RFC7644 §3.9 indicates that either attributes or excludedAttributes should be provided:
Clients MAY request a partial resource representation on any
operation that returns a resource within the response by specifying
either of the mutually exclusive URL query parameters "attributes" or
"excludedAttributes", as follows:
RFC7644 §3.9 indicates that either
attributes
orexcludedAttributes
should be provided:We should add a validator for this.