{ "info": { "_postman_id": "603db83f-89f8-4aba-815d-dcee7d4d3c4e", "name": "ThoughtSpot Public REST 10.1.0.cl Authentication API", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "lastUpdatedBy": "35240", "uid": "35240-603db83f-89f8-4aba-815d-dcee7d4d3c4e" }, "item": [ { "name": "api", "item": [ { "name": "rest", "item": [ { "name": "2.0", "item": [ { "name": "auth", "item": [ { "name": "configure", "item": [ { "name": "configure Auth Settings", "id": "05a37045-4a8b-4c46-a748-47545f2a5ede", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"cluster_preferences\": {\n \"auth_status\": \"DISABLED\"\n },\n \"org_preferences\": [\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"ENABLED\"\n },\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"DISABLED\"\n }\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/configure", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "configure" ] }, "description": "\n Version: 26.6.0.cl or later\n\nVersion: 26.6.0.cl or later\n\nEnables or disables authentication at cluster or org level for the specified auth type. Currently supports `TRUSTED_AUTH`.\n\n#### Required privileges\n\nRequires `ADMINISTRATION` (**Can administer ThoughtSpot**) or `CONTROL_TRUSTED_AUTH` (**Can Enable or Disable Trusted Authentication**) privilege. If [Role-Based Access Control (RBAC)](https://developers.thoughtspot.com/docs/rbac) is enabled, the `CONTROL_TRUSTED_AUTH` privilege is required.\n\n#### Usage guidelines\n\nUse `cluster_preferences` to enable or disable authentication at the cluster level. Cluster-level settings can only be configured from the Primary Org.\n- `ENABLED` \u2014 Generates a new access token if one does not exist. An existing token is preserved.\n- `DISABLED` \u2014 Revokes the existing cluster-level access token.\n\nUse `org_preferences` to enable or disable authentication for one or more Orgs. Each entry must include an `org_identifier` (unique ID or name) and an `auth_status`. Org-level configuration requires the per-Org authentication feature to be enabled on your instance.\n- `ENABLED` \u2014 Generates a new org-level access token if one does not exist.\n- `DISABLED` \u2014 Revokes the existing org-level access token for that Org.\n\nBoth `cluster_preferences` and `org_preferences` are optional. Omitting a field leaves the corresponding settings unchanged. If both are omitted, the API returns `204 No Content` without making any changes.\n\n**Note**: Cluster-level and org-level settings are independent of each other. Enabling or disabling one does not affect the other.\n\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "f486d453-28ce-443a-8b84-89f36b8c1b75", "name": "Trusted authentication settings configured successfully.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"cluster_preferences\": {\n \"auth_status\": \"DISABLED\"\n },\n \"org_preferences\": [\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"ENABLED\"\n },\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"DISABLED\"\n }\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/configure", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "configure" ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-f486d453-28ce-443a-8b84-89f36b8c1b75" }, { "id": "a96b7ef8-00dd-43cd-bc3b-7b266ee33491", "name": "Invalid request.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"cluster_preferences\": {\n \"auth_status\": \"DISABLED\"\n },\n \"org_preferences\": [\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"ENABLED\"\n },\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"DISABLED\"\n }\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/configure", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "configure" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-a96b7ef8-00dd-43cd-bc3b-7b266ee33491" }, { "id": "806326fb-412d-4771-b2d8-6a46f2fcf01c", "name": "Unauthorized access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"cluster_preferences\": {\n \"auth_status\": \"DISABLED\"\n },\n \"org_preferences\": [\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"ENABLED\"\n },\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"DISABLED\"\n }\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/configure", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "configure" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-806326fb-412d-4771-b2d8-6a46f2fcf01c" }, { "id": "a15ee0d2-fcda-4da9-a901-2c685a3725a5", "name": "Forbidden access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"cluster_preferences\": {\n \"auth_status\": \"DISABLED\"\n },\n \"org_preferences\": [\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"ENABLED\"\n },\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"DISABLED\"\n }\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/configure", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "configure" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-a15ee0d2-fcda-4da9-a901-2c685a3725a5" }, { "id": "9bb2246f-44a4-4f70-9fa8-fdd8d253c12d", "name": "Unexpected error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"cluster_preferences\": {\n \"auth_status\": \"DISABLED\"\n },\n \"org_preferences\": [\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"ENABLED\"\n },\n {\n \"org_identifier\": \"\",\n \"auth_status\": \"DISABLED\"\n }\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/configure", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "configure" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-9bb2246f-44a4-4f70-9fa8-fdd8d253c12d" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-05a37045-4a8b-4c46-a748-47545f2a5ede" } ], "id": "49a29eb2-fcf2-44bd-8d3f-a588a99827ad", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-49a29eb2-fcf2-44bd-8d3f-a588a99827ad" }, { "name": "session", "item": [ { "name": "user", "item": [ { "name": "get Current User Info", "id": "4dc9bccc-9618-46d5-bde7-221522a18e80", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/user", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "user" ] }, "description": "\n Version: 9.0.0.cl or later\n\nRetrieves details of the current user session for the token provided in the request header.\n\nAny ThoughtSpot user can access this endpoint and send an API request. The data returned in the API response varies according to user's privilege and object access permissions.\n\n**NOTE**: In ThoughtSpot, users with cluster administration privileges can access all Orgs by default. However, unless the administrator is explicitly added to an Org, the Orgs list in the session information returned by the API will include only the Primary Org. To include other Orgs in the API response, you must explicitly add the administrator to each Org in the Admin settings page in the UI or via user REST API.\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "c61658a4-5029-43e9-85ae-19e1075ea5cd", "name": "Fetch current session user detail successful.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/user", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "user" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"id\": \"\",\n \"name\": \"\",\n \"display_name\": \"\",\n \"visibility\": \"NON_SHARABLE\",\n \"author_id\": \"\",\n \"can_change_password\": \"\",\n \"complete_detail\": \"\",\n \"creation_time_in_millis\": \"\",\n \"current_org\": {\n \"id\": \"\",\n \"name\": \"\"\n },\n \"deleted\": \"\",\n \"deprecated\": \"\",\n \"account_type\": \"LOCAL_USER\",\n \"account_status\": \"ACTIVE\",\n \"email\": \"\",\n \"expiration_time_in_millis\": \"\",\n \"external\": \"\",\n \"favorite_metadata\": [\n {\n \"id\": \"\",\n \"name\": \"\",\n \"type\": \"USER\"\n },\n {\n \"id\": \"\",\n \"name\": \"\",\n \"type\": \"ANSWER\"\n }\n ],\n \"first_login_time_in_millis\": \"\",\n \"group_mask\": \"\",\n \"hidden\": \"\",\n \"home_liveboard\": {\n \"id\": \"\",\n \"name\": \"\"\n },\n \"incomplete_details\": {},\n \"is_first_login\": \"\",\n \"modification_time_in_millis\": \"\",\n \"modifier_id\": \"\",\n \"notify_on_share\": \"\",\n \"onboarding_experience_completed\": \"\",\n \"orgs\": [\n {\n \"id\": \"\",\n \"name\": \"\"\n },\n {\n \"id\": \"\",\n \"name\": \"\"\n }\n ],\n \"owner_id\": \"\",\n \"parent_type\": \"USER\",\n \"privileges\": [\n \"\",\n \"\"\n ],\n \"show_onboarding_experience\": \"\",\n \"super_user\": \"\",\n \"system_user\": \"\",\n \"tags\": [\n {\n \"id\": \"\",\n \"name\": \"\"\n },\n {\n \"id\": \"\",\n \"name\": \"\"\n }\n ],\n \"tenant_id\": \"\",\n \"user_groups\": [\n {\n \"id\": \"\",\n \"name\": \"\"\n },\n {\n \"id\": \"\",\n \"name\": \"\"\n }\n ],\n \"user_inherited_groups\": [\n {\n \"id\": \"\",\n \"name\": \"\"\n },\n {\n \"id\": \"\",\n \"name\": \"\"\n }\n ],\n \"welcome_email_sent\": \"\",\n \"org_privileges\": {},\n \"preferred_locale\": \"\",\n \"use_browser_language\": \"\",\n \"extended_properties\": {},\n \"extended_preferences\": {},\n \"user_parameters\": {},\n \"access_control_properties\": {},\n \"variable_values\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-c61658a4-5029-43e9-85ae-19e1075ea5cd" }, { "id": "d4905c16-898e-4b8b-b092-98840f51650e", "name": "Invalid request.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/user", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "user" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-d4905c16-898e-4b8b-b092-98840f51650e" }, { "id": "0936a4a2-ab26-40d2-88a9-12c552cc266c", "name": "Unauthorized access.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/user", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "user" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-0936a4a2-ab26-40d2-88a9-12c552cc266c" }, { "id": "90e7f948-774c-47b2-b6ea-7a3baa5bd98a", "name": "Forbidden access.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/user", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "user" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-90e7f948-774c-47b2-b6ea-7a3baa5bd98a" }, { "id": "bc25a153-fabf-43fc-807c-79957d831d9a", "name": "Unexpected error", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/user", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "user" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-bc25a153-fabf-43fc-807c-79957d831d9a" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-4dc9bccc-9618-46d5-bde7-221522a18e80" } ], "id": "ecc6e44b-629e-401b-80a1-489d55669920", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-ecc6e44b-629e-401b-80a1-489d55669920" }, { "name": "token", "item": [ { "name": "get Current User Token", "id": "49570841-7a84-42a8-a4bb-3a131841b4f1", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/token", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "token" ] }, "description": "\n Version: 9.4.0.cl or later\n\nRetrieves details of the current session token for the bearer token provided in the request header.\n\nThis API endpoint does not create a new token. Instead, it returns details about the token, including the token string, creation time, expiration time, and the associated user.\n\nUse this endpoint to introspect your current session token, debug authentication issues, or when a frontend application needs session token details.\n\nAny ThoughtSpot user with a valid bearer token can access this endpoint and send an API request\n\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "71890da4-744a-4edd-87da-a8b40a4e115a", "name": "Fetching token for current user successful.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/token", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "token" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"token\": \"\",\n \"creation_time_in_millis\": \"\",\n \"expiration_time_in_millis\": \"\",\n \"valid_for_user_id\": \"\",\n \"valid_for_username\": \"\"\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-71890da4-744a-4edd-87da-a8b40a4e115a" }, { "id": "1825108e-e70b-485a-b83e-c19c32727a94", "name": "Invalid request.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/token", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "token" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-1825108e-e70b-485a-b83e-c19c32727a94" }, { "id": "24ef92b5-309f-43e8-959e-3fc818379a6c", "name": "Unauthorized access.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/token", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "token" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-24ef92b5-309f-43e8-959e-3fc818379a6c" }, { "id": "4c138267-d94e-49b4-b8a1-0992de59a189", "name": "Forbidden access.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/token", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "token" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-4c138267-d94e-49b4-b8a1-0992de59a189" }, { "id": "0c203589-b052-4d5f-a812-b28c286b580b", "name": "Unexpected error", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/token", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "token" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-0c203589-b052-4d5f-a812-b28c286b580b" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-49570841-7a84-42a8-a4bb-3a131841b4f1" } ], "id": "6fdcac31-cc80-4fb7-8b0d-6f432fa3f2f3", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-6fdcac31-cc80-4fb7-8b0d-6f432fa3f2f3" }, { "name": "login", "item": [ { "name": "login", "id": "d068d892-1c5f-4672-96c0-3d479ee66f1e", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"org_identifier\": \"\",\n \"remember_me\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "login" ] }, "description": "\n Version: 9.0.0.cl or later\n\nCreates a login session for a ThoughtSpot user with Basic authentication.\n\nIn Basic authentication method, REST clients log in to ThoughtSpot using `username` and `password` attributes. On a multi-tenant cluster with Orgs, users can pass the ID of the Org in the API request to log in to a specific Org context.\n\n**Note**: If Multi-Factor Authentication (MFA) is enabled on your instance, the API login request with basic authentication (`username` and `password` ) returns an error. Contact ThoughtSpot Support for assistance.\n\nA successful login returns a session cookie that can be used in your subsequent API requests.\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "254eb779-34a4-47d9-8652-2734b26eac6e", "name": "User login successful.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"org_identifier\": \"\",\n \"remember_me\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "login" ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-254eb779-34a4-47d9-8652-2734b26eac6e" }, { "id": "f483f561-b958-4829-9a43-a008a9333510", "name": "Invalid request.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"org_identifier\": \"\",\n \"remember_me\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "login" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-f483f561-b958-4829-9a43-a008a9333510" }, { "id": "8ceb6b66-9019-43cc-bbec-710119f5f5e0", "name": "Unauthorized access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"org_identifier\": \"\",\n \"remember_me\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "login" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-8ceb6b66-9019-43cc-bbec-710119f5f5e0" }, { "id": "934a799a-532e-4ca6-9214-8f9c433e826f", "name": "Forbidden access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"org_identifier\": \"\",\n \"remember_me\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "login" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-934a799a-532e-4ca6-9214-8f9c433e826f" }, { "id": "0810e0d3-c14d-4b97-99c3-c49191f37098", "name": "Unexpected error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"org_identifier\": \"\",\n \"remember_me\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "login" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-0810e0d3-c14d-4b97-99c3-c49191f37098" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-d068d892-1c5f-4672-96c0-3d479ee66f1e" } ], "id": "7c3206a1-677d-4f9c-bb88-a9df9619b7c1", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-7c3206a1-677d-4f9c-bb88-a9df9619b7c1" }, { "name": "logout", "item": [ { "name": "logout", "id": "2167631e-8d38-4a95-9384-2b6a1bcc0246", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/logout", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "logout" ] }, "description": "\n Version: 9.0.0.cl or later\n\n\nLogs out a user from their current session.\n\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "adeeec00-06c5-40ab-b9b2-b20bf1fc8847", "name": "User logout successful.", "originalRequest": { "method": "POST", "header": [ { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/logout", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "logout" ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-adeeec00-06c5-40ab-b9b2-b20bf1fc8847" }, { "id": "c800ca6d-b49e-4057-ae96-f4cb2b95ad9d", "name": "Invalid request.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/logout", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "logout" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-c800ca6d-b49e-4057-ae96-f4cb2b95ad9d" }, { "id": "288f1a6d-8247-4256-9582-e01005996aa3", "name": "Unauthorized access.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/logout", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "logout" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-288f1a6d-8247-4256-9582-e01005996aa3" }, { "id": "682db4ff-0f46-4a52-9c33-db6026615a75", "name": "Forbidden access.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/logout", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "logout" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-682db4ff-0f46-4a52-9c33-db6026615a75" }, { "id": "861928b4-97d7-48b8-94b6-16ed275e2bc3", "name": "Unexpected error", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/session/logout", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "session", "logout" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-861928b4-97d7-48b8-94b6-16ed275e2bc3" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-2167631e-8d38-4a95-9384-2b6a1bcc0246" } ], "id": "59b7c1b5-3932-4ed4-a5a2-ada1cf26235a", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-59b7c1b5-3932-4ed4-a5a2-ada1cf26235a" } ], "id": "2fa8d839-6126-45ca-911d-0c82a22a97b0", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-2fa8d839-6126-45ca-911d-0c82a22a97b0" }, { "name": "token", "item": [ { "name": "custom", "item": [ { "name": "get Custom Access Token", "id": "2283f3c8-feff-4865-bbee-8d29499f1d00", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"persist_option\": \"REPLACE\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_identifier\": \"\",\n \"filter_rules\": [\n {\n \"column_name\": \"\",\n \"operator\": \"ENDS_WITH\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"column_name\": \"\",\n \"operator\": \"LE\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"parameter_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"variable_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"email\": \"\",\n \"display_name\": \"\",\n \"groups\": [\n {\n \"identifier\": \"\"\n },\n {\n \"identifier\": \"\"\n }\n ],\n \"auto_create\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/custom", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "custom" ] }, "description": "\n Version: 10.4.0.cl or later\n\nCreates an authentication token that provides values for the formula variables in the Row Level Security (RLS) rules for a given user. Recommended for use cases that require Attribute-based access control (ABAC) via RLS.\n\n#### Required privileges\n\nTo add a new user and assign privileges during auto-creation, the `ADMINISTRATION` (**Can administer ThoughtSpot**) privilege is required. If [Role-Based Access Control (RBAC)](https://developers.thoughtspot.com/docs/rbac) is enabled, the `CONTROL_TRUSTED_AUTH` (**Can Enable or Disable Trusted Authentication**) privilege and edit access to the data source are required.\n\nTo configure formula variables for all Orgs on your instance or the Primary Org, cluster administration privileges are required. Org administrators can configure formula variables for their respective Orgs. If Role-Based Access Control (RBAC) is enabled, users with the `CAN_MANAGE_VARIABLES` (**Can manage variables**) role privilege can also create and manage variables for their Org context.\n\n#### Usage guidelines\n\nYou can generate a token by providing a `username` and `password`, or by using a `secret_key`. To generate a `secret_key`, the administrator must enable [Trusted authentication](https://developers.thoughtspot.com/docs/trusted-auth-secret-key) in the **Develop** > **Customizations** > **Security Settings** page.\n\n**Note**:\n* When both `password` and `secret_key` are included in the API request, `password` takes precedence.\n* If [Multi-Factor Authentication (MFA)](https://docs.thoughtspot.com/cloud/latest/authentication-local-mfa) is enabled on your instance, the API login request with `username` and `password` returns an error. You can switch to token-based authentication with `secret_key` or contact ThoughtSpot Support for assistance.\n\nThe token obtained from ThoughtSpot is valid for 5 minutes by default. You can configure the token expiration time as required.\n\n#### ABAC via RLS\n\nTo implement ABAC via RLS and assign security entitlements to users during session creation, generate a token with custom variable values. The values set in the authentication token are applied to the formula variables referenced in RLS rules at the table level, which determines the data each user can access based on their entitlements.\n\nThe variable values can be configured to persist for a specific set of Models in user sessions initiated with the token, allowing different RLS rules to be set for different data models. Once defined, the rules are added to the user's `variable_values` object, after which all sessions will use the persisted values.\n\nFor more information, see [ABAC via tokens Documentation](https://developers.thoughtspot.com/docs/abac-via-rls-variables).\n\n##### Formula variables\nBefore defining variable values, ensure the variables are created and available on your instance. To create a formula variable, you can use the **Create variable** (`/api/rest/2.0/template/variables/create`) REST API endpoint, with the variable `type` set as `Formula_Variable` in the API request.\n\nThe API doesn't support `\"persist_option\": \"RESET\"` and `\"persist_option\": \"NONE\"` when `variable_values` are defined in the request. If you are using `variable_values` for token generation, you must use other supported persist options such as `APPEND` or `REPLACE`.\n\nIf you want to use `RESET` or `NONE`, do not pass any `variable_values`. In such cases, `variable_values` will remain unaffected.\n\n#### Supported objects\n\nThe supported object type is `LOGICAL_TABLE`. When using `object_id` with `variable_values`, models are supported.\n\n#### Just-in-time provisioning\n\nFor [just-in-time user creation and provisioning](https://developers.thoughtspot.com/docs/just-in-time-provisioning), specify the following attributes in the API request:\n\n* `auto_create`\n* `username`\n* `display_name`\n* `email`\n* `groups`\n\nSet `auto_create` to `true` if the username does not exist in ThoughtSpot. If the username already exists in ThoughtSpot and `auto_create` is set to `true`, user properties such as display name, email, Org and group entitlements will not be updated with new values. Setting `auto_create` to `true` does not create formula variables. Hence, this setting will not be applicable to `variable_values`.\n\n#### Important point to note\nAll options in the token creation APIs that define user access to data in ThoughtSpot will take effect during token creation, not when the token is used for authentication. For example, `auto_create:true` will create the user when the authentication token is created. Persist options such as `APPEND` and `REPLACE` will persist `variable_values` on the user profile when the token is created.\n\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "7f68d4fa-1e2a-4223-a0bf-b8dcb7e8a96f", "name": "ABAC token creation was successful.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"persist_option\": \"REPLACE\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_identifier\": \"\",\n \"filter_rules\": [\n {\n \"column_name\": \"\",\n \"operator\": \"ENDS_WITH\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"column_name\": \"\",\n \"operator\": \"LE\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"parameter_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"variable_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"email\": \"\",\n \"display_name\": \"\",\n \"groups\": [\n {\n \"identifier\": \"\"\n },\n {\n \"identifier\": \"\"\n }\n ],\n \"auto_create\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/custom", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "custom" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"token\": \"\",\n \"org\": {\n \"id\": \"\",\n \"name\": \"\"\n },\n \"user\": {\n \"id\": \"\",\n \"name\": \"\"\n },\n \"creation_time_in_millis\": \"\",\n \"expiration_time_in_millis\": \"\",\n \"id\": \"\"\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-7f68d4fa-1e2a-4223-a0bf-b8dcb7e8a96f" }, { "id": "4c1c45e6-7d8a-4245-a440-5110a06101ec", "name": "Invalid request. This could be due to missing or incorrect parameters.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"persist_option\": \"REPLACE\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_identifier\": \"\",\n \"filter_rules\": [\n {\n \"column_name\": \"\",\n \"operator\": \"ENDS_WITH\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"column_name\": \"\",\n \"operator\": \"LE\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"parameter_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"variable_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"email\": \"\",\n \"display_name\": \"\",\n \"groups\": [\n {\n \"identifier\": \"\"\n },\n {\n \"identifier\": \"\"\n }\n ],\n \"auto_create\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/custom", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "custom" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-4c1c45e6-7d8a-4245-a440-5110a06101ec" }, { "id": "4baf312f-6c77-47e5-9c08-b29136111055", "name": "Unauthorized access. The request could not be authenticated.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"persist_option\": \"REPLACE\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_identifier\": \"\",\n \"filter_rules\": [\n {\n \"column_name\": \"\",\n \"operator\": \"ENDS_WITH\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"column_name\": \"\",\n \"operator\": \"LE\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"parameter_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"variable_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"email\": \"\",\n \"display_name\": \"\",\n \"groups\": [\n {\n \"identifier\": \"\"\n },\n {\n \"identifier\": \"\"\n }\n ],\n \"auto_create\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/custom", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "custom" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-4baf312f-6c77-47e5-9c08-b29136111055" }, { "id": "05f1ea3b-e15f-4e54-8fcf-1cb9ffe7b7dd", "name": "Forbidden access. The user does not have permission to access this resource.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"persist_option\": \"REPLACE\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_identifier\": \"\",\n \"filter_rules\": [\n {\n \"column_name\": \"\",\n \"operator\": \"ENDS_WITH\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"column_name\": \"\",\n \"operator\": \"LE\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"parameter_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"variable_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"email\": \"\",\n \"display_name\": \"\",\n \"groups\": [\n {\n \"identifier\": \"\"\n },\n {\n \"identifier\": \"\"\n }\n ],\n \"auto_create\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/custom", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "custom" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-05f1ea3b-e15f-4e54-8fcf-1cb9ffe7b7dd" }, { "id": "ceb9ef83-045d-4594-a34c-715cf65b11f7", "name": "Conflict. A concurrent update to the same template variable was detected and the request could not be applied. Retry the request after serializing concurrent variable updates.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"persist_option\": \"REPLACE\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_identifier\": \"\",\n \"filter_rules\": [\n {\n \"column_name\": \"\",\n \"operator\": \"ENDS_WITH\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"column_name\": \"\",\n \"operator\": \"LE\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"parameter_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"variable_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"email\": \"\",\n \"display_name\": \"\",\n \"groups\": [\n {\n \"identifier\": \"\"\n },\n {\n \"identifier\": \"\"\n }\n ],\n \"auto_create\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/custom", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "custom" ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-ceb9ef83-045d-4594-a34c-715cf65b11f7" }, { "id": "851fc3e7-de5e-47a0-a0a4-c12bb4e51285", "name": "An unexpected error occurred on the server.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"persist_option\": \"REPLACE\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_identifier\": \"\",\n \"filter_rules\": [\n {\n \"column_name\": \"\",\n \"operator\": \"ENDS_WITH\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"column_name\": \"\",\n \"operator\": \"LE\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"parameter_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"variable_values\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ]\n }\n ],\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"email\": \"\",\n \"display_name\": \"\",\n \"groups\": [\n {\n \"identifier\": \"\"\n },\n {\n \"identifier\": \"\"\n }\n ],\n \"auto_create\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/custom", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "custom" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-851fc3e7-de5e-47a0-a0a4-c12bb4e51285" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-2283f3c8-feff-4865-bbee-8d29499f1d00" } ], "id": "1efb8e1a-d88b-4a06-94d5-9e52a7863ef2", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-1efb8e1a-d88b-4a06-94d5-9e52a7863ef2" }, { "name": "full", "item": [ { "name": "get Full Access Token", "id": "5d3fbb76-4a2d-45e5-9a15-1300664a0328", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC_MAX\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/full", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "full" ] }, "description": "\n Version: 9.0.0.cl or later\n\nGenerates an authentication token for creating a full session in ThoughtSpot for a given user. Recommended for use cases that do not require Attribute-based access control (ABAC) via Row Level Security (RLS).\n\n#### Usage guidelines\n\nYou can generate a token for a user by providing a `username` and `password`, or by using the `secret_key` generated for your instance. To generate a `secret_key`, the administrator must enable [Trusted authentication](https://developers.thoughtspot.com/docs/trusted-auth-secret-key) in the **Develop** > **Customizations** > **Security Settings** page.\n\n**Note**:\n* When both `password` and `secret_key` are included in the API request, `password` takes precedence.\n* If [Multi-Factor Authentication (MFA)](https://docs.thoughtspot.com/cloud/latest/authentication-local-mfa) is enabled on your instance, the API login request with `username` and `password` returns an error. You can switch to token-based authentication with `secret_key` or contact ThoughtSpot Support for assistance.\n\nThe token obtained from ThoughtSpot is valid for 5 minutes by default. You can configure the token expiration time as required.\n\n#### Just-in-time provisioning\n\nFor [just-in-time user creation and provisioning](https://developers.thoughtspot.com/docs/just-in-time-provisioning), specify the following attributes in the API request:\n\n* `auto_create`\n* `username`\n* `display_name`\n* `email`\n* `group_identifiers`\n\nSet `auto_create` to `true` if the username does not exist in ThoughtSpot. If the user already exists in ThoughtSpot and `auto_create` is set to `true`, user properties such as display name, email and group assignment will be updated.\n\nTo add a new user and assign privileges during auto-creation, the `ADMINISTRATION` (**Can administer ThoughtSpot**) privilege is required. If [Role-Based Access Control (RBAC)](https://developers.thoughtspot.com/docs/rbac) is enabled, the `CONTROL_TRUSTED_AUTH` (**Can Enable or Disable Trusted Authentication**) privilege is required.\n\n#### Important point to note\nAll options in the token creation APIs that define user access to data in ThoughtSpot will take effect during token creation, not when the token is used for authentication. For example, `auto_create:true` will create the user when the authentication token is created.\n\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "65fd65b3-a0f8-43a3-ae10-7366ce516d83", "name": "Bearer auth token creation successful.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC_MAX\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/full", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "full" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"token\": \"\",\n \"creation_time_in_millis\": \"\",\n \"expiration_time_in_millis\": \"\",\n \"scope\": {\n \"access_type\": \"\",\n \"org_id\": \"\",\n \"metadata_id\": \"\"\n },\n \"valid_for_user_id\": \"\",\n \"valid_for_username\": \"\"\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-65fd65b3-a0f8-43a3-ae10-7366ce516d83" }, { "id": "b9911232-50ff-463f-9716-32df3e21c1e4", "name": "Invalid request.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC_MAX\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/full", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "full" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-b9911232-50ff-463f-9716-32df3e21c1e4" }, { "id": "78a2a25e-613b-4be6-a080-63ffcd081214", "name": "Unauthorized access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC_MAX\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/full", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "full" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-78a2a25e-613b-4be6-a080-63ffcd081214" }, { "id": "154d313d-4822-4ebb-b2f1-4eabd55ad48e", "name": "Forbidden access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC_MAX\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/full", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "full" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-154d313d-4822-4ebb-b2f1-4eabd55ad48e" }, { "id": "851925ad-8578-4013-a19a-10bb51f56325", "name": "Unexpected error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"BW_INC_MAX\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/full", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "full" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-851925ad-8578-4013-a19a-10bb51f56325" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-5d3fbb76-4a2d-45e5-9a15-1300664a0328" } ], "id": "9875db1d-e0fc-45fd-b49c-ccfcda2d743a", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-9875db1d-e0fc-45fd-b49c-ccfcda2d743a" }, { "name": "object", "item": [ { "name": "get Object Access Token", "id": "ab0d3f9e-f739-4b78-9971-b59f8af775a7", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"object_id\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"EQ\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"NOT_IN\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/object", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "object" ] }, "description": "\n Version: 9.0.0.cl or later\n\nGenerates an authentication token that provides access to a specific metadata object. This object list is intersected with the list of objects the user is allowed to access via group membership. For more information, see [Object security](https://docs.thoughtspot.com/cloud/latest/security-data-object#object_security).\n\n#### Usage guidelines\n\nYou can generate a token for a user by providing a `username` and `password`, or by using the `secret_key` generated for your instance. To generate a `secret_key`, the administrator must enable [Trusted authentication](https://developers.thoughtspot.com/docs/trusted-auth-secret-key) in the **Develop** > **Customizations** > **Security Settings** page.\n\n**Note**:\n* When both `password` and `secret_key` are included in the API request, `password` takes precedence.\n* If [Multi-Factor Authentication (MFA)](https://docs.thoughtspot.com/cloud/latest/authentication-local-mfa) is enabled on your instance, the API login request with `username` and `password` returns an error. You can switch to token-based authentication with `secret_key` or contact ThoughtSpot Support for assistance.\n\nThe token obtained from ThoughtSpot is valid for 5 minutes by default. You can configure the token expiration time as required.\n\n#### Just-in-time provisioning\n\nFor [just-in-time user creation and provisioning](https://developers.thoughtspot.com/docs/just-in-time-provisioning), specify the following attributes in the API request:\n\n* `auto_create`\n* `username`\n* `display_name`\n* `email`\n* `group_identifiers`\n\nSet `auto_create` to `true` if the user is not available in ThoughtSpot. If the user already exists in ThoughtSpot and the `auto_create` parameter is set to `true`, user properties such as display name, email, and group assignment will be updated.\n\nTo add a new user and assign privileges, the `ADMINISTRATION` (**Can administer ThoughtSpot**) privilege is required. If [Role-Based Access Control (RBAC)](https://developers.thoughtspot.com/docs/rbac) is enabled, the `CONTROL_TRUSTED_AUTH`(**Can Enable or Disable Trusted Authentication**) privilege is required.\n\n#### Important point to note\n\nAll options in the token creation APIs that define user access to data in ThoughtSpot will take effect during token creation, not when the token is used for authentication. For example, `auto_create:true` will create the user when the authentication token is created.\n\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "b89ece85-71a2-49c0-84a3-60007d3ed419", "name": "Bearer auth token creation successful.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"object_id\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"EQ\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"NOT_IN\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/object", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "object" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"token\": \"\",\n \"creation_time_in_millis\": \"\",\n \"expiration_time_in_millis\": \"\",\n \"scope\": {\n \"access_type\": \"\",\n \"org_id\": \"\",\n \"metadata_id\": \"\"\n },\n \"valid_for_user_id\": \"\",\n \"valid_for_username\": \"\"\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-b89ece85-71a2-49c0-84a3-60007d3ed419" }, { "id": "c6c93719-51a1-4550-b853-b0023018bf19", "name": "Invalid request.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"object_id\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"EQ\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"NOT_IN\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/object", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "object" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-c6c93719-51a1-4550-b853-b0023018bf19" }, { "id": "3feed734-cd07-45c9-a47b-4a6994975d29", "name": "Unauthorized access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"object_id\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"EQ\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"NOT_IN\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/object", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "object" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-3feed734-cd07-45c9-a47b-4a6994975d29" }, { "id": "bb2e8621-19a9-447e-b805-a37a6e521d89", "name": "Forbidden access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"object_id\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"EQ\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"NOT_IN\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/object", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "object" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-bb2e8621-19a9-447e-b805-a37a6e521d89" }, { "id": "47207ee8-b419-4871-8e30-87e0bb214ab9", "name": "Unexpected error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"username\": \"\",\n \"object_id\": \"\",\n \"password\": \"\",\n \"secret_key\": \"\",\n \"validity_time_in_sec\": 300,\n \"org_id\": \"\",\n \"email\": \"\",\n \"display_name\": \"\",\n \"auto_create\": false,\n \"group_identifiers\": [\n \"\",\n \"\"\n ],\n \"user_parameters\": {\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ],\n \"runtime_filters\": [\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"EQ\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"operator\": \"NOT_IN\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"runtime_sorts\": [\n {\n \"column_name\": \"\",\n \"order\": \"DESC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"column_name\": \"\",\n \"order\": \"ASC\",\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ],\n \"parameters\": [\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n },\n {\n \"name\": \"\",\n \"values\": [\n \"\",\n \"\"\n ],\n \"persist\": false,\n \"objects\": [\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n },\n {\n \"identifier\": \"\",\n \"type\": \"LOGICAL_TABLE\"\n }\n ]\n }\n ]\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/object", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "object" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-47207ee8-b419-4871-8e30-87e0bb214ab9" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-ab0d3f9e-f739-4b78-9971-b59f8af775a7" } ], "id": "3d6ca126-014d-4f14-94d1-431e7c399176", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-3d6ca126-014d-4f14-94d1-431e7c399176" }, { "name": "revoke", "item": [ { "name": "revoke Token", "id": "bac5bad8-38a7-4712-861c-e216449fbc89", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"user_identifier\": \"\",\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/revoke", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "revoke" ] }, "description": "\n Version: 9.0.0.cl or later\n\n\nRevokes the authentication token issued for current user session.\n\nThe token of your current session expires when you make a call to the `/api/rest/2.0/auth/token/revoke` endpoint.\nthe users will not be able to access ThoughtSpot objects until a new token is obtained.\n\nTo restart your session, request for a new token from ThoughtSpot. See [Get Full Access Token](#/http/api-endpoints/authentication/get-full-access-token).\n\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "f4a08e08-3ebc-4058-8c3c-f825d0c16df4", "name": "Token successfully revoked.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"user_identifier\": \"\",\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/revoke", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "revoke" ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-f4a08e08-3ebc-4058-8c3c-f825d0c16df4" }, { "id": "a490c79d-9cd2-4092-bb20-b17aadb70bd7", "name": "Invalid request.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"user_identifier\": \"\",\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/revoke", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "revoke" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-a490c79d-9cd2-4092-bb20-b17aadb70bd7" }, { "id": "ef62fed8-1d7e-40ca-b8db-58f182eb399f", "name": "Unauthorized access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"user_identifier\": \"\",\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/revoke", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "revoke" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-ef62fed8-1d7e-40ca-b8db-58f182eb399f" }, { "id": "ce90b7ad-43e0-4529-8fc6-928960aada06", "name": "Forbidden access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"user_identifier\": \"\",\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/revoke", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "revoke" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-ce90b7ad-43e0-4529-8fc6-928960aada06" }, { "id": "0dc33cf8-e913-498c-b883-211fad95fd34", "name": "Unexpected error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"user_identifier\": \"\",\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/revoke", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "revoke" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-0dc33cf8-e913-498c-b883-211fad95fd34" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-bac5bad8-38a7-4712-861c-e216449fbc89" } ], "id": "9a8b53ba-ce9b-4dee-ae6c-da72ae978768", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-9a8b53ba-ce9b-4dee-ae6c-da72ae978768" }, { "name": "validate", "item": [ { "name": "validate Token", "id": "7f8a55b4-5a11-46e2-b0b6-45cb40d570f0", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "validate" ] }, "description": "\n Version: 9.12.0.cl or later\n\n\nValidates the authentication token specified in the API request.\n\nIf your token is not valid, [Get a new token](#/http/api-endpoints/authentication/get-full-access-token).\n\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "7082989f-6e7c-47c3-afe9-ee70200798dc", "name": "Token validation successful.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "validate" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"creation_time_in_millis\": \"\",\n \"expiration_time_in_millis\": \"\",\n \"scope\": {\n \"access_type\": \"\",\n \"org_id\": \"\",\n \"metadata_id\": \"\"\n },\n \"valid_for_user_id\": \"\",\n \"token_type\": \"\"\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-7082989f-6e7c-47c3-afe9-ee70200798dc" }, { "id": "f034b8a2-e0b5-4275-9ece-96d61463e224", "name": "Invalid request.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "validate" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-f034b8a2-e0b5-4275-9ece-96d61463e224" }, { "id": "235065b6-8cdc-4b45-aaf6-230a97d1f3aa", "name": "Unauthorized access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "validate" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-235065b6-8cdc-4b45-aaf6-230a97d1f3aa" }, { "id": "8e3ffc25-cd03-49aa-ae6b-e3648a94f803", "name": "Forbidden access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "validate" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-8e3ffc25-cd03-49aa-ae6b-e3648a94f803" }, { "id": "8de01335-b715-4e9d-ae67-591c1a7020f8", "name": "Unexpected error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"token\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/token/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "token", "validate" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-8de01335-b715-4e9d-ae67-591c1a7020f8" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-7f8a55b4-5a11-46e2-b0b6-45cb40d570f0" } ], "id": "f20313c4-0b2b-4f2c-9712-60252f7ff0f4", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-f20313c4-0b2b-4f2c-9712-60252f7ff0f4" } ], "id": "92798a46-b09e-466b-b6f7-46b8ad2cbab0", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-92798a46-b09e-466b-b6f7-46b8ad2cbab0" }, { "name": "search", "item": [ { "name": "search Auth Settings", "id": "f3a1d9e3-d765-4b0d-a475-9c9932a99eaa", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"scope\": \"CLUSTER\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/search", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "search" ] }, "description": "\n Version: 26.6.0.cl or later\n\nVersion: 26.6.0.cl or later\n\nReturns the authentication configuration for the specified auth type at cluster and org level. Currently supports `TRUSTED_AUTH`.\n\n#### Required privileges\n\nRequires `ADMINISTRATION` (**Can administer ThoughtSpot**) or `CONTROL_TRUSTED_AUTH` (**Can Enable or Disable Trusted Authentication**) privilege. If [Role-Based Access Control (RBAC)](https://developers.thoughtspot.com/docs/rbac) is enabled, the `CONTROL_TRUSTED_AUTH` privilege is required.\n\n#### Usage guidelines\n\nUse `scope` to control which level of settings are returned:\n- `CLUSTER` \u2014 Returns cluster-level authentication status and access tokens. Accessible only from the Primary Org.\n- `ORG` \u2014 Returns org-level authentication status and access tokens for the current Org. Requires the per-Org authentication feature to be enabled on your instance.\n- If `scope` is omitted, both cluster and org-level settings are returned based on the caller's org context and feature availability.\n\nThe `access_tokens` array in `cluster_preferences` or `org_preferences` is omitted when no token is configured at that level.\n\n**Note**: Access tokens returned in the response are sensitive credentials. Treat them with the same care as passwords.\n\n\n\n\n#### Endpoint URL\n" }, "response": [ { "id": "8228645f-18a3-4c15-a491-9c06677b926e", "name": "Authentication settings retrieved successfully.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"scope\": \"CLUSTER\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/search", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "search" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"cluster_preferences\": {\n \"auth_status\": \"DISABLED\",\n \"access_tokens\": [\n {\n \"key\": \"\"\n },\n {\n \"key\": \"\"\n }\n ]\n },\n \"org_preferences\": [\n {\n \"org\": {\n \"id\": \"\",\n \"name\": \"\"\n },\n \"auth_status\": \"ENABLED\",\n \"access_tokens\": [\n {\n \"key\": \"\"\n },\n {\n \"key\": \"\"\n }\n ]\n },\n {\n \"org\": {\n \"id\": \"\",\n \"name\": \"\"\n },\n \"auth_status\": \"ENABLED\",\n \"access_tokens\": [\n {\n \"key\": \"\"\n },\n {\n \"key\": \"\"\n }\n ]\n }\n ]\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-8228645f-18a3-4c15-a491-9c06677b926e" }, { "id": "c2c109b9-97c6-4806-969d-ab17faf5a94d", "name": "Invalid request.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"scope\": \"CLUSTER\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/search", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "search" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-c2c109b9-97c6-4806-969d-ab17faf5a94d" }, { "id": "dba44505-d5f4-41ec-95fd-c15f34f96f68", "name": "Unauthorized access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"scope\": \"CLUSTER\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/search", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "search" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-dba44505-d5f4-41ec-95fd-c15f34f96f68" }, { "id": "b0338a8f-6a65-44d4-8969-e9ce5e1444cf", "name": "Forbidden access.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"scope\": \"CLUSTER\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/search", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "search" ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-b0338a8f-6a65-44d4-8969-e9ce5e1444cf" }, { "id": "63007f5d-a071-4cb1-8b70-e15b27ac216a", "name": "Unexpected error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"auth_type\": \"TRUSTED_AUTH\",\n \"scope\": \"CLUSTER\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/rest/2.0/auth/search", "host": [ "{{baseUrl}}" ], "path": [ "api", "rest", "2.0", "auth", "search" ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {}\n}", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-63007f5d-a071-4cb1-8b70-e15b27ac216a" } ], "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-f3a1d9e3-d765-4b0d-a475-9c9932a99eaa" } ], "id": "a0a36315-bd43-4594-aafc-5469a6256f12", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-a0a36315-bd43-4594-aafc-5469a6256f12" } ], "id": "462639c8-0b0b-4b98-bb1c-cb34467beb57", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-462639c8-0b0b-4b98-bb1c-cb34467beb57" } ], "id": "075d1306-e7f5-4ede-ad84-bc2a913372ef", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-075d1306-e7f5-4ede-ad84-bc2a913372ef" } ], "id": "8087ad17-403a-4cd4-97ae-cee606900ed8", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-8087ad17-403a-4cd4-97ae-cee606900ed8" } ], "id": "6c995e46-ce51-4baf-8403-dd564cfacc49", "createdAt": "2026-07-28T03:15:42.000Z", "updatedAt": "2026-07-28T03:15:42.000Z", "uid": "35240-6c995e46-ce51-4baf-8403-dd564cfacc49" } ], "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "variable": [ { "key": "base-url", "value": "https://localhost:443" }, { "key": "baseUrl", "value": "{{base-url}}" } ] }