targetType in the optional JSON request body to choose: identity (default), credential or agent. A file of one target type has that value in every Target Type column; to export several target types, request the download once per target type. The request body is optional, an empty request exports all identities, mapped and unmapped.| Property | Description |
|---|---|
targetType | identity (default), credential or agent. |
withMapped | Default true. Include targets mapped to an employee (owner and accessible_by rows). |
withUnmapped | Default true. Include targets without an owner, one row per target with no employee. If both withMapped and withUnmapped are false the file has no rows. |
| App | Integration ID | Employee ID | Employee Email | Target ID | Target Source ID | Target Username | Target Email | Target Type | Relation Type | Source System | Metadata Version | Metadata | Timestamp |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| aws | aws/01FX103897S15JVJAR17GS3SQT | sam@example.com | id/U-ysy2l6niyJmThu_Z-9urozE8tQBAEmJhjZ4nVxphg | identity | owner | employee_relations_csv | |||||||
| okta | okta/01H965ZRNQHAS2B8GKJA85X75C | email/CUp7jz61_N5K2qctJNyKsSFy1pZSpDneEStYN89dImw | james@example.com | identity | accessible_by | employee_relations_csv | |||||||
| azure | sam@example.com | 6f1c0f0e-sample-source-id | credential | owner | employee_relations_csv | ||||||||
| aws | aws/01FX103897S15JVJAR17GS3SQC | id/xjyKMctjdu6l3iaJwo6OkvJ8BMtvFrmWEz4yIK5xrks | identity | unmapped | employee_relations_csv |
App or Integration ID is required (agents may have no integration, so they are exempt and are located by Target ID or Target Source ID alone), at least one of Employee ID or Employee Email is required for owner, accessible_by and remove_accessible_by rows, and at least one target locator (Target ID, Target Source ID, Target Username, Target Email) is required.| Column Name | Column Description |
|---|---|
| App | Optional if Integration ID is set, the app slug of the target's integration (for example okta). An app alone resolves to its single active integration; if the app has none or more than one active integration the row is rejected and you must give the Integration ID. |
| Integration ID | Optional if App is set, the integration id of the target (for example okta/01H965ZRNQHAS2B8GKJA85X75C). When both are given they must agree. The target is looked up inside this integration. |
| Employee ID | Optional if Employee Email is set, the BalkanID employee id |
| Employee Email | Optional if Employee ID is set, the work email of the employee in the BalkanID tenant |
| Target ID | Optional, the BalkanID id of the identity, credential or agent |
| Target Source ID | Optional, the id of the identity, credential or agent in its application |
| Target Username | Optional, identities only, the username of the identity |
| Target Email | Optional, identities only, the email of the identity |
| Target Type | Optional, identity (default), credential or agent. A credential or agent row must not set Target Username or Target Email. |
| Relation Type | Optional, owner (default), accessible_by, remove_owner, remove_accessible_by, or unmapped (identities only). Use unmapped to explicitly remove an existing mapping and prevent integration syncs from re-establishing it automatically. Removals only remove mappings that were made manually, never mappings set by an integration. |
| Source System | Optional, employee_relations_csv (default) for uploads. integrations is reserved for integration extractors: rows with this Source System are skipped in a manual upload (reported as one aggregated warning) and do not fail the upload. |
| Metadata Version | Optional, must be given together with Metadata |
| Metadata | Optional, JSON, must be given together with Metadata Version |
| Timestamp | Optional, unix timestamp in seconds |
HEAD to the pollingUrl.404, the file is not ready, and you should retry this polling request after a delay.200, the file is ready, and you may proceed to download the CSV from the received url.