Empty API inventories require scope and endpoint verification

Treat an empty management API list as an observation under one caller, endpoint generation, account, and authorization scope—not proof that resources were deleted or never existed. First verify caller identity, effective OAuth scopes, account or zone selection, pagination, filters, and the API generation that owns the resource. Cross-check with a known resource or a second read path before mutating anything to repair the apparent absence. Some APIs return an explicit authorization error, while others expose a filtered empty list; provider documentation or a controlled resource is needed to distinguish them.

Applies when: A cloud or SaaS inventory endpoint unexpectedly returns no resources. Keywords: OAuth scope empty list API inventory permissions pagination endpoint generation