Can we assign SCP Identity Authentication user group via API?

[rsletta]

Hi,

We are creating new users on our SAP Cloud Platform Identity Authentication Service tenant programatically, using the User Management REST API. The issue now, is that these users need to be assigned user groups for access to SCP resources manually. I can't find any references to APIs for assigning users to groups. Am I missing something, or is there no such thing?

Best regards

Ronnie

[pjcools · Accepted solution]

Hey rsletta

Nice question. You can use the same User API to not only create the new P user but also assign the groups. Check groups attribute below.

Here is an example:

{
"name": {
"givenName": "John",
"familyName": "Doe"
},
"emails": [
{
"value": "email@company.com.au"
}
],
"phoneNumbers": [
{
"value": "0499999999"
"type": "mobile"
}
],
"groups": [
{
"value": "Vendors_SCI_Group"
}
],
"company": "Company",
"password": "Welcome#1",
"active": true,
"passwordStatus": "enabled",
"sendMail": "false",
"mailVerified": "true"
}

You can also use the Update Group API

https://help.sap.com/viewer/6d6d63354d1242d185ab4830fc04feb1/Cloud/en-US/81ca50e7e604474fa9ce53c8311...

Good luck mate!!

cheers

Phil

[rsletta · Accepted solution]

Thank you phil.cooley, this solved our problem. A honourable mention to vobu, who helped on Twitter. ☺️

I can add some information, to make it clearer for someone who would stumble onto this at a later time:
What had me stumped in the first place, was the fact that we were using the wrong API. We used the "User Management REST API", not the "SCIM REST API". I had created an application, with an API Authentication user.

By creating an SYSTEM administrator (T-user), with "Manage Users" privileges, we're able to use the SCIM API with great success.