Iron Leap

<p>Iron Leap APIs provide a unified interface to access permissions, activity, and configuration information within hundreds of SaaS apps.</p><br><p>Extracting this information from each SaaS app individually would require individual API integrations with each SaaS, manually downloading access logs, screen scraping permissions information, and other cumbersome processing.</p><br><p>Potential use cases of the Iron Leap API include:</p><br><ul><li>An enterprise search company can use the Permissions API to determine which employees are allowed to view documents in different SaaS apps. For example, if a Google Drive file is not visible to an employee, the file should not show up in that employee's search results.</li><li>A SaaS security company can use the Activity API to monitor login activity across SaaS apps. Repeated failed login attempts may indicate a brute force attack.</li><li>A SaaS spend management company can use the Activity API to determine there are multiple unused licenses to Zoom. They can recommend to the client that some Zoom licenses should be dropped.</li></ul><br><p>Are you interested in this type of data? Please&nbsp;</p><br><ul><li>sign up at <a target="_blank" rel="noopener noreferrer" href="https://ironleap.io/">ironleap.io</a></li><li>reach out to <a href="mailto:founders@ironleap.io">founders@ironleap.io</a></li><li><a target="_blank" rel="noopener noreferrer" href="https://calendly.com/varun-iron-leap/15min">schedule a time to chat</a></li></ul><br>

Iron Leap API Reference

Authentication

<p>Saas apps have various kind of <i>resources</i> (e.g. Google Drive Files, Monday.com Boards, etc.). <i>Users</i> of the Saas possess different levels of <i>permissions</i> (e.g. read, write, share, etc.) to act upon the resource. The  API enables you to determine and update the permissions levels of users for various resources.</p><br><p>The Iron Leap Permissions Object has the following attributes&nbsp;</p><br><figure class="table"><table><thead><tr><th>Title</th><th>Type</th><th>Optional?</th><th>Description</th></tr></thead><tbody><tr><td>id</td><td>string</td><td>no</td><td>Permissions Object id</td></tr><tr><td>read</td><td>boolean</td><td>yes</td><td>Read permissions of user on resource</td></tr><tr><td>edit</td><td>boolean</td><td>yes</td><td>Edit permissions of user on resource</td></tr><tr><td>delete</td><td>boolean</td><td>yes</td><td>Delete permissions of user on resource</td></tr><tr><td>share</td><td>boolean</td><td>yes</td><td>Share permissions of user on resource</td></tr><tr><td>resource</td><td>Resource</td><td>no</td><td>Resource specification</td></tr><tr><td>user</td><td>User</td><td>no</td><td>User specification</td></tr></tbody></table></figure><br><p>The Iron Leap User Object referenced above:</p><br><figure class="table"><table><thead><tr><th>Field</th><th>Type</th><th>Optional?</th><th>Description</th></tr></thead><tbody><tr><td>id</td><td>string</td><td>yes</td><td>A unique user id</td></tr><tr><td>email</td><td>string</td><td>yes</td><td>User's email address</td></tr><tr><td>name</td><td>string</td><td>yes</td><td>User's name</td></tr></tbody></table></figure><br><p>The Iron Leap Resource Object referenced above:</p><br><figure class="table"><table><thead><tr><th>Field</th><th>Type</th><th>Optional?</th><th>Description</th></tr></thead><tbody><tr><td>resource_backend</td><td>string</td><td>no</td><td>The SaaS Backend of the resource (e.g. “Google Drive”, “Dropbox”, etc.)</td></tr><tr><td>resource_type</td><td>string</td><td>no</td><td>The type of the resource within the SaaS Backend (e.g. “file”, “folder”, “board”, “message” etc.)</td></tr><tr><td>resource_id</td><td>string</td><td>no</td><td>Unique id identifying the resource within the SaaS Backend</td></tr></tbody></table></figure><br>

Permissions

<p><span style="color:rgb(105,118,137)!important;">GET</span> /v1/permissions</p><br><p>Given a resource, this endpoint fetches the corresponding Permissions objects. For example, for a particular Google Drive Folder, we can retrieve the Permissions objects associated with that folder to determine all the users that have edit permissions.</p><br><figure class="table ck-widget ck-widget_with-selection-handle" contenteditable="false"><table class="request-editor-view" style="border-width:0;" id="305fa3e6-ab2b-412f-b8ac-f73edcdb8036-request"><tbody><tr><td>Title</td><td>Required?</td><td>Type</td><td>Description</td></tr><tr><td>resource_backend</td><td>yes</td><td>string</td><td>The SaaS Backend of the resource (e.g. “Google Drive”, “Dropbox”, etc.)</td></tr><tr><td>resource_type</td><td>yes</td><td>string</td><td>The type of the resource within the SaaS Backend (e.g. “file”, “folder”, “board”, “message” etc.)</td></tr><tr><td>resource_id</td><td>yes</td><td>string</td><td>Unique id identifying the resource within the SaaS Backend</td></tr></tbody></table></figure><br>

Get Permissions by Resource

<p>POST /v1/permissions</p><br><p>Given a resource, a user, and permissions settings, this endpoint adds a new Permissions object. If a Permissions object already exists for the given user and resource, then the permissions settings are updated with the supplied values.</p><br><figure class="table ck-widget ck-widget_with-selection-handle" contenteditable="false"><table class="request-editor-view" style="border-width:0;" id="5d6ffa97-a523-4878-99a3-2ba60d6862d5-request"><tbody><tr><td>Title</td><td>Required?</td><td>Type</td><td>Description</td></tr><tr><td>read</td><td>no</td><td>boolean</td><td>Whether the resource should be readable</td></tr><tr><td>edit</td><td>no</td><td>boolean</td><td>Whether the resource should be editable</td></tr><tr><td>delete</td><td>no</td><td>boolean</td><td>Whether the resource should be deletable</td></tr><tr><td>share</td><td>no</td><td>boolean</td><td>Whether the resource should be shareable</td></tr><tr><td>user</td><td>yes</td><td>User</td><td>User object that specifies a valid user</td></tr><tr><td>resource</td><td>yes</td><td>Resource</td><td>Resource object identifying a valid resource in a SaaS backend</td></tr></tbody></table></figure><br>

Update Permissions

<p>Iron Leap provides event information about user's activity. Here is the most basic event construct, Iron Leap provides for users.</p><br><figure class="table"><table><thead><tr><th>Title</th><th>Type</th><th>Description</th></tr></thead><tbody><tr><td>actor</td><td>string</td><td>Event's actor (e.g. an 3rd party application, a user, etc).</td></tr><tr><td>event_tags</td><td>string list</td><td>Provides enriched tags provides descriptions about the event.</td></tr><tr><td>event_timestamp</td><td>string</td><td>Details when event occurred.</td></tr><tr><td>resource_backend</td><td>string</td><td>Where the event occurred.</td></tr><tr><td>event_data</td><td>string</td><td>Raw event data.</td></tr></tbody></table></figure><br>

Activity

<p><span style="color:rgb(105,118,137)!important;">GET</span> /v1/activity</p><br><p style="line-height:1.2;margin-bottom:12pt;margin-top:12pt;" dir="ltr"><span style="background-color:transparent;color:#000000;">Retrieve activity data via a paginated api call. Results will be returned from most recent to least sorted order.</span></p><br><figure class="table ck-widget ck-widget_with-selection-handle" contenteditable="false"><table class="request-editor-view" style="border-width:0;" id="5d6ffa97-a523-4878-99a3-2ba60d6862d5-request"><tbody><tr><td>Title</td><td>Required?</td><td>Type</td><td>Description</td></tr><tr><td>resource_backends</td><td>no</td><td>strings</td><td>Whether the resource should be readable</td></tr><tr><td>event_tags</td><td>yes</td><td>list of strings</td><td>Whether the resource should be editable</td></tr><tr><td>pagination_token</td><td>yes</td><td>boolean</td><td>Whether the resource should be deletable</td></tr></tbody></table></figure><br>

Get Activity

Integrations

<p class="slate-p"><p class="slate-p">Iron Leap APIs provide a unified interface to access permissions, activity, and configuration information within hundreds of SaaS apps.</p><p class="slate-p"><br /></p><p class="slate-p">Extracting this information from each SaaS app individually would require individual API integrations with each SaaS, manually downloading access logs, screen scraping permissions information, and other cumbersome processing.</p><p class="slate-p"><br /></p><p class="slate-p">Potential use cases of the Iron Leap API include:</p><p class="slate-p"><br /></p><ul class="slate-ul"><li class="slate-li">An enterprise search company can use the Permissions API to determine which employees are allowed to view documents in different SaaS apps. For example, if a Google Drive file is not visible to an employee, the file should not show up in that employee&apos;s search results.</li><li class="slate-li">A SaaS security company can use the Activity API to monitor login activity across SaaS apps. Repeated failed login attempts may indicate a brute force attack.</li><li class="slate-li">A SaaS spend management company can use the Activity API to determine there are multiple unused licenses to Zoom. They can recommend to the client that some Zoom licenses should be dropped.</li></ul><p class="slate-p"><br /></p><p class="slate-p">Are you interested in this type of data? Please </p><p class="slate-p"><br /></p><ul class="slate-ul"><li class="slate-li">sign up at <a class="slate-a" href="https://ironleap.io/" target="_blank">ironleap.io</a></li><li class="slate-li">reach out to <a class="slate-a" href="mailto:founders@ironleap.io" target="_blank">founders@ironleap.io</a></li><li class="slate-li"><a class="slate-a" href="https://calendly.com/varun-iron-leap/15min" target="_blank">schedule a time to chat</a></li></ul><p class="slate-p"><br /></p></p>

<p class="slate-p"><p class="slate-p">Iron Leap provides event information about user&apos;s activity. Here is the most basic event construct, Iron Leap provides for users.</p><p class="slate-p"><br /></p><table class="slate-table"><colgroup contenteditable="false"></colgroup><tbody class="slate-TableElement-tbody"><tr class="slate-tr"><th class="slate-th">Title</th><th class="slate-th">Type</th><th class="slate-th">Description</th></tr><tr class="slate-tr"><td class="slate-td"><div class="slate-TableCellElement-content">actor</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">string</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">Event&apos;s actor (e.g. an 3rd party application, a user, etc).</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td></tr><tr class="slate-tr"><td class="slate-td"><div class="slate-TableCellElement-content">event_tags</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">string list</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">Provides enriched tags provides descriptions about the event.</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td></tr><tr class="slate-tr"><td class="slate-td"><div class="slate-TableCellElement-content">event_timestamp</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">string</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">Details when event occurred.</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td></tr><tr class="slate-tr"><td class="slate-td"><div class="slate-TableCellElement-content">resource_backend</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">string</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">Where the event occurred.</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td></tr><tr class="slate-tr"><td class="slate-td"><div class="slate-TableCellElement-content">event_data</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">string</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td><td class="slate-td"><div class="slate-TableCellElement-content">Raw event data.</div><div class="slate-TableCellElement-resizableWrapper" contenteditable="false"><div style="position:relative;user-select:auto;width:100%;height:100%;box-sizing:border-box;flex-shrink:0" ><div><div  style="position:absolute;user-select:none;width:10px;height:calc(100% + 12px);top:-12px;cursor:col-resize;right:-5px;z-index:20"></div></div></div><div class="slate-TableCellElement-handle"></div></div><div class="slate-TableCellElement-selectedCell" contenteditable="false"></div></td></tr></tbody></table><p class="slate-p"><br /></p></p>

Sections