Utilisateurs

Créer un dashboard personnalisé pour le sujet délégué

Exige une allowlist explicite sur la clé et la capacité custom_dashboards.

Scope requis : users:write. Scopes et délégation.

Délégation utilisateur : exactement un header X-Marko-Delegated-User-Id ou X-Marko-Delegated-User-Email.

Accès complémentaire : allowlist utilisateur explicite sur la clé et capacité custom_dashboards. Le sujet doit être approuvé et appartenir à la même entité.

Idempotence : header Idempotency-Key obligatoire. Pour reprendre la même mutation, réutiliser la même clé et le même contenu. Écritures et idempotence.

Créer un dashboard personnalisé pour le sujet délégué

curl --request POST \
  --url https://partner-api.marko.fr/v1/users/me/custom-dashboards \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "name": "Pilotage portefeuille",
  "layout": [
    {
      "widget_type": "kpi_card",
      "title": "Total nominal"
    }
  ],
  "filters": {
    "fund_id": "fond_001"
  }
}
'

import requests

url = "https://partner-api.marko.fr/v1/users/me/custom-dashboards"

payload = {
    "name": "Pilotage portefeuille",
    "layout": [
        {
            "widget_type": "kpi_card",
            "title": "Total nominal"
        }
    ],
    "filters": { "fund_id": "fond_001" }
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const url = 'https://partner-api.marko.fr/v1/users/me/custom-dashboards';
const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: 'Pilotage portefeuille',
    layout: [{widget_type: 'kpi_card', title: 'Total nominal'}],
    filters: {fund_id: 'fond_001'}
  })
};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error(err));

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: 'Pilotage portefeuille',
    layout: [{widget_type: 'kpi_card', title: 'Total nominal'}],
    filters: {fund_id: 'fond_001'}
  })
};

fetch('https://partner-api.marko.fr/v1/users/me/custom-dashboards', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://partner-api.marko.fr/v1/users/me/custom-dashboards",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => 'Pilotage portefeuille',
    'layout' => [
        [
                'widget_type' => 'kpi_card',
                'title' => 'Total nominal'
        ]
    ],
    'filters' => [
        'fund_id' => 'fond_001'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

{
  "id": "22222222-2222-2222-2222-222222222222",
  "name": "Pilotage portefeuille",
  "description": null,
  "user_id": "example",
  "layout": [],
  "filters": {},
  "is_shared": false,
  "share_token": null,
  "created_at": "2026-10-01T10:00:00Z",
  "updated_at": "2026-10-01T10:00:00Z"
}

{
  "type": "about:blank",
  "title": "Bad Request",
  "status": 400,
  "detail": "Idempotency-Key must contain at most 255 visible ASCII characters without spaces.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Unauthorized",
  "status": 401,
  "detail": "A valid bearer token is required.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Forbidden",
  "status": 403,
  "detail": "The API key does not allow this operation.",
  "request_id": "req_example_partner_call"
}

{
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "type": "about:blank",
  "request_id": "<string>",
  "scope": "<string>",
  "route_id": "<string>",
  "reason_code": "<string>"
}

{
  "type": "about:blank",
  "title": "Conflict",
  "status": 409,
  "detail": "The idempotency key payload, external reference, target, or source conflicts with an existing write.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Unprocessable Content",
  "status": 422,
  "detail": "The request payload or parameters are invalid.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Precondition Required",
  "status": 428,
  "detail": "The Idempotency-Key header is required.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Too Many Requests",
  "status": 429,
  "detail": "The request rate limit was exceeded.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "An unexpected server error occurred.",
  "request_id": "req_example_partner_call"
}

Authorizations

Authorization

string

header

required

Use the access_token returned by POST /v1/auth/token. Do not send the raw API secret on business endpoints.

Headers

X-Request-ID

string

Partner-generated correlation identifier echoed in logs and error payloads.

Idempotency-Key

string

required

Required for every write, including environments where replay deduplication is disabled. Reuse the same value when retrying the same logical write and use a new value for a different write.

Maximum string length: 255

Pattern: ^[!-~]+$

X-Marko-Delegated-User-Id

string

Fournir exactement un des deux headers de délégation (Id ou Email), dans la même entité. Ils sont mutuellement exclusifs. Voir le guide Scopes et délégation.

X-Marko-Delegated-User-Email

string

Fournir exactement un des deux headers de délégation (Id ou Email), dans la même entité. Ils sont mutuellement exclusifs. Voir le guide Scopes et délégation.

Body

application/json

name

string

required

Nom de la ressource. Les recherches exactes et partielles sont décrites au niveau de la route.

Required string length: 1 - 200

description

string | null

Description libre de la ressource.

Maximum string length: 2000

layout

Layout · object[]

Disposition des widgets du dashboard.

Maximum array length: 50

filters

Filters · object

Objet JSON extensible. Les types des valeurs sont indiqués par additionalProperties lorsque la route les contraint.

default_scope

DashboardScope · object

Périmètre métier initial du dashboard.

Show child attributes

Response

Successful response

string<uuid>

required

Identifiant MARKO de la ressource.

name

string

required

Nom de la ressource. Les recherches exactes et partielles sont décrites au niveau de la route.

description

string | null

required

Description libre de la ressource.

user_id

string

required

Identifiant utilisateur MARKO; il n'est pas nécessairement un UUID.

layout

Layout · object[]

required

Disposition des widgets du dashboard.

filters

Filters · object

required

Objet JSON extensible. Les types des valeurs sont indiqués par additionalProperties lorsque la route les contraint.

is_shared

boolean

required

Indique si le dashboard est partagé.

Jeton associé au partage du dashboard, lorsqu'il existe; ne pas le publier.

created_at

string<date-time>

required

Date de création au format ISO 8601.

updated_at

string<date-time>

required

Date de dernière modification au format ISO 8601.

default_scope

DashboardScope · object

Périmètre métier initial du dashboard.

Show child attributes

Visibilité, permissions et membres du partage du dashboard.

Show child attributes

can_edit

boolean

default:false

Indique si l'utilisateur délégué peut modifier ce dashboard.

can_manage

boolean

default:false

Indique si l'utilisateur délégué peut gérer le partage de ce dashboard.

Créer un dashboard personnalisé pour le sujet délégué

curl --request POST \
  --url https://partner-api.marko.fr/v1/users/me/custom-dashboards \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "name": "Pilotage portefeuille",
  "layout": [
    {
      "widget_type": "kpi_card",
      "title": "Total nominal"
    }
  ],
  "filters": {
    "fund_id": "fond_001"
  }
}
'

import requests

url = "https://partner-api.marko.fr/v1/users/me/custom-dashboards"

payload = {
    "name": "Pilotage portefeuille",
    "layout": [
        {
            "widget_type": "kpi_card",
            "title": "Total nominal"
        }
    ],
    "filters": { "fund_id": "fond_001" }
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const url = 'https://partner-api.marko.fr/v1/users/me/custom-dashboards';
const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: 'Pilotage portefeuille',
    layout: [{widget_type: 'kpi_card', title: 'Total nominal'}],
    filters: {fund_id: 'fond_001'}
  })
};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error(err));

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: 'Pilotage portefeuille',
    layout: [{widget_type: 'kpi_card', title: 'Total nominal'}],
    filters: {fund_id: 'fond_001'}
  })
};

fetch('https://partner-api.marko.fr/v1/users/me/custom-dashboards', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://partner-api.marko.fr/v1/users/me/custom-dashboards",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => 'Pilotage portefeuille',
    'layout' => [
        [
                'widget_type' => 'kpi_card',
                'title' => 'Total nominal'
        ]
    ],
    'filters' => [
        'fund_id' => 'fond_001'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

{
  "id": "22222222-2222-2222-2222-222222222222",
  "name": "Pilotage portefeuille",
  "description": null,
  "user_id": "example",
  "layout": [],
  "filters": {},
  "is_shared": false,
  "share_token": null,
  "created_at": "2026-10-01T10:00:00Z",
  "updated_at": "2026-10-01T10:00:00Z"
}

{
  "type": "about:blank",
  "title": "Bad Request",
  "status": 400,
  "detail": "Idempotency-Key must contain at most 255 visible ASCII characters without spaces.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Unauthorized",
  "status": 401,
  "detail": "A valid bearer token is required.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Forbidden",
  "status": 403,
  "detail": "The API key does not allow this operation.",
  "request_id": "req_example_partner_call"
}

{
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "type": "about:blank",
  "request_id": "<string>",
  "scope": "<string>",
  "route_id": "<string>",
  "reason_code": "<string>"
}

{
  "type": "about:blank",
  "title": "Conflict",
  "status": 409,
  "detail": "The idempotency key payload, external reference, target, or source conflicts with an existing write.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Unprocessable Content",
  "status": 422,
  "detail": "The request payload or parameters are invalid.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Precondition Required",
  "status": 428,
  "detail": "The Idempotency-Key header is required.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Too Many Requests",
  "status": 429,
  "detail": "The request rate limit was exceeded.",
  "request_id": "req_example_partner_call"
}

{
  "type": "about:blank",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "An unexpected server error occurred.",
  "request_id": "req_example_partner_call"
}

Démarrer

Tutoriels

Intégrer

Référence API

Créer un dashboard personnalisé pour le sujet délégué

Authorizations

Headers

Body

Response