API Overview

**Table 1** IAM APIs
Type	Description
Instance Management	List instances.
Access Control Attribute Management	Enable, obtain, update, and disable access control attributes for a specified instance.
Permission Set Management	Add, delete, modify, and query permission sets; attach, detach, and list system-defined identity policies or policies; query, attach, or delete custom identity policies or policies of a permission set; attach permission sets to an account; query the attachment status of a permission set; list accounts associated with a permission set; and list permission sets provisioned to an account.
Account Assignment Management	Add, delete, and query account assignments; query creation and deletion statuses of account assignments.
Tag Management	List, add, and remove tags for a specified permission set.
User Management	Add, delete, modify, and query users; query user IDs.
Group Management	Add, delete, modify, and query groups; query group IDs.
Group Membership Management	Add, delete, and query group membership; query the membership ID; list users in a group, list groups to which a user is added; query whether a user is a member of a group.
SCIM User Management	Add, modify, and delete users based on the SCIM protocol.
SCIM Group Management	Add, modify, and delete groups based on the SCIM protocol.
Service Provider (SP) Management	Query the SCIM configuration in the service provider (SP).
Client Management	Register a client.
Token Management	Create a token.
Device Authorization Management	Request device authorization.
Authorization Management	Log out of a user.
Account Management	List account information.
Agency Management	List account agencies or trust agencies.
Credentials Management	Obtain credentials for agencies or trust agencies.