Decide items of an access review.

POST

/api/admin/compliance/access-reviews/{id}/decisions

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/admin/compliance/access-reviews/example/decisions \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "item_ids": [ "example" ], "decision": "approved", "justification": "example" }'

Approves or revokes up to 100 items of an open review, recording who decided and why. An item whose revocation is being applied, was applied or started (incomplete) keeps its decision.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Path Parameters

id

required

string

Access review id.

Request Body ^required

Media type application/json

object

item_ids

required

Array<string>

>= 1 items <= 100 items

decision

required

string

Allowed values: approved revoked

justification

string

<= 1000 characters

key

additional properties

Responses

200

Items decided.

Media type application/json

object

updated

required

integer

unchanged

required

Unknown items, or ones whose revocation was applied.

integer

review

required

object

review_id

required

string

name

required

string

description

string | null

scope

required

string

Allowed values: all_users role organization inactive_users

scope_value

string | null

inactive_days

integer | null

status

required

string

Allowed values: pending in_progress completed cancelled

reviewer_id

string | null

created_by

string | null

completed_by

string | null

progress

required

object

total_items

required

integer

reviewed_items

required

integer

approved_items

required

integer

revoked_items

required

integer

completion_percent

required

integer

created_at

required

string | null format: date-time

started_at

string | null format: date-time

completed_at

string | null format: date-time

due_date

string | null format: date-time

overdue

required

boolean

Example

{
  "review": {
    "scope": "all_users",
    "status": "pending"
  }
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

404

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

409

The review is not open.

500

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}