Describe a Dimension

curl --request GET \
  --url https://wksusa1b2c3d.provisionr.app/api/v1/directory/dimensions/{dimension} \
  --header 'Authorization: Bearer <token>'

$headers=@{}
$headers.Add("Authorization", "Bearer <token>")
$response = Invoke-WebRequest -Uri 'https://wksusa1b2c3d.provisionr.app/api/v1/directory/dimensions/{dimension}' -Method GET -Headers $headers

import requests

url = "https://wksusa1b2c3d.provisionr.app/api/v1/directory/dimensions/{dimension}"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://wksusa1b2c3d.provisionr.app/api/v1/directory/dimensions/{dimension}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "id": "drdim_01hq8xyzabc123def456ghi789",
  "state": "staged",
  "integration_id": "gitg_01hq8xyzabc123def456ghi789",
  "integration_type": "App\\Models\\GoogleIntegration",
  "profile_key": "department",
  "name": "Department",
  "handle": "dept",
  "attributes_enabled": true,
  "conditions_enabled": true,
  "expires_after_days": 30,
  "metadata": {},
  "timestamp": {
    "created_at": "2025-01-28T13:37:00Z",
    "updated_at": "2025-05-04T03:27:00Z",
    "activated_at": "2025-03-14T15:07:00Z",
    "expires_at": null,
    "deleted_at": null
  },
  "count": [
    "<string>"
  ],
  "included": {
    "directory_attributes": [
      {
        "id": "dratr_01hq8xyzabc123def456ghi789",
        "state": "active",
        "type": "integration",
        "parent": "Department",
        "name": "Engineering",
        "handle": "eng",
        "blueprint_signature": "{blueprint_id_last4}-{dimension_id}-{attribute_id}-{ref_id}",
        "profile_value": "Engineering"
      }
    ],
    "integration": {
      "id": "gitg_01hq8xyzabc123def456ghi789",
      "vendor": "google",
      "is_primary": true
    }
  },
  "links": {
    "self": "<string>",
    "directory_attributes": "<string>",
    "integration": "<string>"
  }
}

{
  "message": "<string>"
}

{
  "message": "<string>"
}

{
  "message": "<string>"
}

GET

directory

dimensions

{dimension}

Describe a Dimension

curl --request GET \
  --url https://wksusa1b2c3d.provisionr.app/api/v1/directory/dimensions/{dimension} \
  --header 'Authorization: Bearer <token>'

$headers=@{}
$headers.Add("Authorization", "Bearer <token>")
$response = Invoke-WebRequest -Uri 'https://wksusa1b2c3d.provisionr.app/api/v1/directory/dimensions/{dimension}' -Method GET -Headers $headers

import requests

url = "https://wksusa1b2c3d.provisionr.app/api/v1/directory/dimensions/{dimension}"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://wksusa1b2c3d.provisionr.app/api/v1/directory/dimensions/{dimension}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "id": "drdim_01hq8xyzabc123def456ghi789",
  "state": "staged",
  "integration_id": "gitg_01hq8xyzabc123def456ghi789",
  "integration_type": "App\\Models\\GoogleIntegration",
  "profile_key": "department",
  "name": "Department",
  "handle": "dept",
  "attributes_enabled": true,
  "conditions_enabled": true,
  "expires_after_days": 30,
  "metadata": {},
  "timestamp": {
    "created_at": "2025-01-28T13:37:00Z",
    "updated_at": "2025-05-04T03:27:00Z",
    "activated_at": "2025-03-14T15:07:00Z",
    "expires_at": null,
    "deleted_at": null
  },
  "count": [
    "<string>"
  ],
  "included": {
    "directory_attributes": [
      {
        "id": "dratr_01hq8xyzabc123def456ghi789",
        "state": "active",
        "type": "integration",
        "parent": "Department",
        "name": "Engineering",
        "handle": "eng",
        "blueprint_signature": "{blueprint_id_last4}-{dimension_id}-{attribute_id}-{ref_id}",
        "profile_value": "Engineering"
      }
    ],
    "integration": {
      "id": "gitg_01hq8xyzabc123def456ghi789",
      "vendor": "google",
      "is_primary": true
    }
  },
  "links": {
    "self": "<string>",
    "directory_attributes": "<string>",
    "integration": "<string>"
  }
}

{
  "message": "<string>"
}

{
  "message": "<string>"
}

{
  "message": "<string>"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

dimension

string

required

Directory Dimension ID

Query Parameters

filter[id]

string

filter[trashed]

string

Can be a value of with (response will contain deleted items as well), only (will contain only deleted items), or any arbitrary value (will contain only not deleted items).

include

enum<string>[]

Available options:

attributes,

attributes-count,

attributes-exists,

integration,

integration-count,

integration-exists

filter

string

Response

DirectoryDimensionDetailedResponseData

string

required

Example:

"drdim_01hq8xyzabc123def456ghi789"

state

enum<string>

required

The state of the directory dimension


`staged` The record is staged and is only visible to administrators or in the API. Use the `activate` method during your change window.
`active` The record is active.
`expiring` The `expires_at` value is set in the future for the record. You can run the `activate` action to remove the scheduled expiration.
`expired` The `expires_at` value is in the past and the record was deactivated.
`deactivated` The record was deactivated manually by an administrator.

Available options:

staged,

active,

expiring,

expired,

deactivated

integration_id

string | null

required

The ID of the integration this dimension was sourced from (polymorphic).

Use this together with integration_type when creating an identity-type Policy Condition

Example:

"gitg_01hq8xyzabc123def456ghi789"

integration_type

string | null

required

The type of the integration this dimension was sourced from (polymorphic).

This is the value expected by integration_type when creating an identity-type Policy Condition

Example:

"App\\Models\\GoogleIntegration"

profile_key

string | null

required

The name of the key from the Workspace Integration that is in the Identity metadata array to get values from

Example:

"department"

name

string

required

The display name of the dimension. Any dimensions that are imported from the Integration are formatted with Headline/Title case

Example:

"Department"

handle

string

required

The alpha dash, lowercase abbreviated name of the dimension that is safe to use in email handles and URL paths

Example:

"dept"

attributes_enabled

boolean

required

If enabled, a Directory Attribute record is automatically created for each Dimension Attribute value from the unique Identity metadata profile_key values

conditions_enabled

boolean

required

If disabled, Attributes in this Dimension will not appear in the list of available options when creating a Rule Condition.

This is used when you want to have metadata about users but do not want future maintenance burden with rulesets using this data

expires_after_days

integer | null

required

Users will be automatically deprecated if they no longer qualify for at least one rule in the ruleset.

The expires_after_days value determines how many days after they no longer qualify that they still have access for a graceful transition period when users change job roles.

The value is inherited from the Workspace > Dimension > Attribute/Resource > Rule and can be overridden at any level to provide shorter revoke time controls when needed.

If the value is 0, this skips the grace period and revokes access immediately after expires_at.

By default, users have perpetual access (as Policy Users) as long as their attributes continue to match the conditions for the rule. If the rule is designed for just-in-time or short term access, you can set the expires_at date for all conditional users to be deprecated at that time.

You can use expires_at and expires_after_days=0 together to revoke access immediately.

Best Practice: You should the "low risk" sensible default (ex. 30 days) at the Dimension level and set more strict values at the Attribute/Resource levels where an exception needs to be granted.

A null value means no override is set at this level, so the grace period is inherited from the parent level

Example:

30

metadata

object

required

The dimension's custom key/value metadata added by someone or automation in your organization

Show child attributes

timestamp

TimestampStateData · object

required

The timestamps for the directory dimension record

Show child attributes

count

string[]

required

Counts of related resources.

directory_attributes: int|null audit_logs_parent: int|null, audit_logs_record: int|null, audit_logs_related: int|null, }

Minimum array length: 1

included

object

required

Included related resources

Show child attributes

links

object

required

API hyperlinks related to the directory dimension record

Show child attributes

Getting Started

Endpoints

Describe a Dimension

Authorizations

Path Parameters

Query Parameters

Response