Tenant Control Plane API
Version 1.0.0
Administrative API for the Faciotech CRM platform control plane. Manages tenant impersonation sessions, lifecycle requests, health diagnostics, policy bundles, session revocation, identity provisioning configuration (SSO/SCIM), and security audit events. All endpoints require platform admin authentication.
Base URL
Endpoint paths below are relative to the control-plane API base URL.
Endpoints
Impersonation
- GETList tenant impersonation sessions
/tenants/{tenant_id}/impersonations - POSTCreate impersonation session request
/tenants/{tenant_id}/impersonations - POSTApprove impersonation request
/tenants/{tenant_id}/impersonations/{id}/approve - POSTTerminate impersonation session
/tenants/{tenant_id}/impersonations/{id}/terminate - POSTEnd active impersonation session
/session/impersonation/end
Lifecycle
- POSTCreate lifecycle request
/tenants/{tenant_id}/lifecycle-requests - POSTApprove or reject lifecycle request
/tenants/{tenant_id}/lifecycle-requests/{id}/approve
Health
- GETFetch tenant health diagnostics snapshot
/tenants/{tenant_id}/health
Policies
- GETFetch tenant policy bundle
/tenants/{tenant_id}/policies - PUTUpdate tenant policy bundle
/tenants/{tenant_id}/policies
Sessions
- POSTRevoke all tenant sessions
/tenants/{tenant_id}/session-controls/revoke-all - GETGet tenant session context
/session/context
Identity
- GETRead tenant identity provisioning config
/tenants/{tenant_id}/identity/config - PUTUpdate tenant identity provisioning config
/tenants/{tenant_id}/identity/config
Security
- GETFetch security/audit timeline
/tenants/{tenant_id}/security/audit - GETList tenant security events
/security/events - GETRead session-control revocation status
/security/session-controls/status
