Management
Table of Contents
Namespaces
- Manifest
- Models
Classes
- AuditApi
- Append-only audit log, read-only by construction.
- CaCertificatesApi
- Organization CAs and the per-tenant signing CAs chained beneath them.
- CertificatesApi
- End-entity X.509 certificates -- the ones issued to users, services and IoT devices.
- ConflictError
- `409 Conflict` on the §27 management surface — CONTRACT.md §27.4 rule 7.
- EmailConfigApi
- Transactional-mail transport, configurable at organization level and overridable per tenant.
- FederationApi
- Upstream IdP configuration and the per-user links it produces.
- FieldError
- One field-level complaint from a `400`/`422` validation body (CONTRACT.md §27.4
rule 7).
- GroupsApi
- Named collections of users. Roles assigned to a group are inherited by every member.
- ManagementApi
- The CONTRACT.md §27 management surface: 147 operations across 24 namespaces.
- ManagementErrorMapper
- The §27 status→error mapper (CONTRACT.md §27.4 rule 7).
- ManagementSupport
- Base class for the 24 generated namespace handles (CONTRACT.md §27.2).
- ManagementTransport
- The single wire path every one of the 147 §27 management operations goes through
(CONTRACT.md §27.8).
- NamespaceScope
- The `{org_id}`/`{tenant_id}` a namespace handle substitutes into its routes
(CONTRACT.md §27.4 rule 3).
- NotFoundError
- `404 Not Found` on the §27 management surface — CONTRACT.md §27.4 rule 7.
- NotificationRulesApi
- Which events raise a notification, and to whom.
- Oauth2ClientsApi
- Registered OAuth2/OIDC clients -- the registration half of what §12, §21 and §26 then speak
to.
- OrganizationsApi
- Organizations an SDK client may read and configure. Creation and deletion are outside the
SDK boundary (§27.0).
- Page
- One page of a paginated §27 list response (CONTRACT.md §27.4 rule 4).
- PageRequest
- One page's worth of `?offset=`/`?limit=`/`?search=` for a paginated §27 list call
(CONTRACT.md §27.4 rule 4).
- PermissionsApi
- Permissions -- an action on a resource, optionally narrowed by a scope.
- PgpKeysApi
- OpenPGP keys used for audit signing and encrypted data export.
- PlatformApi
- Deployment-level probes and FIDO metadata state. Unauthenticated where the server leaves
them so.
- PrivacyApi
- GDPR self-service: the authenticated account's own export and erasure. Scoped to the caller,
never to another user.
- ReactorsApi
- Registration of §22 AMQP extension actors -- the admin surface §22.9 describes, which no SDK
could previously reach.
- ResourcesApi
- The resource hierarchy role assignments cascade down.
- RolesApi
- Roles, their permission sets, and their assignment to users and groups.
- ScimTokensApi
- Bearer tokens for the SCIM 2.0 provisioning endpoint.
- ScopesApi
- Sub-resource granularity, always addressed under their resource.
- ServiceAccountsApi
- Machine identities, their secrets, and the certificate a device-bound one authenticates
with.
- SettingsApi
- Effective settings, and the organization/tenant layers they resolve from.
- TenantsApi
- Tenants within an organization -- the isolation boundary every other namespace is scoped to.
- UsersApi
- Users within the client's tenant, and the administrative side of their second factor and
lockout state.
- ValidationError
- `400`/`422` on the §27 management surface — CONTRACT.md §27.4 rule 7.
- WebauthnPolicyApi
- Per-tenant attestation policy governing the §24 ceremonies, and the compliance report over
it.
- WebhooksApi
- Outbound event notifications. Delivery signatures are verified with the §13 helper, which
this namespace configures.