ステップ2: ユーザーとアクセスを管理する

mutation {
  authorizationManagementGrantAccess(
    grantAccessOptions: {
      groupId: "11111111-1111-1111-1111-111111111111"
      accountAccessGrants: {
        accountId: YOUR_ACCOUNT_ID
        roleId: "YOUR_ROLE_ID"
      }
    }
  ) {
    roles {
      displayName
      accountId
    }
  }
}

mutation {
  authorizationManagementRevokeAccess(
    revokeAccessOptions: {
      accountAccessGrants: {
        accountId: YOUR_ACCOUNT_ID
        roleId: "YOUR_ROLE_ID"
      }
      groupId: "YOUR_GROUP_ID"
    }
  ) {
    roles {
      accountId
      displayName
    }
  }
}

mutation {
  userManagementCreateGroup(
    createGroupOptions: {
      authenticationDomainId: "YOUR_AUTH_DOMAIN_ID"
      displayName: "GROUP_DISPLAY_NAME"
    }
  ) {
    group {
      displayName
      id
    }
  }
}

mutation {
  userManagementDeleteGroup(groupOptions: { id: "GROUP_ID_HERE" }) {
    group {
      displayName
      id
    }
  }
}

mutation {
  userManagementAddUsersToGroups(
    addUsersToGroupsOptions: { groupIds: ["II"], userIds: ["3"] }
  ) {
    groups {
      id
      displayName
      users {
        totalCount
      }
    }
  }
}

mutation {
  userManagementRemoveUsersFromGroups(
    removeUsersFromGroupsOptions: {
      groupIds: [YOUR_GROUP_IDS]
      userIds: [YOUR_USER_IDS]
    }
  ) {
    groups {
      displayName
      id
    }
  }
}

mutation {
  userManagementUpdateGroup(
    updateGroupOptions: {
      id: "YOUR_GROUP_ID"
      displayName: "NEW_GROUP_DISPLAY_NAME"
    }
  ) {
    group {
      displayName
      id
    }
  }
}

mutation {
  userManagementCreateUser(
    createUserOptions: {
      authenticationDomainId: "B"
      email: "a@b.c"
      name: "A B C"
    }
  ) {
    createdUser {
      id
      email
      name
    }
  }
}

mutation {
  userManagementDeleteUser(deleteUserOptions: { id: "ID_OF_YOUR_USER" }) {
    deletedUser {
      id
    }
  }
}

{
  customerAdministration {
    authenticationDomains(filter: { organizationId: { eq: "Y" } }) {
      items {
        id
        name
        provisioningType
        authenticationType
      }
    }
  }
}

{
  customerAdministration {
    roles(filter: { organizationId: { eq: "ANY_ORG_ID" } }) {
      items {
        id
        name
        scope
        type
      }
    }
  }
}