describe_application_assignment
async
¶
describe_application_assignment(
application_arn: ApplicationArn,
principal_id: PrincipalId,
principal_type: PrincipalType,
*,
config_overrides: Optional[AsyncSSOAdminClientConfig] = None,
) -> DescribeApplicationAssignmentResponse
Retrieves a direct assignment of a user or group to an application. If the user doesn’t have a direct assignment to the application, the user may still have access to the application through a group. Therefore, don’t use this API to test access to an application for a user. Instead use ListApplicationAssignmentsForPrincipal.
Parameters:
-
application_arn(ApplicationArn) –Specifies the ARN of the application. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.
-
principal_id(PrincipalId) –An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.
-
principal_type(PrincipalType) –The entity type for which the assignment will be created.
Raises:
-
AccessDeniedException–You do not have sufficient access to perform this action.
-
InternalServerException–The request processing has failed because of an unknown error, exception, or failure with an internal server.
-
ResourceNotFoundException–Indicates that a requested resource is not found.
-
ThrottlingException–Indicates that the principal has crossed the throttling limits of the API operations.
-
ValidationException–The request failed because it contains a syntax error.
-
UnknownServiceError–The service returned an error code this client does not model.