PolicyCortex Cloud Governance User Management: RBAC, SSO & Compliance

{
  "custom_role": {
    "name": "Senior Compliance Officer",
    "description": "Enhanced compliance role with limited admin capabilities",
    "permissions": {
      "policies": {
        "create": true,
        "read": true,
        "update": true,
        "delete": false,
        "deploy": true,
        "scope": ["production", "staging"]
      },
      "scans": {
        "create": true,
        "read": true,
        "cancel": true,
        "schedule": true,
        "scope": ["all_environments"]
      },
      "reports": {
        "create": true,
        "read": true,
        "download": true,
        "schedule": true,
        "share": true,
        "sensitive_data_access": true
      },
      "users": {
        "invite": true,
        "read": true,
        "modify_roles": false,
        "scope": ["compliance_team"]
      },
      "audit": {
        "read": true,
        "export": true,
        "retention_period": "7_years"
      },
      "integrations": {
        "read": true,
        "configure": false
      },
      "environments": {
        "production": "full_access",
        "staging": "full_access",
        "development": "read_only"
      },
      "data_access": {
        "pii_access": true,
        "financial_data": true,
        "security_credentials": false
      }
    },
    "restrictions": {
      "ip_allowlist": ["10.0.0.0/8", "192.168.1.0/24"],
      "time_restrictions": {
        "business_hours_only": false,
        "timezone": "America/New_York"
      },
      "mfa_required": true,
      "session_timeout": "4h",
      "concurrent_sessions": 2
    }
  }
}

# Create new user
curl -X POST "https://api.policycortex.com/v1/users" \
  -H "Authorization: Bearer sk_live_1234567890abcdef" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "new.user@company.com",
    "first_name": "New",
    "last_name": "User",
    "role": "compliance_manager",
    "teams": ["compliance_team"],
    "send_invitation": true,
    "temporary_access": {
      "expires_at": "2024-12-31T23:59:59Z",
      "requires_approval": true
    }
  }'

# Update user role
curl -X PATCH "https://api.policycortex.com/v1/users/usr_1234567890abcdef" \
  -H "Authorization: Bearer sk_live_1234567890abcdef" \
  -H "Content-Type: application/json" \
  -d '{
    "role": "security_analyst",
    "reason": "Department transfer to Security Operations",
    "effective_date": "2024-02-01T00:00:00Z"
  }'

# List users with filtering
curl -X GET "https://api.policycortex.com/v1/users?role=compliance_manager&status=active&team=compliance_team" \
  -H "Authorization: Bearer sk_live_1234567890abcdef"

# Deactivate user
curl -X POST "https://api.policycortex.com/v1/users/usr_1234567890abcdef/deactivate" \
  -H "Authorization: Bearer sk_live_1234567890abcdef" \
  -H "Content-Type: application/json" \
  -d '{
    "reason": "Employee termination",
    "transfer_resources_to": "usr_manager123",
    "revoke_api_keys": true,
    "schedule_data_retention": "90d"
  }'

# Bulk user operations
curl -X POST "https://api.policycortex.com/v1/users/bulk" \
  -H "Authorization: Bearer sk_live_1234567890abcdef" \
  -H "Content-Type: application/json" \
  -d '{
    "operation": "role_update",
    "users": [
      {"id": "usr_123", "role": "senior_analyst"},
      {"id": "usr_456", "role": "senior_analyst"}
    ],
    "reason": "Quarterly role review",
    "effective_date": "2024-04-01T00:00:00Z"
  }'

# Generate access review report
curl -X POST "https://api.policycortex.com/v1/users/access-review" \
  -H "Authorization: Bearer sk_live_1234567890abcdef" \
  -H "Content-Type: application/json" \
  -d '{
    "scope": {
      "teams": ["compliance_team", "security_team"],
      "roles": ["system_administrator", "compliance_manager"],
      "include_temporary_access": true
    },
    "reviewers": {
      "include_managers": true,
      "include_compliance_team": true
    },
    "format": "pdf",
    "delivery": {
      "email": ["compliance@company.com"],
      "due_date": "2024-02-15T17:00:00Z"
    }
  }'