Provision a group

Creates an access group. Members are given as LangWatch user ids, the same ids the Users endpoints return; an id that is not a member of the organization is skipped rather than failing the call, so a group can be provisioned before everyone in it is. Granting the group access is a separate step: a group carries no permissions until a role binding is created for it.

POST /api/scim/v2/Groups

Provision a group

Python

import requests

url = "https://app.langwatch.ai/api/scim/v2/Groups"

payload = {
    "schemas": ["<string>"],
    "displayName": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/scim+json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

201

{
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:Group"
  ],
  "id": "<string>",
  "displayName": "<string>",
  "meta": {
    "resourceType": "Group",
    "created": "<string>",
    "lastModified": "<string>"
  },
  "externalId": "<string>",
  "members": [
    {
      "value": "<string>",
      "display": "<string>"
    }
  ]
}

Authorizations

Authorization · string · header · required

SCIM token for one organization's directory connection, created with POST /api/scim-tokens or in Settings > SCIM. It authenticates provisioning calls only, and stops working if the organization's Enterprise plan lapses.

Body

application/scim+json

schemas · string[] · required

displayName · string · required

externalId · string

Minimum string length: 1

members · object[]

Show child attributes

Response

201

application/scim+json

The provisioned group.

schemas · string[] · required

Allowed value: "urn:ietf:params:scim:schemas:core:2.0:Group"

id · string · required

displayName · string · required

meta · object · required

Show child attributes

externalId · string

members · object[]

Show child attributes