2026-04-13: IAM Service - custom scopes and access controls

Overview

This functionality is still under development and not yet fully complete. Updates to the Management Dashboard for this area are currently in progress.

The IAM Service lets tenants define custom scopes and manage them over dedicated APIs.

Access control responses now include the following properties:

• domain property

• predefined property - tells if the access control is system-defined or user-created

• vendorAware - tells if the access control is associated with vendor scopes

The endpoint for listing access controls supports the q search parameter. Additionally, it's now possible to create, update, and delete custom access controls.

New Endpoints

Endpoint	Description
Retrieving all scopes	New endpoint for retrieving scopes.
Retrieving a scope	New endpoint for retrieving a scope.
Upserting a custom scope	New endpoint for upserting custom scopes.
Deleting a custom scope	New endpoint for deleting custom scopes.
Upserting an access control	New endpoint for upserting access controls.
Deleting an access control	New endpoint for deleting access controls.

Updated Endpoints

Endpoint	Description
Retrieving all access controls	Access control response now includes domain, predefined, and vendorAware properties; the endpoint now supports the q query parameter.
Retrieving an access control	Access control response now includes domain, predefined, and vendorAware.

Known problems

There are no known problems.