/brands

Actions with brands.

get

Fetches brand details by ID.

/content

Actions with images.

get

Fetches a PNG image by ID.

/access_policies

get

Fetches a list of access policies for specific users.

Manages a specific access policy.

get

Fetches an access policy by ID.

delete

Deletes an access policy by ID.

Legal documents management.

/applications

Manages applications.

get

Fetches a list of all registered applications.

Manages a specific application.

get

Fetches the information about the application by ID.

Manages application's bindings.

Manages application-tenants bindings.

post

Turns the application on for the tenant.

delete

Turns the application off for the tenant.

Manages application's features.

Manages application's features for the tenants.

Manages a specific feature of the application for the provided tenant. Effective features can be only read; own features can be read, updated and deleted.

post

Enables the application's feature for the provided tenant.

delete

Disables the application's feature for the provided tenant.

get

Fetches the application's feature status for the provided tenant.

Manages application's settings.

Manages schemas of the application's settings.

get

Fetches a list of application's settings schemas.

Manages application settings for tenants.

get

Fetches a batch of settings for tenants by their IDs.

Available in cloud version only.

get

Fetches application settings for the provided tenant.

Manages a setting of the specific application for the provided tenant. Effective settings can be only read; own settings can be read, updated and deleted.

  • "tier_level_value" (int) The level of minimum commitment, i.e. volume discount.

    Allowed values: [ -2 (Custom), -1 (No commitment), 0 (Tier 1), 1, 2, 3, 4, 5, 6, 7 ]

  • "licensing_mode" (string)

    1. "per_gb" licensing mode - when partner is charged for storage usage only (Acronis Hosted, Azure Hosted, Google Hosted, Hybrid or local storage).
    2. "per_device" licensing mode - when partner is charged for each protected device and additionally for Acronis, Google or Azure Hosted storage. Hybrid Storage and Local Storage are included into the device fee.
delete

Deletes own setting of the tenant's application. The setting will be inherited from parent tenants when deleted.

put

Updates a setting of the tenant's application.

get

Fetches a setting of the tenant's application.

/billing

Manages billing settings.

Manages tenant's billing settings.

get

Fetches tenant-level billing settings.

put

Updates tenant-level billing settings.

Manages billing periods.

get

Fetches custom billing periods.

put

Updates custom billing periods. Do not use dates later than UTC yesterday.

/clients

Manages OAuth 2.0 / OpenID Connect clients.

post

Creates a new client.

get

Fetches a batch of clients.

Manages specific OAuth 2.0 / OpenID Connect client.

delete

Deletes a client by ID.

put

Updates a client by ID.

get

Fetches a client by ID.

Endpoint for resetting secret of an OAuth 2.0 / OpenID Connect client.

post

Resets the client secret by client ID.

/editions

get

Fetches a list of editions available on the platform.

/identity_providers

Identity providers management.

get

Fetches a batch of identity providers.

post

Registers a new identity provider.

Manages a specific identity provider.

delete

Unregisters the identity provider by ID.

put

Updates an identity provider by ID.

get

Fetches an identity provider by ID.

/idp

Authorization endpoints via identity providers.

get

OpenID Connect 1.0 authorization endpoint.

Performs authentication of the user. For more details, see https://openid.net/specs/openid-connect-core-1_0.html#AuthorizationEndpoint.

post

Requests an access token, an ID token and, optionally, a refresh token.

To additionally request a refresh token, refer to OpenID Connect Core 1.0 Section 11.

post

Revokes an access token and, if any, a refresh token in accordance with RFC7009.

Confidential clients must either follow Basic authentication scheme or provide credentials in the request body.

Public clients must provide client_id in the request body.

If access_token revocation is requested, the refresh token, if any, issued together with provided access token will also be revoked.

If refresh_token revocation is requested, the access token issued together with provided refresh token will also be revoked.

post

Available in cloud version only and this method can be accessed only by OAuth 2.0 / OpenID Connect client.

Requests a one-time token for authentication on behalf of the specified user. Either user external ID or Acronis user login or Acronis user UUID can be supplied.

post

Authenticates to the platform using one-time token and provides the IdP session cookie.

Available in cloud version only.

post

Verifies the one-time token.

Available in cloud version only.

get

Fetches JSON Web Key Set (JWKS) that can be used to verify JSON Web Token (JWT) generated by the authorization server. For more details, see RFC7517.

Logout methods.

get

Performs a logout from the platform.

Part of the device flow. Device authorization methods. For more details, see https://tools.ietf.org/html/draft-ietf-oauth-device-flow-07

post

Registers device codes and issues device and user codes.

Part of the device flow. Device authorization approval methods. For more details, see https://tools.ietf.org/html/draft-ietf-oauth-device-flow-07

get

Returns information about existing device authorization by the user code.

post

Approves existing device code. In case of setting tenant_uuid parameter in the request body or in the scope the current user and target tenant should satisfy next requirements: user should be a partner_admin, user should have RW access to the target tenant, target tenant should be personal, target tenant's owner should have protection_admin or backup_user roles.

get

Fetches an HTML page that handles the login flow from external systems with one-time tokens and redirects users to the provided targetURI. One-time token and target URI must be passed via the following URL fragment parameters:

  • ott - a URL-encoded one-time token.
  • targetURI - a URI the user should be redirected to on successful authentication.

Example: /idp/external-login#ott=dG9rZW4gd2l0aCBzYWZlIGVuY29kaW5n&targetURI=https://example.com/app.

/infra

Manages infrastructure components.

get

Fetches batch of infrastructure components.

post

Registers a new infrastructure component.

Manages infrastructure component.

delete

Unregisters infrastructure component.

put

Updates infrastructure component.

get

Fetches infrastructure component.

/locations

Manages infrastructures locations.

get

Fetches a batch of infrastructure locations.

post

Creates a new infrastructures location.

Manages infrastructure location.

delete

Deletes an infrastructure location by ID.

put

Updates an infrastructure location by ID.

get

Fetches an infrastructure location by ID.

Manages infrastructure components of the provided location.

get

Fetches batch of infrastructure components of the provided location.

/logic

Logical values management.

get

Fetches a list of supported languages.

get

Fetches a list of available color schemes.

/offering_items

Reference endpoints for offering items.

get

Fetches a batch of offering items.

/registration_tokens

Manages the registration tokens. Registration tokens can be used to register agents with predefined access scope in unattended registration flow (ex. mass deployment).

This endpoint is available on /bc/api/account_server, without /api/2 prefix.

get

DEPRECATED. Use /api/2/tenants/{tenant_id}/registration_tokens.

Fetches a list of registration tokens.

post

DEPRECATED. Use /api/2/tenants//registration_tokens.

Creates a registration token.

Manages a specific registration token.

Available with /api/2 prefix.

DEPRECATED. Available with /bc/api/account_server prefix.

delete

Deletes a registration token by ID.

/reports

Manages usage reports.

post

Creates a new usage report.

Manages the parameters of the specific usage report.

delete

Deletes a usage report by ID.

put

Updates a usage report configuration. Only scheduled reports can be updated.

get

Fetches a usage report configuration.

Manages stored usage reports.

get

Fetches all stored reports related to the usage report.

Manages specified stored usage report.

get

Downloads stored report data.

Manages reports for multiple tenants.

post

Creates a new usage report configuration for multiple tenants.

/tenants

Manages tenants.

get

Available in cloud version only.

Fetches details about multiple tenants specified by their UUIDs or about child tenants of a specific tenant specified by its UUID.

post

Creates a new tenant.

Deletes a batch of tenants.

post

Deletes multiple tenants in a single request. Provided tenants must have common parent tenant.

Available in cloud version only.

get

Fetches a batch of applications' UUIDs for the provided list of tenants.

get

Fetches a batch of the offering items with their states and associated quotas.

get

Fetches a batch of usages of the tenant.

put

Updates the values of the usages specified in usage_type or associated with the offering items specified in offering_item.

Depending on the combination of provided fields, the usage may be reported either per tenant or per resource. See the descriptions of the fields for more details.

delete

Deletes a tenant by ID.

put

Updates a tenant by ID.

get

Fetches a tenant by ID.

Manages offering items of the tenant.

get

Fetches a list offering items with state and associated quotas.

put

Sets the states and quotas of the offering items for specified applications of the tenant.

get

Fetches available offering items for a hypothetical child tenant with provided parameters.

Manages offering items price for the tenant.

get

Fetches a list of prices of the offering items for the tenant.

put

Updates the prices of the offering items for the tenant.

get

Performs edition switching check for the tenant.

put

Switches the edition for the tenant.

Manages registration tokens of the tenant. Registration tokens can be used to register agents with predefined access scope in unattended registration flow (ex. mass deployment).

get

Fetches registration tokens.

post

Creates registration token for the tenant.

get

Fetches a list of applications available to the tenant.

get

Fetches a list of the applications' roles available to the tenant.

get

Fetches a list of the application's roles available to the tenant.

Manages offering items of the tenant's application.

get

Fetches a batch of offering items with a state and associated quotas for the tenant's application.

get

Fetches application's usages metrics for the tenant.

get

Fetches application's usage metric for the tenant.

Manages OAuth 2.0 / OpenID Connect clients of the tenant.

get

Fetches a list of OAuth 2.0 / OpenID Connect clients registered with the tenant.

Manages users of the tenant.

get

Fetches a list of UUIDs of the tenant's users.

Manages tenant's children.

get

Fetches a list of UUIDs of the tenant's children.

Manages tenant reports.

get

Fetches a list of reports' UUIDs available to the tenant.

Manages tenant's identity providers.

get

Fetches a list of identity providers available to the tenant including registered and inherited from parent tenants.

Manages tenant's infrastructure components.

get

Fetches a list of infrastructure components owned by the tenant.

Manages Tenant Infrastructure Locations

get

Fetches a list of infrastructure locations owned by the tenant.

Manages tenant's usages.

get

Fetches a list of common usage metrics of the tenant.

Manages pricing settings of the tenant.

get

Fetches pricing settings of the tenant.

put

Updates pricing settings of the tenant.

Manages custom branding settings of the tenant.

delete

Disables custom branding for the tenant.

get

Fetches branding options of the tenant.

post

Enables custom branding options for the tenant.

This operation cannot be performed on customer and unit tenants.

put

Modifies custom branding options.

Manages multi-factor authentication (MFA) settings of the tenant.

put

Toggles MFA status for the tenant. This operation cannot be performed on folder and unit tenants.

get

Provides MFA status for tenant and progress of TOTP enablement by users.

Manages tenant's contacts.

get

Fetches a list of contacts' UUIDs referenced with the tenant.

Update tenant default identity provider id

put

Updates Tenant default_idp_id.

post

Restores previously soft deleted tenant.

Manages tenant's access policies

get

Fetches a list of access policies of the tenant.

Manages tenant's settings

get

Fetches application settings for the provided tenant.

/tenants:resolve_ids

post

Resolves tenants' numeric IDs to UUIDs.

/users

Manages Users

get

Fetches a batch of users.

Available in cloud version only.

post

Creates a new user. If the user is created in a customer tenant and below - a personal tenant will be created and attached to it.

Checks availability of the login name (username).

get

Checks whether the login name (username) is available or already taken.

post

Checks whether a password was previously exposed in data breaches.

Manages users maintenance notifications.

get

Fetches a list of maintenance notifications.

Manages current user.

get

Fetches information about the currently authenticated user.

Available in cloud version only.

Manages current user's applications.

get

Fetches information about applications available to the user.

Available in cloud version only.

Manages a specific user.

delete

Deletes a user by ID.

put

Updates a user by ID.

get

Fetches a user by ID.

get

Available in on-premises version only.

Fetches user's login info by ID.

get

Fetches a list of user's access policies.

put

Rewrites user's access policies.

post

Creates user access policy.

Manages user's report subscriptions.

get

Fetches a list of UUIDs of all reports the user is subscribed to.

post

Subscribes the user to a usage report.

Manages user's subscription to the usage report.

delete

Unsubscribes the user from the usage report.

Email actions for provided user.

post

Sends emails to test branding and SMTP settings.

Manages multi-factor authentication (MFA) settings of the user.

put

Manages MFA status for the user.

delete

Resets TOTP settings for the user.

post

Remembers browser as trusted.

delete

Forgets all trusted browsers for user.

post

This method can be accessed only by OAuth 2.0 / OpenID Connect client.

Sets user's password.

post

Sends an activation email to the user.

post

Restores previously soft-deleted user.

/security_groups

Manages Groups of principals (users and service accounts / clients)

get

Fetches a batch of security groups.

post

Creates a new security groups.

Manages a specific security group.

delete

Deletes a security group by ID.

get

Fetches members of security group.

patch

Patches members of a security group by ID.

get

Fetches a list of security group's access policies.

put

Rewrites security group's access policies.

/contacts

Manages Contacts

get

Fetches a batch of contacts.

Available in cloud version only.

post

Creates a new contact.

Available in cloud version only.

Manages a specific contact.

get

Fetches a contact by ID.

put

Updates a contact by ID.

delete

Deletes a contact by ID.

/totp

The Time-based One-Time Password algorithm (TOTP) setup and verification.

post

Initializes TOTP for the logged in user and provides a QR code.

post

Verifies TOTP code.

/versions

get

Fetches platform and its components versions.

/.well-known

This endpoints collection is available on /, without the /api/2 prefix.

get

Fetches the information about the OpenID provider's configuration. For more details, see https://openid.net/specs/openid-connect-discovery-1_0.html.

Applications configuration information.

get

Fetches the configurations of applications (a list of applications with their URLs).