Skip to content

/AWS1/CL_SSA=>DESCRAPPLICATIONASSIGNMENT()

About DescribeApplicationAssignment

Retrieves a direct assignment of a user or group to an application. If the user doesn’t have a direct assignment to the application, the user may still have access to the application through a group. Therefore, don’t use this API to test access to an application for a user. Instead use ListApplicationAssignmentsForPrincipal.

Method Signature

IMPORTING

Required arguments:

IV_APPLICATIONARN TYPE /AWS1/SSAAPPLICATIONARN /AWS1/SSAAPPLICATIONARN

Specifies the ARN of the application. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.

IV_PRINCIPALID TYPE /AWS1/SSAPRINCIPALID /AWS1/SSAPRINCIPALID

An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.

IV_PRINCIPALTYPE TYPE /AWS1/SSAPRINCIPALTYPE /AWS1/SSAPRINCIPALTYPE

The entity type for which the assignment will be created.

RETURNING

OO_OUTPUT TYPE REF TO /AWS1/CL_SSADSCAPPLICATIONAS01 /AWS1/CL_SSADSCAPPLICATIONAS01