GenerateTokenResponseCause
string
ObjectRevision
object
ObjectRevision store the user details, who has doent the necessary operation like Create Operation or update operation
6 properties 5 required
UserUsagePerEnterprise
object
2 properties
AllowedEnterpriseList
object
Get list of child enterprises
5 properties
AAASuccessTokenRefresh
object
1 property
PolicyVersion
object
5 properties
AAARequestAdminUserSignup
object
7 properties
ServerSyncStatus
object
3 properties
AAAResponse
object
8 properties
ProjectList
object
1 property
SimpleUser
object
5 properties
ZksSyncStatusCode
string

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

zededa-identityaccessmanagement-api-openapi.yml Raw ↑

Other APIs Zededa publishes across the network.

Zededa AppProfileService API
Zededa ArtifactManager API
Zededa AssetGroupService API
Zededa BulkJobOps API
Zededa CertificateEnrollmentProfileConfiguration API
Zededa CloudDiagnostics API
Zededa ClusterGroups API
Zededa ClusterStatus API
Zededa DatastoreConfiguration API
Zededa EdgeApplicationConfiguration API
Zededa EdgeApplicationInstanceConfiguration API
Zededa EdgeApplicationInstanceStatus API
Where this information came from

This is an independent, third-party profile of Zededa IdentityAccessManagement API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.