Update application identity

PATCH

/secret-store/identities/:identity_id

Updates the token policy mode. Identity names cannot be changed after creation. Requires scope: secret-store.write.

Authentication

AuthorizationBearer

IBEE platform API token. Production tokens start with ibee_prod_key_; development tokens start with ibee_dev_key_. Use a token only with its matching gateway environment.

Path parameters

identity_idstringRequired

Secret Store application identity ID.

Query parameters

workspace_idstringRequiredformat: "^[1-9][0-9]*$">=1 character

The positive numeric workspace ID to scope this request to. Zero, negative, and non-numeric values are rejected.

Request

This endpoint expects an object.

token_policy_modeenumOptional

Updating the mode also aligns every existing scope and revokes active sessions.

Response

Identity updated successfully.

idstring

organization_idstring

workspace_idstring

namestring

auth_methodenum

openbao_role_namestring

statusenum

token_policy_modeenum

created_atdatetime

updated_atdatetime

k8s_namespacestring or nullOptional

k8s_service_accountstring or nullOptional

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

$	curl -X PATCH "https://api.ibee.ai/v1/secret-store/identities/identity_id?workspace_id=710995" \
>	-H "Authorization: Bearer <token>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"token_policy_mode": "read_write"
>	}'

1	{
2	"id": "string",
3	"organization_id": "string",
4	"workspace_id": "string",
5	"name": "string",
6	"auth_method": "approle",
7	"openbao_role_name": "string",
8	"status": "active",
9	"token_policy_mode": "read_only",
10	"created_at": "2024-01-15T09:30:00Z",
11	"updated_at": "2024-01-15T09:30:00Z",
12	"k8s_namespace": "string",
13	"k8s_service_account": "string"
14	}