Queries the accounts for which access permissions are provisioned.

Usage notes

This topic provides an example on how to query the accounts for which the access permission ac-00ccule7tadaijxc**** is provisioned. The returned result shows that the access configuration is provisioned for two accounts in your resource directory.

Limits

You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request parameters

Parameter Type Required Example Description
Action String Yes ListAccessConfigurationProvisionings

The operation that you want to perform. Set the value to ListAccessConfigurationProvisionings.

DirectoryId String Yes d-00fc2p61****

The ID of the directory.

AccessConfigurationId String No ac-00ccule7tadaijxc****

The ID of the access configuration. The ID can be used to filter accounts.

TargetType String No RD-Account

The type of the task object. The type can be used to filter accounts.

Set the value to RD-Account, which indicates an account in your resource directory.

Note You can use the type to filter accounts only if you specify both TargetId and TargetType.
TargetId String No 114240524784****

The ID of the task object. The ID can be used to filter accounts.

Note You can use the ID to filter accounts only if you specify both TargetId and TargetType.
ProvisioningStatus String No Provisioned

The status of the access configuration. The value can be used to filter accounts. Valid values:

  • Provisioned: The access configuration is provisioned.
  • ReprovisionRequired: The access configuration needs to be re-provisioned.
  • DeprovisionFailed: The access configuration failed to be provisioned.
NextToken String No K1c3o9K7pFxoTtxH1Nm7MMLb7zrDGvftYBQBPDVv7AD3a8yhRb3Mk8L9ivmN6bFSjfkZNTAg3h4****

The token to return for the next page. If this is your first time to call this operation, you do not need to specify NextToken.

When you call this operation for the first time, if the total number of entries to return exceeds the value of MaxResults, the entries are truncated. Only the entries that match the value of MaxResults are returned, and the excess entries are not returned. In this case, the value of the response parameter IsTruncated is true, and NextToken is returned. In the next call, you can use the value of NextToken and maintain the settings of the other request parameters to query the excess entries. You can repeat the call until the value of IsTruncated becomes false. This way, all entries are returned.

MaxResults Integer No 10

The number of entries to return on each page.

Valid values: 1 to 20.

Default value: 10.

For more information about common request parameters, see Common parameters.

Response parameters

Parameter Type Example Description
NextToken String K1c3o9K7pFxoTtxH1Nm7MMLb7zrDGvftYBQBPDVv7AD3a8yhRb3Mk8L9ivmN6bFSjfkZNTAg3h4****

The token that is returned for the next page.

Note This parameter is returned only when the value of IsTruncated is true.
RequestId String 6BA1BDF1-D845-5D2C-B742-74BE2970E4C1

The ID of the request.

AccessConfigurationProvisionings Array of AccessConfigurationProvisioning

The accounts for which the access configuration is provisioned.

Status String Provisioned

The status of the access configuration. Valid values:

  • Provisioned: The access configuration is provisioned.
  • ReprovisionRequired: The access configuration needs to be re-provisioned.
  • DeprovisionFailed: The access configuration failed to be provisioned.
SAMLProviderName String AliyunReservedSSO-d-00fc2p61****

The name of the Security Assertion Markup Language (SAML) identity provider (IdP) that is created within an account in your resource directory.

TargetPath String rd-3G****/r-Wm****/fd-pjM8oy****/101522521960****

The path ID of the task object in your resource directory.

CreateTime String 2021-07-26T08:54:14Z

The first time when the access configuration was provisioned.

TargetName String SharedServices_5009****

The name of the task object.

TargetId String 101522521960****

The ID of the task object.

If the value of TargetType is RD-Account, the value of this parameter is the UID of an account in your resource directory.

RAMRoleName String AliyunReservedSSO-VPC-Admin

The name of the RAM role that is created for an account in your resource directory.

AccessConfigurationName String VPC-Admin

The name of the access configuration.

TargetPathName String rd-3G****/root/Core/SharedServices_5009****

The path name of the task object in your resource directory.

TargetType String RD-Account

The type of the task object.

The value is fixed as RD-Account, which indicates an account in your resource directory.

UpdateTime String 2021-07-26T08:54:18Z

The last time when the access configuration was provisioned.

RAMPolicyNames Array of String AliyunReservedSSO-VPC-Admin-InlinePolicy

The name of the custom policy that is created for an account in your resource directory.

Note This parameter is returned only if an inline policy is created for the access configuration.
AccessConfigurationId String ac-00ccule7tadaijxc****

The ID of the access configuration.

MaxResults Integer 10

The number of entries returned per page.

IsTruncated Boolean false

Indicates whether the queried entries are truncated. Valid values:

  • true: The queried entries are truncated.
  • false: The queried entries are not truncated.
TotalCounts Integer 2

The total number of entries returned.

Examples

Sample requests

https://[Endpoint]/?Action=ListAccessConfigurationProvisionings
&DirectoryId=d-00fc2p61****
&AccessConfigurationId=ac-00ccule7tadaijxc****
&<Common request parameters>

Sample success responses

XML format

HTTP/1.1 200 OK
Content-Type:application/xml

<ListAccessConfigurationProvisioningsResponse>
    <RequestId>6BA1BDF1-D845-5D2C-B742-74BE2970E4C1</RequestId>
    <AccessConfigurationProvisionings>
        <AccessConfigurationProvisioning>
            <Status>Provisioned</Status>
            <AccessConfigurationName>VPC-Admin</AccessConfigurationName>
            <SAMLProviderName>AliyunReservedSSO-d-00fc2p61****</SAMLProviderName>
            <TargetPathName>rd-3G****/root/Core/SharedServices_5009****</TargetPathName>
            <TargetPath>rd-3G****/r-Wm****/fd-pjM8oy****/101522521960****</TargetPath>
            <CreateTime>2021-07-26T08:54:14Z</CreateTime>
            <TargetType>RD-Account</TargetType>
            <UpdateTime>2021-07-26T08:54:18Z</UpdateTime>
            <TargetName>SharedServices_5009****</TargetName>
            <AccessConfigurationId>ac-00ccule7tadaijxc****</AccessConfigurationId>
            <TargetId>101522521960****</TargetId>
            <RAMRoleName>AliyunReservedSSO-VPC-Admin</RAMRoleName>
        </AccessConfigurationProvisioning>
        <AccessConfigurationProvisioning>
            <Status>ReprovisionRequired</Status>
            <AccessConfigurationName>VPC-Admin</AccessConfigurationName>
            <SAMLProviderName>AliyunReservedSSO-d-00fc2p61****</SAMLProviderName>
            <TargetPathName>rd-3G****/root/Department 1</TargetPathName>
            <TargetPath>rd-3G****/r-Wm****/195320939469****</TargetPath>
            <CreateTime>2021-07-04T09:37:31Z</CreateTime>
            <TargetType>RD-Account</TargetType>
            <UpdateTime>2021-07-26T03:02:11Z</UpdateTime>
            <TargetName>Department 1</TargetName>
            <AccessConfigurationId>ac-00ccule7tadaijxc****</AccessConfigurationId>
            <TargetId>195320939469****</TargetId>
            <RAMRoleName>AliyunReservedSSO-VPC-Admin</RAMRoleName>
        </AccessConfigurationProvisioning>
    </AccessConfigurationProvisionings>
    <MaxResults>10</MaxResults>
    <TotalCounts>2</TotalCounts>
    <IsTruncated>false</IsTruncated>
</ListAccessConfigurationProvisioningsResponse>

JSON format

HTTP/1.1 200 OK
Content-Type:application/json

{
  "RequestId" : "6BA1BDF1-D845-5D2C-B742-74BE2970E4C1",
  "AccessConfigurationProvisionings" : [ {
    "Status" : "Provisioned",
    "AccessConfigurationName" : "VPC-Admin",
    "SAMLProviderName" : "AliyunReservedSSO-d-00fc2p61****",
    "TargetPathName" : "rd-3G****/root/Core/SharedServices_5009****",
    "TargetPath" : "rd-3G****/r-Wm****/fd-pjM8oy****/101522521960****",
    "CreateTime" : "2021-07-26T08:54:14Z",
    "TargetType" : "RD-Account",
    "UpdateTime" : "2021-07-26T08:54:18Z",
    "TargetName" : "SharedServices_5009****",
    "AccessConfigurationId" : "ac-00ccule7tadaijxc****",
    "TargetId" : "101522521960****",
    "RAMRoleName" : "AliyunReservedSSO-VPC-Admin"
  }, {
    "Status" : "ReprovisionRequired",
    "AccessConfigurationName" : "VPC-Admin",
    "SAMLProviderName" : "AliyunReservedSSO-d-00fc2p61****",
    "TargetPathName" : "rd-3G****/root/department 1",
    "TargetPath" : "rd-3G****/r-Wm****/195320939469****",
    "CreateTime" : "2021-07-04T09:37:31Z",
    "TargetType" : "RD-Account",
    "UpdateTime" : "2021-07-26T03:02:11Z",
    "TargetName" : "Department 1",
    "AccessConfigurationId" : "ac-00ccule7tadaijxc****",
    "TargetId" : "195320939469****",
    "RAMRoleName" : "AliyunReservedSSO-VPC-Admin"
  } ],
  "MaxResults" : 10,
  "TotalCounts" : 2,
  "IsTruncated" : false
}

Error codes

For a list of error codes, visit the API Error Center.