A companion to iPaaS.com Permissions Reference. That article describes what each permission controls; this one lists the specific REST API endpoints each permission governs, plus the endpoints available to every user regardless of role.
How to read this: Permissions are grouped and ordered exactly as in the Permissions Reference. Under each permission is the set of API routes it secures. A route shows its HTTP method and its resolved path (for example POST /v2/Product). Granting a permission on a role grants that role access to every endpoint listed beneath it: Create grants POST access, Read, GET, etc). For the full API surface, see The iPaaS.com REST API: Swagger/OpenAPI Reference Guide.
Infrastructure health-check routes (/Health, /Hello) exist on each service and are listed once under Available to All Users.
Data Types
These permissions control access to iPaaS.com's canonical data records. Each maps to a data model in the platform; see Data Domains & Mapping Collection Types.
Products
Product
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Product Variant
Method | Endpoint |
GET |
|
GET |
|
PUT |
|
PUT |
|
DELETE |
|
Product Category
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
PUT |
|
PUT |
|
DELETE |
|
DELETE |
|
DELETE |
|
DELETE |
|
Product Option
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Product Unit
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
PUT |
|
DELETE |
|
Product Inventory
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Product Variant Inventory
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Product Variant Option
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Product Kit
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Product Alternate Id
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Product Variant Alternate Id
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Product Variant Related
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Related Product
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Alternate Id Type
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Bulk Price
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Variant Unit
Method | Endpoint |
POST |
|
PUT |
|
DELETE |
|
Product Custom Field
Method | Endpoint |
POST |
|
PUT |
|
DELETE |
|
Location
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
PUT |
|
PUT |
|
DELETE |
|
DELETE |
|
Location Address
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Location Relationship
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Customers
Customer
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Customer Address
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Customer Category
Method | Endpoint |
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
DELETE |
|
Customer Company
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Company Relationship
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Customer Company Relationship
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Customer Custom Field
Method | Endpoint |
POST |
|
PUT |
|
DELETE |
|
Transactions
Transaction
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Transaction Line
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Transaction Note
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Transaction Payment
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Transaction Shipping Address
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Transaction Tax
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Transaction Tracking
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Transaction Custom Field
Method | Endpoint |
POST |
|
PUT |
|
DELETE |
|
Payment Method
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Shipping Method
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Employees
Employee
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Employee Address
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Timesheet
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Timesheet Entry
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Employee Custom Field
Method | Endpoint |
POST |
|
PUT |
|
DELETE |
|
Gift Cards
Gift Card
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
PUT |
|
PUT |
|
DELETE |
|
Gift Card Custom Field
Method | Endpoint |
POST |
|
PUT |
|
DELETE |
|
Media
Image
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Message
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
DELETE |
|
Message Custom Field
Method | Endpoint |
POST |
|
PUT |
|
DELETE |
|
External Id
Applies across record types.
External Id
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
POST |
|
DELETE |
|
DELETE |
|
Custom Field
Governs external custom fields (custom fields on integrated technology records). Custom fields defined within an iPaaS.com data type are governed by that type's own custom field permission, such as Product Custom Field or Customer Custom Field.
Custom Field
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Subscription Settings
Complete Authorization
Method | Endpoint |
GET |
|
GET |
|
POST |
|
POST |
|
Export Mapping
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
DELETE |
|
Export Mapping Collection
Method | Endpoint |
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Export Translation
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Export Translation Collection
Method | Endpoint |
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Mapping
Method | Endpoint |
GET |
|
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
PUT |
|
DELETE |
|
Mapping Collection
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Subscription
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
DELETE |
|
DELETE |
|
Translation
Method | Endpoint |
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Translation Collection
Method | Endpoint |
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Webhook
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
POST |
|
DELETE |
|
DELETE |
|
DELETE |
|
DELETE |
|
Utilities
Activity Logger
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
Billing
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Company
Method | Endpoint |
GET |
|
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
Company Plan
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
PUT |
|
PUT |
|
PUT |
|
DELETE |
|
DELETE |
|
DELETE |
|
DELETE |
|
Dashboard
Method | Endpoint |
GET |
|
Debug Tracing
Method | Endpoint |
POST |
|
Method | Endpoint |
GET |
|
GET |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Error
Method | Endpoint |
GET |
|
GET |
|
POST |
|
POST |
|
PUT |
|
DELETE |
|
Event
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Event Rules
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
DELETE |
|
Invoice
Method | Endpoint |
GET |
|
GET |
|
Log
Method | Endpoint |
GET |
|
GET |
|
POST |
|
Lookup
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
Manage API Keys
Method | Endpoint |
GET |
|
POST |
|
DELETE |
|
Permission
Method | Endpoint |
GET |
|
Reporting
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
Role
Method | Endpoint |
GET |
|
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
PUT |
|
PUT |
|
DELETE |
|
User
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Integrator
These permissions apply to the integrator experience - building and maintaining integrations themselves.
Integration
Method | Endpoint |
GET |
|
GET |
|
GET |
|
PUT |
|
DELETE |
|
Integration Approval
Method | Endpoint |
POST |
|
POST |
|
Integration Category
Method | Endpoint |
POST |
|
DELETE |
|
Integration Feature Support
Method | Endpoint |
POST |
|
PUT |
|
DELETE |
|
Integration Field
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
DELETE |
|
Integration Marketing Info
Method | Endpoint |
POST |
|
PUT |
|
DELETE |
|
Integration Preset
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
DELETE |
|
Integration Register
Method | Endpoint |
POST |
|
Integration Scope
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
DELETE |
|
Integration Table
Method | Endpoint |
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
DELETE |
|
Integration Version
Method | Endpoint |
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Integrator Dynamic Formula
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
DELETE |
|
Integrator User
Method | Endpoint |
GET |
|
POST |
|
POST |
|
POST |
|
PUT |
|
DELETE |
|
Template Custom Field
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Template Mapping
Method | Endpoint |
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Template Mapping Collection
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Template Translation
Method | Endpoint |
POST |
|
PUT |
|
PUT |
|
DELETE |
|
Template Translation Collection
Method | Endpoint |
GET |
|
GET |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
MiSP Administration
These permissions apply to Managed Integration Service Providers managing the subscribers they support.
Administer Customers
Method | Endpoint |
GET |
|
Administer MISP
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
DELETE |
|
DELETE |
|
Available to All Users
These endpoints are not governed by any permission. They are reachable by any user (and, where noted, without authentication), so they do not need to be granted on a role.
Method | Endpoint |
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
GET |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
DELETE |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
POST |
|
PUT |
|
PUT |
|
PUT |
|
Appendix: Platform Permissions
These permissions exist in the platform but are not part of the standard subscriber role editor covered in the Permissions Reference. Listed here for completeness.
Generic
Method | Endpoint |
POST |
|
Global User
Method | Endpoint |
POST |
|
POST |
|
