Skip to main content
Answer

Roles not reported with SCIM API

  • June 9, 2025
  • 1 reply
  • 50 views

Forum|alt.badge.img+1

I noticed a discrepancy when using the REST and SCIM APIs. The SCIM API returns empty roles (incorrectly) for all users, while the REST API is returning the correct roles. Am I missing something?

Best answer by Humas1985

Hi ​@ameyah 

This is a recognized limitation of the Lucidchart SCIM API.

Unlike the Lucidchart REST API, the SCIM API doesn't provide user roles in the same manner.

  • This is because the SCIM standard and Lucidchart's implementation prioritize user and group provisioning, as well as basic management, over exposing detailed role information.
  • Consequently, querying users via the SCIM API will result in an empty or omitted roles field, despite the REST API providing this data accurately.

For precise role information, we recommend continuing to use the REST API, which is designed to deliver comprehensive user data, including roles. The primary function of the SCIM API is to facilitate user and group provisioning, rather than serving as a complete directory for all user attributes

Hope this helps - Happy to help further!!
Thank you very much and have a great one!
Warm regards

Comments

Humas1985
Lucid Legend Level 10
Forum|alt.badge.img+24
  • Lucid Legend Level 10
  • Answer
  • June 9, 2025

Hi ​@ameyah 

This is a recognized limitation of the Lucidchart SCIM API.

Unlike the Lucidchart REST API, the SCIM API doesn't provide user roles in the same manner.

  • This is because the SCIM standard and Lucidchart's implementation prioritize user and group provisioning, as well as basic management, over exposing detailed role information.
  • Consequently, querying users via the SCIM API will result in an empty or omitted roles field, despite the REST API providing this data accurately.

For precise role information, we recommend continuing to use the REST API, which is designed to deliver comprehensive user data, including roles. The primary function of the SCIM API is to facilitate user and group provisioning, rather than serving as a complete directory for all user attributes

Hope this helps - Happy to help further!!
Thank you very much and have a great one!
Warm regards