diff --git a/baton_capabilities.json b/baton_capabilities.json index 6fc847ef..f07d42f9 100644 --- a/baton_capabilities.json +++ b/baton_capabilities.json @@ -1,247 +1,217 @@ { - "@type": "type.googleapis.com/c1.connector.v2.ConnectorCapabilities", - "resourceTypeCapabilities": [ + "@type": "type.googleapis.com/c1.connector.v2.ConnectorCapabilities", + "resourceTypeCapabilities": [ { - "resourceType": { - "id": "group", - "displayName": "IDP Group", - "traits": [ + "resourceType": { + "id": "group", + "displayName": "IDP Group", + "traits": [ "TRAIT_GROUP" ], - "annotations": [ + "annotations": [ { - "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", - "permissions": [ + "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", + "permissions": [ { - "permission": "admin" - }, - { - "permission": "admin.users:write" + "permission": "admin" } ] } ] }, - "capabilities": [ + "capabilities": [ "CAPABILITY_SYNC", "CAPABILITY_PROVISION" ], - "permissions": { - "permissions": [ + "permissions": { + "permissions": [ { - "permission": "admin" - }, - { - "permission": "admin.users:write" + "permission": "admin" } ] } }, { - "resourceType": { - "id": "user", - "displayName": "User", - "traits": [ + "resourceType": { + "id": "user", + "displayName": "User", + "traits": [ "TRAIT_USER" ], - "annotations": [ + "annotations": [ { - "@type": "type.googleapis.com/c1.connector.v2.SkipEntitlementsAndGrants" + "@type": "type.googleapis.com/c1.connector.v2.SkipEntitlementsAndGrants" }, { - "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", - "permissions": [ - { - "permission": "users:read" - }, + "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", + "permissions": [ { - "permission": "users:read.email" + "permission": "users:read" }, { - "permission": "users.profile:read" + "permission": "users:read.email" }, { - "permission": "admin" + "permission": "users.profile:read" }, { - "permission": "admin.users:read" + "permission": "admin" } ] } ] }, - "capabilities": [ + "capabilities": [ "CAPABILITY_SYNC" ], - "permissions": { - "permissions": [ - { - "permission": "users:read" - }, + "permissions": { + "permissions": [ { - "permission": "users:read.email" + "permission": "users:read" }, { - "permission": "users.profile:read" + "permission": "users:read.email" }, { - "permission": "admin" + "permission": "users.profile:read" }, { - "permission": "admin.users:read" + "permission": "admin" } ] } }, { - "resourceType": { - "id": "userGroup", - "displayName": "User Group", - "traits": [ + "resourceType": { + "id": "userGroup", + "displayName": "User Group", + "traits": [ "TRAIT_GROUP" ], - "annotations": [ + "annotations": [ { - "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", - "permissions": [ - { - "permission": "usergroups:read" - }, + "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", + "permissions": [ { - "permission": "users:read" + "permission": "usergroups:read" }, { - "permission": "admin.usergroups:read" + "permission": "users:read" } ] } ] }, - "capabilities": [ + "capabilities": [ "CAPABILITY_SYNC" ], - "permissions": { - "permissions": [ + "permissions": { + "permissions": [ { - "permission": "usergroups:read" + "permission": "usergroups:read" }, { - "permission": "users:read" - }, - { - "permission": "admin.usergroups:read" + "permission": "users:read" } ] } }, { - "resourceType": { - "id": "workspace", - "displayName": "Workspace", - "traits": [ + "resourceType": { + "id": "workspace", + "displayName": "Workspace", + "traits": [ "TRAIT_GROUP" ], - "annotations": [ + "annotations": [ { - "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", - "permissions": [ + "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", + "permissions": [ { - "permission": "team:read" + "permission": "team:read" }, { - "permission": "users:read" + "permission": "users:read" }, { - "permission": "users:read.email" + "permission": "users:read.email" }, { - "permission": "channels:join" + "permission": "channels:join" }, { - "permission": "channels:read" + "permission": "channels:read" }, { - "permission": "groups:read" - }, - { - "permission": "admin.teams:read" + "permission": "groups:read" } ] } ] }, - "capabilities": [ + "capabilities": [ "CAPABILITY_SYNC" ], - "permissions": { - "permissions": [ - { - "permission": "team:read" - }, + "permissions": { + "permissions": [ { - "permission": "users:read" + "permission": "team:read" }, { - "permission": "users:read.email" + "permission": "users:read" }, { - "permission": "channels:join" + "permission": "users:read.email" }, { - "permission": "channels:read" + "permission": "channels:join" }, { - "permission": "groups:read" + "permission": "channels:read" }, { - "permission": "admin.teams:read" + "permission": "groups:read" } ] } }, { - "resourceType": { - "id": "workspaceRole", - "displayName": "Workspace Role", - "traits": [ + "resourceType": { + "id": "workspaceRole", + "displayName": "Workspace Role", + "traits": [ "TRAIT_ROLE" ], - "annotations": [ + "annotations": [ { - "@type": "type.googleapis.com/c1.connector.v2.SkipGrants" + "@type": "type.googleapis.com/c1.connector.v2.SkipGrants" }, { - "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", - "permissions": [ - { - "permission": "admin" - }, + "@type": "type.googleapis.com/c1.connector.v2.CapabilityPermissions", + "permissions": [ { - "permission": "admin.roles:read" + "permission": "admin" } ] } ] }, - "capabilities": [ + "capabilities": [ "CAPABILITY_SYNC" ], - "permissions": { - "permissions": [ - { - "permission": "admin" - }, + "permissions": { + "permissions": [ { - "permission": "admin.roles:read" + "permission": "admin" } ] } } ], - "connectorCapabilities": [ + "connectorCapabilities": [ "CAPABILITY_PROVISION", "CAPABILITY_SYNC", "CAPABILITY_ACTIONS" ], - "credentialDetails": {} + "credentialDetails": {} } \ No newline at end of file diff --git a/docs/connector.mdx b/docs/connector.mdx index 8b21ba78..c2fac730 100644 --- a/docs/connector.mdx +++ b/docs/connector.mdx @@ -16,31 +16,36 @@ If you want to install the ConductorOne Slack app, so that you and your colleagu ## Capabilities +{/* AUTO-GENERATED:START - capabilities + Generated from baton_capabilities.json. Do not edit manually. */} + ### Slack Pro | Resource | Sync | Provision | | :--- | :--- | :--- | -| Accounts | | | -| Workspaces | | | +| Accounts | | | +| Workspaces | | | | Workspace roles | | | | Groups | | | -A limitation in the Slack APIs means that [automatic account provisioning](/product/admin/account-provisioning) is not currently supported for Slack Pro workspaces. +A limitation in the Slack APIs means that [automatic account provisioning](/product/admin/account-provisioning) is not currently supported for Slack Pro workspaces. ### Slack Business+ | Resource | Sync | Provision | | :--- | :--- | :--- | -| Accounts | | | -| Workspaces | | | +| Accounts | | | +| Workspaces | | | | Workspace roles | | | | Business+ roles | | | | Groups | | | | IDP groups* | | | -*The connector can sync and provision IdP groups only if SSO is configured for your Slack Business+ instance. IDP group provisioning is not supported for GovSlack instances. +*The connector can sync and provision IdP groups only if SSO is configured for your Slack Business+ instance. IDP group provisioning is not supported for GovSlack instances. + +A limitation in the Slack APIs means that [automatic account provisioning](/product/admin/account-provisioning) is not currently supported for Slack Business+ workspaces. -A limitation in the Slack APIs means that [automatic account provisioning](/product/admin/account-provisioning) is not currently supported for Slack Business+ workspaces. +{/* AUTO-GENERATED:END - capabilities */} ### Connector actions diff --git a/pkg/connector/resource_types.go b/pkg/connector/resource_types.go index ee724466..9b794310 100644 --- a/pkg/connector/resource_types.go +++ b/pkg/connector/resource_types.go @@ -29,7 +29,6 @@ var ( "users.profile:read", // User Token Scopes (Business+ SCIM) "admin", - "admin.users:read", ), ), } @@ -48,8 +47,6 @@ var ( "channels:join", "channels:read", "groups:read", - // User Token Scopes (Business+) - "admin.teams:read", ), ), } @@ -64,8 +61,6 @@ var ( // Bot Token Scopes "usergroups:read", "users:read", - // User Token Scopes (Business+) - "admin.usergroups:read", ), ), } @@ -79,7 +74,6 @@ var ( capabilityPermissions( // User Token Scopes (Business+ SCIM) "admin", - "admin.users:write", ), ), } @@ -92,7 +86,6 @@ var ( capabilityPermissions( // User Token Scopes (Business+) "admin", - "admin.roles:read", ), ), Traits: []v2.ResourceType_Trait{