How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Zededa IdentityAccessManagement API

The IdentityAccessManagement API from Zededa — 38 operation(s) for identityaccessmanagement.

Zededa IdentityAccessManagement API is one of 35 APIs that Zededa publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Identity Access Management. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 58 operations across 38 paths, and defines 140 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against a single base URL, /api.

58 operations 38 paths 140 schemas 7 DELETE24 GET16 POST11 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://zedcontrol.zededa.net/api
Authentication
API Key
License
Terms of Service
Resource Areas
1

Authentication & Security 1

Zededa IdentityAccessManagement API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (BearerToken). By default, every request must be authenticated.

  • BearerToken — Bearer token for user session

Paths & Operations 58

Across 38 paths, the API surfaces 58 operations — 7 DELETE, 24 GET, 16 POST, 11 PUT. Each is listed below with its method, path, parameters, and response codes.

IdentityAccessManagement 58
GET
/v1/authorization/profiles
Query AAA profiles
IdentityAccessManagement_QueryAuthProfiles 14 params → 200400401403500504default
POST
/v1/authorization/profiles
Create AAA profile
IdentityAccessManagement_CreateAuthProfile 1 param body → 200400401403409500504default
GET
/v1/authorization/profiles/id/{id}
Get AAA profile
IdentityAccessManagement_GetAuthProfile 2 params → 200401403404500504default
DELETE
/v1/authorization/profiles/id/{id}
Delete AAA profile
IdentityAccessManagement_DeleteAuthProfile 2 params → 200401403404500504default
PUT
/v1/authorization/profiles/id/{id}
Update AAA profile
IdentityAccessManagement_UpdateAuthProfile 2 params body → 200401403404409500504default
GET
/v1/authorization/profiles/name/{name}
Get AAA profile
IdentityAccessManagement_GetAuthProfileByName 2 params → 200401403404500504default
GET
/v1/cloud/policies
Query document policy
IdentityAccessManagement_QueryDocPolicy 14 params → 200400401403500504default
POST
/v1/cloud/policies
Create document policy
IdentityAccessManagement_CreateDocPolicy 1 param body → 200400401403409500504default
GET
/v1/cloud/policies/id/{id}
Get document policy by id
IdentityAccessManagement_GetDocPolicy 2 params → 200401403404500504default
DELETE
/v1/cloud/policies/id/{id}
Deletes document policy by id
IdentityAccessManagement_DeleteDocPolicy 2 params → 200401403404500504default
PUT
/v1/cloud/policies/latest
Mark document policy as latest
IdentityAccessManagement_UpdateDocPolicyLatest 1 param body → 200401403404409500504default
POST
/v1/credentials
Create IAM credential
IdentityAccessManagement_CreateCredential 1 param body → 200400401403409500504default
PUT
/v1/credentials
Update IAM credential
IdentityAccessManagement_UpdateCredential 1 param body → 200401403404409500504default
DELETE
/v1/credentials/id/{id}
Delete IAM credential
IdentityAccessManagement_DeleteCredential 2 params → 200401403404500504default
PUT
/v1/credentials/self
Update IAM credential
IdentityAccessManagement_UpdateCredentialSelf 1 param body → 200401403404409500504default
GET
/v1/enterprises
Query IAM Enterprises
IdentityAccessManagement_QueryEnterprises 14 params → 200400401403500504default
POST
/v1/enterprises
Create IAM Enterprise
IdentityAccessManagement_CreateEnterprise 1 param body → 200400401403409500504default
GET
/v1/enterprises/id/{id}
Get enterprise
IdentityAccessManagement_GetEnterprise 2 params → 200401403404500504default
DELETE
/v1/enterprises/id/{id}
Delete IAM role
IdentityAccessManagement_DeleteEnterprise 2 params → 200401403404409500504default
PUT
/v1/enterprises/id/{id}
Update enterprise
IdentityAccessManagement_UpdateEnterprise2 2 params body → 200401403404409500504default
GET
/v1/enterprises/name/{name}
Get enterprise
IdentityAccessManagement_GetEnterpriseByName 2 params → 200401403404500504default
GET
/v1/enterprises/self
Get own enterprise
IdentityAccessManagement_GetEnterpriseSelf 1 param → 200401403404500504default
PUT
/v1/enterprises/self
Update enterprise
IdentityAccessManagement_UpdateEnterprise 1 param body → 200401403404409500504default
POST
/v1/login
Login locally
IdentityAccessManagement_Login 1 param body → 200401403500504default
POST
/v1/login/external
Login externally
IdentityAccessManagement_LoginExternal 1 param body → 200401403500504default
POST
/v1/login/forgot
Reset forgotten password
IdentityAccessManagement_LoginForgotPassword 1 param body → 200401403500504default
POST
/v1/login/mode
Get AAA mode of the user
IdentityAccessManagement_LoginMode 1 param body → 200401403500504default
POST
/v1/login/oauth/callback
Login callback
IdentityAccessManagement_LoginExternalOAuth2Callback 1 param body → 200401403500504default
POST
/v1/login/signup/enterprise
Sign up for a new enterprise account
IdentityAccessManagement_SignupEnterprise 1 param body → 200401403500504default
POST
/v1/login/signup/user
Get enterprise
IdentityAccessManagement_SignupUser 1 param body → 200401403500504default
POST
/v1/logout
Logout
IdentityAccessManagement_Logout 1 param body → 200401403500504default
GET
/v1/realms
Query all realms
IdentityAccessManagement_QueryRealms 14 params → 200400401403500504default
POST
/v1/realms
Create a realm for an enterprise
IdentityAccessManagement_CreateRealm 1 param body → 200400401403409500504default
GET
/v1/realms/id/{id}
Get a realm
IdentityAccessManagement_GetRealm 2 params → 200401403404500504default
DELETE
/v1/realms/id/{id}
Delete a realm
IdentityAccessManagement_DeleteRealm 2 params → 200401403404500504default
PUT
/v1/realms/id/{id}
Update a realm
IdentityAccessManagement_UpdateRealm 2 params body → 200401403404409500504default
GET
/v1/realms/name/{name}
Get IAM realm
IdentityAccessManagement_GetRealmByName 2 params → 200401403404500504default
GET
/v1/roles
Query IAM Roles
IdentityAccessManagement_QueryRoles 14 params → 200400401403500504default
POST
/v1/roles
Create IAM role
IdentityAccessManagement_CreateRole 1 param body → 200400401403409500504default
GET
/v1/roles/id/{id}
Get IAM role
IdentityAccessManagement_GetRole 2 params → 200401403404500504default
DELETE
/v1/roles/id/{id}
Delete IAM role
IdentityAccessManagement_DeleteRole 2 params → 200401403404409500504default
PUT
/v1/roles/id/{id}
Update IAM role
IdentityAccessManagement_UpdateRole 2 params body → 200401403404409500504default
GET
/v1/roles/name/{name}
Get IAM role
IdentityAccessManagement_GetRoleByName 2 params → 200401403404500504default
GET
/v1/roles/self
Get own IAM role
IdentityAccessManagement_GetRoleSelf 1 param → 200401403404500504default
GET
/v1/sessions
Query user sessions
IdentityAccessManagement_QueryUserSessions 1 param → 200401403500504default
PUT
/v1/sessions/refresh
Refresh current user session
IdentityAccessManagement_RefreshUserSession 1 param → 200401403500504default
GET
/v1/sessions/self
Get current user session
IdentityAccessManagement_GetUserSessionSelf 1 param → 200401403500504default
GET
/v1/sessions/token
Get user session
IdentityAccessManagement_GetUserSession2 2 params → 200401403500504default
POST
/v1/sessions/token/self
Generate a new session token
IdentityAccessManagement_CreateUserSessionSelf 1 param → 200401403500504default
GET
/v1/sessions/token/{sessionToken.base64}
Get user session
IdentityAccessManagement_GetUserSession 2 params → 200401403500504default
GET
/v1/users
Query IAM users
IdentityAccessManagement_QueryUsers 14 params → 200400401403500504default
POST
/v1/users
Create IAM user
IdentityAccessManagement_CreateUser 1 param body → 200400401403409500504default
GET
/v1/users/id/{id}
Get IAM user
IdentityAccessManagement_GetUser 2 params → 200401403404500504default
DELETE
/v1/users/id/{id}
Delete IAM user
IdentityAccessManagement_DeleteUser 2 params → 200401403404500504default
PUT
/v1/users/id/{id}
Update IAM user
IdentityAccessManagement_UpdateUser2 2 params body → 200401403404409500504default
GET
/v1/users/name/{name}
Get IAM user
IdentityAccessManagement_GetUserByName 2 params → 200401403404500504default
GET
/v1/users/self
Get own IAM user
IdentityAccessManagement_GetUserSelf 1 param → 200401403404500504default
PUT
/v1/users/self
Update IAM user
IdentityAccessManagement_UpdateUser 1 param body → 200401403404409500504default

Schemas 140

The contract defines 140 schemas that model the data the API accepts and returns. The most detailed are DetailedUser (26 properties), Enterprise (20 properties), CrudResponseQuery (20 properties), AAA_Frontend_LoginResponse (16 properties). Each schema is shown below with its type and property counts.

DetailedUsers
object
5 properties
AAAFailureResponseGenerateTokenCause
string
AAASuccessTokenRefresh
object
1 property
Entitlement
object
Get Entitlement data
6 properties
Token64
object
2 properties
CrudContentJSON
object
1 property
AAASuccessResponse
object
8 properties
AAA_Frontend_LogoutResponseCause
string
AAA_Frontend_SessionDetailsResponse
object
3 properties
Cursor
object
Cursor helps in filtering the various list response like edge-app bundle list, model list, bundle list etc.
5 properties
AAASuccessSessionDetailsResponse
object
3 properties
AuthorizationProfiles
object
3 properties
Policy
object
6 properties
ProjectList
object
1 property
ZsrvResponse
object
15 properties
protobufAny
object
2 properties
AAASuccessResponseLogout
object
1 property
AdminUserSignup
object
6 properties
Scope
object
11 properties
EnterpriseType
string
AAAFailureResponseGenerateToken
object
2 properties
AAAFailureTokenRefresh
object
3 properties
AAAFailureResponseQueryAllSessionDetails
object
2 properties
ZsrvError
object
3 properties
UserUsagePerEnterprise
object
2 properties
Credentials
object
3 properties
UserEntitlement
object
2 properties
Realms
object
3 properties
CrudResponseRead
object
1 property
AAA_Frontend_LoginModeResponseMode
string
DocPolicies
object
3 properties
AAARedirectResponse
object
2 properties
UserRole
string
CrudAction
string
PasswordProfile
object
10 properties
CrudStatisticsUser
object
3 properties
AAASuccessResponseCredentialChange
object
1 property
CrudResponseQuery
object
20 properties
AAARequestEnterpriseSignup
object
7 properties
AuthorizationProfile
object
Authorization profile meta data
14 properties 3 required
CrudContentEncoding
string
PluginEntitlement
object
3 properties
RoleState
string
Values for this needs to match the const defined in libs/database/datamodel.go for backward compatibility.
AAASuccessResponseQueryAllSessionDetails
object
2 properties
OpaqueToken64
object
1 property
AAASuccessResponseQueryAllSessionDetailsCause
string
Role
object
Role meta data
9 properties 4 required
Credential
object
7 properties
CrudContentProtobuf
object
12 properties
AAALoginModeResponseMode
string
SimpleUser
object
5 properties
AAAResponseType
string
AAA_Frontend_GenerateTokenResponseCause
string
ObjectType
string
TOTPSettings
object
3 properties
EnterpriseState
string
SessionDetails
object
Details of all logged in session
5 properties
PolicyVersionList
object
1 property
AAAFailureResponseSessionDetails
object
2 properties
ZksSyncStatus
object
2 properties
AAANotifyResponse
object
3 properties
AAA_Frontend_RefreshResponseCause
string
Enterprise
object
Enterprise meta data
20 properties 2 required
CrudResponse
object
5 properties
AAARequestLoginForgotPassword
object
1 property
ModelClazz
string
AAAFailureTokenRefreshCause
string
DocPolicy
object
DocPolicy meta data
7 properties 1 required
AAA_Frontend_LoginResponseCause
string
AAA_Frontend_OAUTHCallbackRequest
object
2 properties
ZcOpsType
string
OAUTHProfileJWTAuthProfile
object
Config for JWT based authentication, jwksuri is derived from OIDC Well Known Endpoints
1 property
Identifier64
object
1 property
JWTAuthProfileAlgorithm
string
AAAResponse
object
8 properties
AAA_Frontend_SessionDetailsResponseCause
string
PluginType
string
AAAFailureResponseLogin
object
5 properties
AAANotifyResponseType
string
AAAFailureResponseLogoutCause
string
AAAFailureResponseLoginCause
string
AllowedEnterpriseList
object
Get list of child enterprises
5 properties
Realm
object
Realm meta data
6 properties 3 required
CrudResultCode
string
UserState
string
AAASuccessResponseGenerateToken
object
2 properties
AAA_Frontend_LoginWithOauthRequest
object
2 properties
ZksSyncStatusCode
string
AAAFailureResponseSessionDetailsCause
string
IdState
string
CrudContent
object
5 properties
AllowedEnterprise
object
3 properties
Roles
object
3 properties
DocPolicySummary
object
DocPolicy meta data
4 properties
CrudStatisticsContainer
object
2 properties
PolicyScope
string
googlerpcStatus
object
3 properties
AAA_Frontend_LogoutResponse
object
2 properties
AAASuccessResponseType
string
AuthType
string
AAAFailureResponseLogout
object
3 properties
ZcOpsStatus
string
- OPSSTATUSPENDING: In rare cases, system may not start operation when it was requested. Client will be notified that operation is PENDING - OPSSTATUSONGOING:…
PolicyVersion
object
5 properties
AuthProfileType
string
ServerSyncStatus
object
3 properties
AAA_Frontend_LoginModeRequest
object
1 property
AAAFailureResponseQueryAllSessionDetailsCause
string
AAAFailureResponseCredentialChange
object
1 property
DataStream
object
2 properties
PluginTypeEntitlement
object
3 properties
OAUTHProfile
object
9 properties
UserUsagePerEnterpriseList
object
1 property
AAA_Frontend_GenerateTokenResponse
object
7 properties
Summary
object
Summary is used to store the Summary details
3 properties
LastLoggedinUserInfo
object
2 properties
UserSummaryReport
object
3 properties
AAAFailureResponseType
string
DeviceEntitlement
object
3 properties
EnterpriseSummary
object
2 properties
AAAFailureResponseCredentialChangeCause
string
ObjectRevision
object
ObjectRevision store the user details, who has doent the necessary operation like Create Operation or update operation
6 properties 5 required
TOTPEnrolmentURL
object
2 properties
AAASuccessResponseLogin
object
15 properties
AAA_Frontend_LogoutRequest
object
ZsrvErrorCode
string
- zMsgErrorNone: common validation errors - IncompleteData: message had fields that weren't filled in - InvalidData: message contained the field that wasn't ex…
AAA_Frontend_RefreshResponse
object
3 properties
Enterprises
object
3 properties
CredentialType
string
AAA_Frontend_LoginWithPasswordRequest
object
User either a combination of (username, realm) or (usernameAtRealm) to specify login details
10 properties
Policies
object
3 properties
AAALoginModeResponse
object
2 properties
AAA_Frontend_LoginResponse
object
16 properties
DeviceSize
string
FeatureEntitlement
object
3 properties
DetailedUser
object
User meta data
26 properties 3 required
AAAFailureResponse
object
8 properties
PolicyAccess
string
AAA_Frontend_LoginModeResponse
object
2 properties
AAARequestAdminUserSignup
object
7 properties
CrudResultWithContent
object
3 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

zededa-identityaccessmanagement-api-openapi.yml Raw ↑

Other APIs Zededa publishes across the network.

Zededa AppProfileService API
Zededa ArtifactManager API
Zededa AssetGroupService API
Zededa BulkJobOps API
Zededa CertificateEnrollmentProfileConfiguration API
Zededa CloudDiagnostics API
Zededa ClusterStatus API
Zededa DatastoreConfiguration API
Zededa EdgeApplicationConfiguration API
Zededa EdgeApplicationInstanceConfiguration API
Zededa EdgeApplicationInstanceStatus API
Zededa EdgeDiagnostics API
Where this information came from

This is an independent, third-party profile of Zededa IdentityAccessManagement API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.