Management API

In order to interact with the management API, a user, group or client application has to be assigned to a ProAuth security role:

• SystemAdmin
  With the SystemAdmin role, you are a super admin and allowed to proceed any change in ProAuth.

• CustomerAdmin
  A CustomerAdmin can manage its owned customers, all its subscriptions and the depending items.

• SubscriptionAdmin
  A SubscriptionAdmin can manage its owned subscriptions, all its tenants and the depending items.

• TenantAdmin
  A TenantAdmin can manage its owned tenants and all its depending items.

• UserStoreAdmin
  A UserStoreAdmin can manage its owned UserStore IDPs and all its depending items.

• UserAdmin
  A UserAdmin can manage its own ProAuthUser information.

• ApplicationDataReader
  The ApplicationDataReader role allows to retrieve data from the ApplicationUser and ApplicationGroup API. This role is usually assigned to a client app which loads or caches user and group information to populate user selection controls in the application.

The API specification is provided as an OpenAPI v3 (aka Swagger) specification. It can be used to learn about the API requests and the data structures, generate scripts or event generate code for your integration project.

Based on the OpenAPI specification each ProAuth release publishes client Nuget Packages for .NET which cover the complete API. In addition to that, the client implementation also includes a token handler which covers the authentication implementation and token injection for you.