# Enterprise Governance, Security & Access

> Team roles, maker-checker approvals, SSO, SCIM, access reviews, security evidence, support, and SLA reporting.

Product 7 in the [Partner API product catalog](/partners/docs/api-products), covering **37 operations**.

Team roles, maker-checker approvals, SSO, SCIM, access reviews, security evidence, support, and SLA reporting.

## Integration guides

[enterprise security](/partners/docs/enterprise-security) · [team access support](/partners/docs/team-access-support) · [sla](/partners/docs/sla)

## Endpoint catalog

Paths are relative to `https://mystocks.africa/api/v1/partner` in production and `https://mystocks.africa/api/sandbox/v1/partner` in sandbox.

Open the [API Reference](/partners/docs/api-reference) and search the operation ID for request parameters, schemas, response codes, and examples. Use the [API Tester](/partners/docs/api-tester) to exercise an operation.

Sandbox availability is taken from each operation's OpenAPI metadata. Production-only operations and unsupported sandbox stubs are explicitly distinguished; account entitlements and instrument eligibility still apply.

| Method and path | Operation ID | Purpose | Sandbox |
| --- | --- | --- | --- |
| `GET /approvals` | `listPartnerApprovals` | List organization approval requests | Production only |
| `POST /approvals` | `createPartnerApproval` | Submit an operation for maker-checker approval | Production only |
| `GET /approvals/{approvalId}` | `getPartnerApproval` | Retrieve approval evidence and event history | Production only |
| `PATCH /approvals/{approvalId}` | `decidePartnerApproval` | Approve, reject, cancel, or delegate a request | Production only |
| `GET /approvals/policies` | `getPartnerApprovalPolicy` | Retrieve maker-checker policy | Production only |
| `PATCH /approvals/policies` | `updatePartnerApprovalPolicy` | Update maker-checker policy | Production only |
| `GET /enterprise/access-reviews` | `listPartnerAccessReviews` | List access certification reviews | Production only |
| `PATCH /enterprise/access-reviews` | `schedulePartnerAccessReviews` | Configure recurring access certifications | Production only |
| `POST /enterprise/access-reviews` | `createPartnerAccessReview` | Start an access certification review | Production only |
| `GET /enterprise/access-reviews/{reviewId}` | `getPartnerAccessReview` | Retrieve access review subjects | Production only |
| `PATCH /enterprise/access-reviews/{reviewId}` | `decidePartnerAccessReview` | Record an access certification decision | Production only |
| `GET /enterprise/evidence` | `exportPartnerEvidence` | Export security and compliance evidence | Production only |
| `DELETE /enterprise/scim` | `revokePartnerScimToken` | Revoke a SCIM provisioning token | Production only |
| `GET /enterprise/scim` | `listPartnerScimTokens` | List SCIM provisioning tokens | Production only |
| `POST /enterprise/scim` | `createPartnerScimToken` | Create a SCIM provisioning token | Production only |
| `GET /enterprise/sso` | `getPartnerSso` | Retrieve enterprise SSO configuration | Production only |
| `PATCH /enterprise/sso` | `updatePartnerSso` | Configure SAML or OIDC SSO | Production only |
| `POST /oauth/token` | `createOAuthToken` | Issue OAuth client-credentials access token | Production only |
| `GET /security` | `getEnterpriseSecurity` | Get enterprise security controls | Production only |
| `PATCH /security` | `updateEnterpriseSecurity` | Update enterprise security controls | Production only |
| `DELETE /sessions` | `revokePartnerSession` | Revoke a partner-console session | Production only |
| `GET /sessions` | `listPartnerSessions` | List active and historical partner-console sessions | Production only |
| `GET /sla` | `listSla` | SLA status | Available |
| `GET /support` | `listPartnerSupportTickets` | List partner support cases | Production only |
| `POST /support` | `createPartnerSupportTicket` | Open a partner support case with SLA clocks | Production only |
| `GET /support/{ticketId}` | `getPartnerSupportTicket` | Get a support case and partner-visible conversation | Production only |
| `PATCH /support/{ticketId}` | `closePartnerSupportTicket` | Resolve or close a partner support case | Production only |
| `POST /support/{ticketId}/messages` | `replyToPartnerSupportTicket` | Add a partner-visible support message | Production only |
| `GET /team` | `getPartnerTeam` | List organization members, roles, invitations, and access policy | Production only |
| `PATCH /team` | `updatePartnerAccessPolicy` | Update organization access policy | Production only |
| `DELETE /team/invites` | `cancelPartnerInvitation` | Cancel a pending invitation | Production only |
| `POST /team/invites` | `invitePartnerMember` | Invite a verified-email member | Production only |
| `PATCH /team/members/{memberId}` | `updatePartnerMember` | Change a member's roles or access status | Production only |
| `GET /team/roles` | `listPartnerRoles` | List system and custom roles and the permission catalogue | Production only |
| `POST /team/roles` | `createPartnerRole` | Create a custom partner role | Production only |
| `DELETE /team/roles/{roleId}` | `deletePartnerRole` | Delete an unused custom role | Production only |
| `PATCH /team/roles/{roleId}` | `updatePartnerRole` | Update a custom role and recalculate assigned-member permissions | Production only |

## Shared contracts

[auth](/partners/docs/auth) · [errors](/partners/docs/errors) · [rate limits](/partners/docs/rate-limits) · [contract guarantees](/partners/docs/contract-guarantees)

[Download the September 2026 specification PDF](/docs/PartnerAPI.pdf). Read the [online clarifications](/partners/docs/partner-specification) before using the PDF's general examples.