Create a resource - virtual or manual

Creates a new resource for manual or virtual integrations.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
required
length ≤ 2048

Optional custom description.

userDefinedTags
array of strings
required

Optional custom tags.

userDefinedTags*
allowedDurations
array of objects | null
required

Allowed durations (in seconds) for access requests to this resource. If omitted or set to null, inherits from the parent integration's allowed durations. Empty array is not allowed. Values must be from the predefined enum.

allowedDurations*
boolean
required

Whether the resource is requestable.

workflow
object | null
required

Workflow associated with the resource (object with 'id' UUID). To get available workflow IDs, use GET /public/v1/workflows. If null, inherits from the parent integration's workflow.

owner
object | null
required

Owner of the resource (user entity object). To get user entities, use GET /public/v1/users. Provide an object with 'id' (UUID) or 'email' (string) to identify the user. If null, inherits from the parent integration's owner.

maintainers
array of objects
required

Maintainers of the resource. Each maintainer can be either a user or a group. For users, use GET /public/v1/users to get user IDs. For groups, use GET /public/v1/directoryGroups to get group IDs. Provide objects with 'type' ('user' or 'group') and 'id' (UUID). If null, inherits from the parent integration's maintainers.

maintainers*
prerequisitePermissions
array of arrays of objects
required

Prerequisite permissions grouped by any-of/all-of sets. Outer array represents OR logic (any set can match), inner arrays represent AND logic (all permissions in a set must match). To get role permission IDs, use GET /public/v1/roles?resourceId=.

prerequisitePermissions*
integration
object
required

Integration to attach the resource to (object with 'id' UUID). To get integration IDs, use GET /public/v1/integrations. The resource will be created within this integration.

string
required
length between 2 and 50

Display name for the resource

boolean
required

Whether the resource includes multiple roles.

string
required
length between 2 and 50

Optional resource type label.

roles
array of objects

Initial roles to create with the resource. For virtual or manual integrations, at least one role must be provided (either via this field or by creating roles separately after resource creation). Each role needs a 'name' and optionally a 'virtualizedRoleId' to link to an existing virtualized role. To get virtualized role IDs, first create a 'Virtual Application' integration with resources and roles, then use GET /public/v1/roles?resourceId= where the resource belongs to that virtual integration.

roles
Response

Language
Credentials
Bearer
JWT
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json

©2003-2026 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.