Allowed durations (in seconds) for access requests to resources in this integration. If omitted or set to null, company defaults are used. Empty array is not allowed. Values must be from the predefined enum.

Workflow to associate with this integration (object with 'id' UUID). To get available workflow IDs, use GET /public/v1/workflows.

Owner of the integration (user entity object). To get user entities, use GET /public/v1/users. Provide an object with 'id' (UUID) or 'email' (string) to identify the user.

Maintainers of the integration. Each maintainer can be either a user or a group. For users, use GET /public/v1/users to get user IDs. For groups, use GET /public/v1/directoryGroups to get group IDs. Provide objects with 'type' ('user' or 'group') and 'id' (UUID).

Prerequisite permissions grouped by any-of/all-of sets. Outer array represents OR logic (any set can match), inner arrays represent AND logic (all permissions in a set must match). To get role permission IDs, use GET /public/v1/roles?resourceId=.

Application to integrate (object with 'name'). For connector-backed integrations, use an application name from GET /public/v1/applications (e.g., 'Google Groups', 'Okta', 'AWS'). For adapterless integrations, use special values: 'Virtual Application' for virtual integrations or 'Manual' for manual integrations. Virtual integrations are for modeling external systems without a connector. Manual integrations are for purely manual access management.

On-premises agent token to route this integration through (object with 'name'). Only required for integrations that need to connect through an on-premises agent.

Connector configuration JSON containing credentials and settings specific to the application type. Required for connector-backed integrations (e.g., API keys, OAuth tokens, service account credentials). Set to null for adapterless integrations ('Virtual Application' or 'Manual'). The structure varies by application - refer to the specific connector documentation for required fields.