Roles and Permissions

This page lists the MATTR VII platform roles and the full set of endpoints each role is authorized to access.

admin

Path	POST	GET	PUT	DELETE
/v1/analytics/events
/v1/events
/v1/analytics/event-types
/v1/event-types
/v1/claim-sources
/v1/claim-sources/{id}
/v1/config/domain
/v1/config/domain/verify
/v1/config/domain/invalidate
/v1/config/ecosystems
/v2/credentials/compact/configurations
/v2/credentials/compact/configurations/{id}
/v2/credentials/compact/digital-pass/apple
/v2/credentials/compact/digital-pass/apple/templates
/v2/credentials/compact/digital-pass/apple/templates/{id}
/v2/credentials/compact/digital-pass/google
/v2/credentials/compact/digital-pass/google/templates
/v2/credentials/compact/digital-pass/google/templates/{id}
/v2/credentials/compact/pdf/templates
/v2/credentials/compact/pdf/templates/{id}
/v2/credentials/compact/sign
/v2/credentials/compact/verify
/v2/credentials/compact/qrcode
/v2/credentials/compact/pdf
/v2/credentials/compact/{id}
/v2/credentials/compact/{id}/revocation-status
/v2/credentials/compact-semantic/{id}
/v2/credentials/compact-semantic/configurations
/v2/credentials/compact-semantic/configurations/{id}
/v2/credentials/compact-semantic/digital-pass/apple
/v2/credentials/compact-semantic/digital-pass/apple/templates
/v2/credentials/compact-semantic/digital-pass/apple/templates/{id}
/v2/credentials/compact-semantic/digital-pass/google
/v2/credentials/compact-semantic/digital-pass/google/templates
/v2/credentials/compact-semantic/digital-pass/google/templates/{id}
/v2/credentials/compact-semantic/pdf/templates
/v2/credentials/compact-semantic/pdf/templates/{id}
/v2/credentials/compact-semantic/sign
/v2/credentials/compact-semantic/verify
/v2/credentials/compact-semantic/{id}/revocation-status
/v2/credentials/compact-semantic/pdf
/v2/credentials/compact-semantic/qrcode
/v2/credentials/mobile/{credentialId}
/v2/credentials/mobile/configurations
/v2/credentials/mobile/configurations/{id}
/v2/credentials/mobile/{credentialId}/status
/v2/credentials/mobile/document-signers
/v2/credentials/mobile/document-signers/{documentSignerId}
/v2/credentials/mobile/document-signers/{documentSignerId}/revoke
/v2/credentials/mobile/iacas
/v2/credentials/mobile/iacas/{iacaId}
/v2/credentials/mobile/sign
/v2/credentials/mobile/verify
/v2/credentials/mobile/status-lists
/v2/credentials/mobile/status-lists/{statusListsId}
/v2/credentials/mobile/status-lists/configurations
/v2/credentials/mobile/status-lists/configurations/{statusListConfigurationId}
/v2/credentials/mobile/status-list-signers
/v2/credentials/mobile/status-list-signers/{statusListSignerId}
/v2/credentials/mobile/status-list-signers/{statusListSignerId}/revoke
/v2/credentials/mobile/trusted-issuers
/v2/credentials/mobile/trusted-issuers/{trustedIssuerId}
/v2/credentials/web-semantic
/v2/credentials/web-semantic/{id}
/v2/credentials/web-semantic/{id}/revocation-status
/v2/credentials/web-semantic/{id}/revocation-status/notification
/v2/credentials/web-semantic/linked-data/convert
/v2/credentials/web-semantic/sign
/v2/credentials/web-semantic/verify
/v2/credentials/web-semantic/configurations
/v2/credentials/web-semantic/configurations/{id}
/v2/credentials/web-semantic/presentations
/v2/credentials/web-semantic/presentations/verify
/v2/credentials/web-semantic/presentations/templates
/v2/credentials/web-semantic/presentations/templates/{id}
/v2/credentials/web-semantic/presentations/requests
/v2/credentials/web-semantic/presentations/requests/{id}
/v1/dids
/v1/dids/{did}
/v1/ecosystems
/v1/ecosystems/{ecosystemId}
/v1/ecosystems/{ecosystemId}/credentials
/v1/ecosystems/{ecosystemId}/credentials/{credentialId}
/v1/ecosystems/{ecosystemId}/participants
/v1/ecosystems/{ecosystemId}/participants/{participantId}
/v1/ecosystems/{ecosystemId}/participants/{participantId}/credentials
/v1/ecosystems/{ecosystemId}/policies
/v1/ecosystems/{ecosystemId}/participants/{participantId}/issuer/credentials
/v1/ecosystems/{ecosystemId}/participants/{participantId}/issuer/credentials/{credentialId}
/v1/ecosystems/{ecosystemId}/participants/{participantId}/verifier/credentials
/v1/ecosystems/{ecosystemId}/participants/{participantId}/verifier/credentials/{credentialId}
/v1/ecosystems/{ecosystemId}/vicals/configuration
/v1/ecosystems/{ecosystemId}/vicals
/v1/ecosystems/{ecosystemId}/preview
/v1/ecosystems/sync
/v1/ecosystems/issuer-validation
/v1/ecosystems/verifier-validation
/v1/ecosystems/certificates/ca
/v1/ecosystems/certificates/ca/{dtsCaCertificateId}
/v1/ecosystems/certificates/vical-signers
/v1/ecosystems/certificates/vical-signers/{vicalSignerId}
/v1/ecosystems/:ecosystemId/participants/:participantId/evidence
/v1/ecosystems/:ecosystemId/participants/:participantId/evidence/:evidenceId
/v1/ecosystems/:ecosystemId/participants/:participantId/evidence/:evidenceId/download
/v1/ecosystems/:ecosystemId/participants/{participantId}/contacts
/v1/ecosystems/:ecosystemId/participants/{participantId}/contacts/{contactId}
/v1/messaging/inboxes
/v1/messaging/inboxes/{id}
/v1/messaging/inboxes/{id}/dids
/v1/messaging/inboxes/{id}/dids/:did
/v1/messaging/inboxes/{id}/messages
/v1/messaging/inboxes/{id}/messages/:messageId
/v1/messaging/sign
/v1/messaging/verify
/v1/messaging/encrypt
/v1/messaging/decrypt
/v1/messaging/send
/ext/oidc/v1/issuers
/ext/oidc/v1/issuers/{issuerId}
/ext/oidc/v1/issuers/{issuerId}/clients
/ext/oidc/v1/issuers/{issuerId}/clients/{clientId}
/ext/oidc/v1/issuers/{issuerId}/offers
/ext/oidc/v1/verifiers
/ext/oidc/v1/verifiers/{verifierId}
/ext/oidc/v1/verifiers/{verifierId}/clients
/ext/oidc/v1/verifiers/{verifierId}/clients/{clientId}
/v1/openid/configuration
/v1/openid/offers
/v1/openid/offers/pre-authorized
/v1/openid/offers/pre-authorized/:id
/v2/presentations/configuration
/v2/presentations/certificates/ca
/v2/presentations/certificates/ca/:certificateId
/v2/presentations/certificates/verifier-signers
/v2/presentations/certificates/verifier-signers/:verifierSignerId
/v2/presentations/certificates/apple-identity-access-certificates
/v2/presentations/certificates/apple-identity-access-certificates/:certificateId
/v2/presentations/wallet-providers
/v2/presentations/wallet-providers/:walletProviderId
/v2/presentations/applications
/v2/presentations/applications/:verifierApplicationId
/v2/presentations/sessions/:sessionId/result
/v1/users/authentication-providers
/v1/users/authentication-providers/{id}
/v1/users
/v1/users/{id}
/v1/users/search
/v1/users/{id}/credentials
/v2/wallet/app-associations
/v1/webhooks
/v1/webhooks/{webhookId}

issuer

Path	POST	GET	PUT	DELETE
/v1/config/domain
/v1/config/domain/verify
/v1/config/domain/invalidate
/v1/dids
/v1/dids/{did}
/v2/credentials/mobile/iacas
/v2/credentials/mobile/iacas/{iacaId}
/v2/credentials/mobile/document-signers
/v2/credentials/mobile/document-signers/{documentSignerId}
/v2/credentials/mobile/document-signers/{documentSignerId}/revoke
/v2/credentials/mobile/status-list-signers
/v2/credentials/mobile/status-list-signers/{statusListSignerId}
/v2/credentials/mobile/status-list-signers/{statusListSignerId}/revoke
/v1/webhooks
/v1/webhooks/{webhookId}
/v1/users/authentication-providers
/v1/users/authentication-providers/{id}
/v1/claim-sources
/v1/claim-sources/{id}
/v1/openid/configuration
/v1/openid/offers
/v1/openid/offers/pre-authorized
/v1/openid/offers/pre-authorized/:id
/v1/users
/v1/users/{id}
/v1/users/search
/v1/users/{id}/credentials
/v2/credentials/compact/sign
/v2/credentials/compact/qrcode
/v2/credentials/compact/pdf
/v2/credentials/compact/digital-pass/apple
/v2/credentials/compact/digital-pass/google
/v2/credentials/compact-semantic/sign
/v2/credentials/compact-semantic/qrcode
/v2/credentials/compact-semantic/pdf
/v2/credentials/compact-semantic/digital-pass/apple
/v2/credentials/compact-semantic/digital-pass/google
/v2/credentials/web-semantic/sign
/v2/credentials/mobile/sign
/v2/credentials/compact/configurations
/v2/credentials/compact/configurations/{id}
/v2/credentials/compact-semantic/configurations
/v2/credentials/compact-semantic/configurations/{id}
/v2/credentials/web-semantic/configurations
/v2/credentials/web-semantic/configurations/{id}
/v2/credentials/mobile/configurations
/v2/credentials/mobile/configurations/{id}
/v2/credentials/compact/{id}
/v2/credentials/compact/{id}/revocation-status
/v2/credentials/compact-semantic/{id}
/v2/credentials/compact-semantic/{id}/revocation-status
/v2/credentials/web-semantic
/v2/credentials/web-semantic/{id}
/v2/credentials/web-semantic/{id}/revocation-status
/v2/credentials/web-semantic/{id}/revocation-status/notification
/v2/credentials/mobile/{credentialId}
/v2/credentials/mobile/{credentialId}/status
/v2/credentials/mobile/status-lists/configurations
/v2/credentials/mobile/status-lists/configurations/{statusListConfigurationId}
/v2/credentials/mobile/status-lists
/v2/credentials/mobile/status-lists/{statusListsId}
/v2/credentials/compact/pdf/templates
/v2/credentials/compact/pdf/templates/{id}
/v2/credentials/compact/digital-pass/apple/templates
/v2/credentials/compact/digital-pass/apple/templates/{id}
/v2/credentials/compact/digital-pass/google/templates
/v2/credentials/compact/digital-pass/google/templates/{id}
/v2/credentials/compact-semantic/pdf/templates
/v2/credentials/compact-semantic/pdf/templates/{id}
/v2/credentials/compact-semantic/digital-pass/apple/templates
/v2/credentials/compact-semantic/digital-pass/apple/templates/{id}
/v2/credentials/compact-semantic/digital-pass/google/templates
/v2/credentials/compact-semantic/digital-pass/google/templates/{id}
/v1/messaging/sign
/v1/messaging/verify
/v1/messaging/encrypt
/v1/messaging/decrypt
/v1/messaging/send
/v1/messaging/inboxes
/v1/messaging/inboxes/{id}
/v1/messaging/inboxes/{id}/dids
/v1/messaging/inboxes/{id}/dids/:did
/v1/messaging/inboxes/{id}/messages
/v1/messaging/inboxes/{id}/messages/:messageId

managed-issuer

Path	POST	GET	PUT	DELETE
/v1/config/domain
/v1/config/domain/verify
/v1/config/domain/invalidate
/v1/dids
/v1/dids/{did}
/v2/credentials/mobile/iacas
/v2/credentials/mobile/iacas/{iacaId}
/v2/credentials/mobile/document-signers
/v2/credentials/mobile/document-signers/{documentSignerId}
/v2/credentials/mobile/document-signers/{documentSignerId}/revoke
/v2/credentials/mobile/status-list-signers
/v2/credentials/mobile/status-list-signers/{statusListSignerId}
/v2/credentials/mobile/status-list-signers/{statusListSignerId}/revoke
/v1/webhooks
/v1/webhooks/{webhookId}
/v1/users/authentication-providers
/v1/users/authentication-providers/{id}
/v1/claim-sources
/v1/claim-sources/{id}
/v1/openid/configuration
/v1/openid/offers
/v1/openid/offers/pre-authorized
/v1/openid/offers/pre-authorized/:id
/v1/users
/v1/users/{id}
/v1/users/search
/v1/users/{id}/credentials
/v2/credentials/compact/sign
/v2/credentials/compact/qrcode
/v2/credentials/compact/pdf
/v2/credentials/compact/digital-pass/apple
/v2/credentials/compact/digital-pass/google
/v2/credentials/compact-semantic/sign
/v2/credentials/compact-semantic/qrcode
/v2/credentials/compact-semantic/pdf
/v2/credentials/compact-semantic/digital-pass/apple
/v2/credentials/compact-semantic/digital-pass/google
/v2/credentials/web-semantic/sign
/v2/credentials/mobile/sign
/v2/credentials/compact/configurations
/v2/credentials/compact/configurations/{id}
/v2/credentials/compact-semantic/configurations
/v2/credentials/compact-semantic/configurations/{id}
/v2/credentials/web-semantic/configurations
/v2/credentials/web-semantic/configurations/{id}
/v2/credentials/mobile/configurations
/v2/credentials/mobile/configurations/{id}
/v2/credentials/compact/{id}
/v2/credentials/compact/{id}/revocation-status
/v2/credentials/compact-semantic/{id}
/v2/credentials/compact-semantic/{id}/revocation-status
/v2/credentials/web-semantic
/v2/credentials/web-semantic/{id}
/v2/credentials/web-semantic/{id}/revocation-status
/v2/credentials/web-semantic/{id}/revocation-status/notification
/v2/credentials/mobile/{credentialId}
/v2/credentials/mobile/{credentialId}/status
/v2/credentials/mobile/status-lists/configurations
/v2/credentials/mobile/status-lists/configurations/{statusListConfigurationId}
/v2/credentials/mobile/status-lists
/v2/credentials/mobile/status-lists/{statusListsId}
/v2/credentials/compact/pdf/templates
/v2/credentials/compact/pdf/templates/{id}
/v2/credentials/compact/digital-pass/apple/templates
/v2/credentials/compact/digital-pass/apple/templates/{id}
/v2/credentials/compact/digital-pass/google/templates
/v2/credentials/compact/digital-pass/google/templates/{id}
/v2/credentials/compact-semantic/pdf/templates
/v2/credentials/compact-semantic/pdf/templates/{id}
/v2/credentials/compact-semantic/digital-pass/apple/templates
/v2/credentials/compact-semantic/digital-pass/apple/templates/{id}
/v2/credentials/compact-semantic/digital-pass/google/templates
/v2/credentials/compact-semantic/digital-pass/google/templates/{id}
/v1/messaging/sign
/v1/messaging/verify
/v1/messaging/encrypt
/v1/messaging/decrypt
/v1/messaging/send
/v1/messaging/inboxes
/v1/messaging/inboxes/{id}
/v1/messaging/inboxes/{id}/dids
/v1/messaging/inboxes/{id}/dids/:did
/v1/messaging/inboxes/{id}/messages
/v1/messaging/inboxes/{id}/messages/:messageId
/v1/analytics/events
/v1/events
/v1/analytics/event-types
/v1/event-types

verifier

Path	POST	GET	PUT	DELETE
/v1/config/domain
/v1/config/domain/verify
/v1/config/domain/invalidate
/v1/dids
/v1/dids/{did}
/v2/credentials/compact/verify
/v2/credentials/compact-semantic/verify
/v2/credentials/web-semantic/verify
/v2/credentials/web-semantic/presentations/templates
/v2/credentials/web-semantic/presentations/templates/{id}
/v2/credentials/web-semantic/presentations/requests
/v2/credentials/web-semantic/presentations/verify
/v2/credentials/mobile/verify
/v2/credentials/mobile/trusted-issuers
/v2/credentials/mobile/trusted-issuers/{trustedIssuerId}
/v2/presentations/certificates/ca
/v2/presentations/certificates/ca/:certificateId
/v2/presentations/certificates/verifier-signers
/v2/presentations/certificates/verifier-signers/:verifierSignerId
/v2/presentations/certificates/apple-identity-access-certificates
/v2/presentations/certificates/apple-identity-access-certificates/:certificateId
/v2/presentations/applications
/v2/presentations/applications/:verifierApplicationId
/v2/presentations/wallet-providers
/v2/presentations/wallet-providers/:walletProviderId
/v2/presentations/sessions/:sessionId/result
/ext/oidc/v1/verifiers
/ext/oidc/v1/verifiers/{verifierId}
/ext/oidc/v1/verifiers/{verifierId}/clients
/ext/oidc/v1/verifiers/{verifierId}/clients/{clientId}

dts-provider

Path	POST	GET	PUT	DELETE
/v1/config/domain
/v1/config/domain/verify
/v1/config/domain/invalidate
/v1/dids
/v1/dids/{did}
/v1/ecosystems
/v1/ecosystems/{ecosystemId}
/v1/ecosystems/{ecosystemId}/credentials
/v1/ecosystems/{ecosystemId}/credentials/{credentialId}
/v1/ecosystems/{ecosystemId}/participants
/v1/ecosystems/{ecosystemId}/participants/{participantId}
/v1/ecosystems/{ecosystemId}/participants/{participantId}/credentials
/v1/ecosystems/{ecosystemId}/policies
/v1/ecosystems/{ecosystemId}/participants/{participantId}/issuer/credentials
/v1/ecosystems/{ecosystemId}/participants/{participantId}/issuer/credentials/{credentialId}
/v1/ecosystems/{ecosystemId}/participants/{participantId}/verifier/credentials
/v1/ecosystems/{ecosystemId}/participants/{participantId}/verifier/credentials/{credentialId}
/v1/ecosystems/{ecosystemId}/vicals/configuration
/v1/ecosystems/{ecosystemId}/vicals
/v1/ecosystems/{ecosystemId}/preview
/v1/ecosystems/sync
/v1/ecosystems/certificates/ca
/v1/ecosystems/certificates/ca/{dtsCaCertificateId}
/v1/ecosystems/certificates/vical-signers
/v1/ecosystems/certificates/vical-signers/{vicalSignerId}
/v1/ecosystems/:ecosystemId/participants/:participantId/evidence
/v1/ecosystems/:ecosystemId/participants/:participantId/evidence/:evidenceId
/v1/ecosystems/:ecosystemId/participants/:participantId/evidence/:evidenceId/download
/v1/ecosystems/:ecosystemId/participants/{participantId}/contacts
/v1/ecosystems/:ecosystemId/participants/{participantId}/contacts/{contactId}

dts-consumer

Path	POST	GET	PUT	DELETE
/v1/ecosystems/issuer-validation
/v1/ecosystems/verifier-validation
/v1/config/ecosystems

auditor

Path	POST	GET	PUT	DELETE
/v1/analytics/events
/v1/events
/v1/analytics/event-types
/v1/event-types