App Management Policies API
App Management Policies API
Admin APIs for tenant app-management policies under
/apps-srv/app-management-policies. This specification documents the
Client ID Metadata Document (CIMD) policy (policyType=cimd): list/seed,
get by id, and replace.
The same routes also serve other policy types (developer_portal, dcr).
Those payloads differ; this reference focuses on CIMD.
Requires Trustdesk / admin access. CIMD must be enabled for your tenant.
Authentication
| Operation | Scope | Roles |
|---|---|---|
| GET list, GET by id | cidaas:apps_read | ADMIN, SECONDARY_ADMIN |
| PUT replace | cidaas:apps_write | ADMIN, SECONDARY_ADMIN |
Missing or invalid token returns 401. Callers without a required admin
role receive 403 (APP10023).
CIMD behaviour
- List (
GET) always returns a JSON array indata. With?type=cimdand CIMD disabled, the list is empty (HTTP 200). With CIMD enabled and no policy yet, GET creates the default policy (enabled: true, emptyhostRules) and returns it. - Get by id does not create a missing policy. CIMD disabled →
404
APP10153. Unknown id → 404APP10125. - PUT for CIMD is replace-only. Call list/GET with
type=cimdfirst if needed; PUT when no policy exists → 404APP10125. Successful replace → 200.
There is no delete for CIMD; turn off admission with cimd.enabled or empty
host rules.
Related documentation
Authentication
- OAuth 2.0: oauth2.0
Security Scheme Type: | oauth2 |
|---|---|
OAuth Flow (authorizationCode): | Token URL: https://domain/token-srv/token Authorization URL: https://domain/authz-srv/authz Scopes:
|
OAuth Flow (clientCredentials): | Token URL: https://domain/token-srv/token Scopes:
|
Contact cidaas support: [email protected]
Terms of Servicehttps://www.cidaas.com/terms-of-use/