Create

Create creates a new access review campaign with the specified name, policy, and owners.

POST /api/v1/access_review

Create

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.AccessReview.Create(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.AccessReviewServiceCreateResponse != nil {
        // handle response
    }
}

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
  security: {
    bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
    oauth: "<YOUR_OAUTH_HERE>",
  },
});

async function run() {
  const result = await conductoroneSDKTypescript.accessReview.create();

  console.log(result);
}

run();

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/access_review \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "completionDate": "2023-11-07T05:31:56Z",
  "description": "<string>",
  "displayName": "<string>",
  "duplicateFrom": "<string>",
  "expandMask": {
    "paths": [
      "<string>"
    ]
  },
  "notificationConfig": {
    "sendClose": true,
    "sendKickoff": true,
    "sendReminders": true
  },
  "ownerIds": [
    "<string>"
  ],
  "policyId": "<string>",
  "scopeV2": {
    "accountCelExpression": {
      "expression": "<string>"
    },
    "accountCriteria": {
      "accountTypes": [],
      "appUserStatuses": [],
      "noAccountOwner": true
    },
    "allAccessConflicts": {},
    "allAccounts": {},
    "allGrants": {},
    "allUsers": {},
    "appAccess": {},
    "appSelectionCriteria": {
      "complianceFrameworkAttributeValueIds": [
        "<string>"
      ],
      "riskLevelAttributeValueIds": [
        "<string>"
      ]
    },
    "celExpression": {
      "expression": "<string>"
    },
    "grantsByCriteria": {
      "accessProfileFilter": {
        "excludedAccessProfileIds": [
          "<string>"
        ],
        "includedAccessProfileIds": [
          "<string>"
        ]
      },
      "daysSinceAdded": "<string>",
      "daysSinceLastUsed": "<string>",
      "daysSinceReviewed": "<string>",
      "grantsAddedBetween": {
        "endDate": "2023-11-07T05:31:56Z",
        "startDate": "2023-11-07T05:31:56Z"
      }
    },
    "resourceSelection": {},
    "resourceTypeSelections": {},
    "selectedUsers": {
      "userIds": [
        "<string>"
      ]
    },
    "specificAccessConflicts": {},
    "specificResources": {},
    "userCriteria": {
      "groupAppEntitlementsRef": [
        {
          "appId": "<string>",
          "id": "<string>"
        }
      ],
      "managerUserIds": [
        "<string>"
      ],
      "multiUserProfileAttributes": {},
      "userStatus": []
    }
  }
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/access_review"

payload = {
    "completionDate": "2023-11-07T05:31:56Z",
    "description": "<string>",
    "displayName": "<string>",
    "duplicateFrom": "<string>",
    "expandMask": { "paths": ["<string>"] },
    "notificationConfig": {
        "sendClose": True,
        "sendKickoff": True,
        "sendReminders": True
    },
    "ownerIds": ["<string>"],
    "policyId": "<string>",
    "scopeV2": {
        "accountCelExpression": { "expression": "<string>" },
        "accountCriteria": {
            "accountTypes": [],
            "appUserStatuses": [],
            "noAccountOwner": True
        },
        "allAccessConflicts": {},
        "allAccounts": {},
        "allGrants": {},
        "allUsers": {},
        "appAccess": {},
        "appSelectionCriteria": {
            "complianceFrameworkAttributeValueIds": ["<string>"],
            "riskLevelAttributeValueIds": ["<string>"]
        },
        "celExpression": { "expression": "<string>" },
        "grantsByCriteria": {
            "accessProfileFilter": {
                "excludedAccessProfileIds": ["<string>"],
                "includedAccessProfileIds": ["<string>"]
            },
            "daysSinceAdded": "<string>",
            "daysSinceLastUsed": "<string>",
            "daysSinceReviewed": "<string>",
            "grantsAddedBetween": {
                "endDate": "2023-11-07T05:31:56Z",
                "startDate": "2023-11-07T05:31:56Z"
            }
        },
        "resourceSelection": {},
        "resourceTypeSelections": {},
        "selectedUsers": { "userIds": ["<string>"] },
        "specificAccessConflicts": {},
        "specificResources": {},
        "userCriteria": {
            "groupAppEntitlementsRef": [
                {
                    "appId": "<string>",
                    "id": "<string>"
                }
            ],
            "managerUserIds": ["<string>"],
            "multiUserProfileAttributes": {},
            "userStatus": []
        }
    }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    completionDate: '2023-11-07T05:31:56Z',
    description: '<string>',
    displayName: '<string>',
    duplicateFrom: '<string>',
    expandMask: {paths: ['<string>']},
    notificationConfig: {sendClose: true, sendKickoff: true, sendReminders: true},
    ownerIds: ['<string>'],
    policyId: '<string>',
    scopeV2: {
      accountCelExpression: {expression: '<string>'},
      accountCriteria: {accountTypes: [], appUserStatuses: [], noAccountOwner: true},
      allAccessConflicts: {},
      allAccounts: {},
      allGrants: {},
      allUsers: {},
      appAccess: {},
      appSelectionCriteria: {
        complianceFrameworkAttributeValueIds: ['<string>'],
        riskLevelAttributeValueIds: ['<string>']
      },
      celExpression: {expression: '<string>'},
      grantsByCriteria: {
        accessProfileFilter: {excludedAccessProfileIds: ['<string>'], includedAccessProfileIds: ['<string>']},
        daysSinceAdded: '<string>',
        daysSinceLastUsed: '<string>',
        daysSinceReviewed: '<string>',
        grantsAddedBetween: {endDate: '2023-11-07T05:31:56Z', startDate: '2023-11-07T05:31:56Z'}
      },
      resourceSelection: {},
      resourceTypeSelections: {},
      selectedUsers: {userIds: ['<string>']},
      specificAccessConflicts: {},
      specificResources: {},
      userCriteria: {
        groupAppEntitlementsRef: [{appId: '<string>', id: '<string>'}],
        managerUserIds: ['<string>'],
        multiUserProfileAttributes: {},
        userStatus: []
      }
    }
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/access_review', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/access_review",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'completionDate' => '2023-11-07T05:31:56Z',
    'description' => '<string>',
    'displayName' => '<string>',
    'duplicateFrom' => '<string>',
    'expandMask' => [
        'paths' => [
                '<string>'
        ]
    ],
    'notificationConfig' => [
        'sendClose' => true,
        'sendKickoff' => true,
        'sendReminders' => true
    ],
    'ownerIds' => [
        '<string>'
    ],
    'policyId' => '<string>',
    'scopeV2' => [
        'accountCelExpression' => [
                'expression' => '<string>'
        ],
        'accountCriteria' => [
                'accountTypes' => [
                                
                ],
                'appUserStatuses' => [
                                
                ],
                'noAccountOwner' => true
        ],
        'allAccessConflicts' => [
                
        ],
        'allAccounts' => [
                
        ],
        'allGrants' => [
                
        ],
        'allUsers' => [
                
        ],
        'appAccess' => [
                
        ],
        'appSelectionCriteria' => [
                'complianceFrameworkAttributeValueIds' => [
                                '<string>'
                ],
                'riskLevelAttributeValueIds' => [
                                '<string>'
                ]
        ],
        'celExpression' => [
                'expression' => '<string>'
        ],
        'grantsByCriteria' => [
                'accessProfileFilter' => [
                                'excludedAccessProfileIds' => [
                                                                '<string>'
                                ],
                                'includedAccessProfileIds' => [
                                                                '<string>'
                                ]
                ],
                'daysSinceAdded' => '<string>',
                'daysSinceLastUsed' => '<string>',
                'daysSinceReviewed' => '<string>',
                'grantsAddedBetween' => [
                                'endDate' => '2023-11-07T05:31:56Z',
                                'startDate' => '2023-11-07T05:31:56Z'
                ]
        ],
        'resourceSelection' => [
                
        ],
        'resourceTypeSelections' => [
                
        ],
        'selectedUsers' => [
                'userIds' => [
                                '<string>'
                ]
        ],
        'specificAccessConflicts' => [
                
        ],
        'specificResources' => [
                
        ],
        'userCriteria' => [
                'groupAppEntitlementsRef' => [
                                [
                                                                'appId' => '<string>',
                                                                'id' => '<string>'
                                ]
                ],
                'managerUserIds' => [
                                '<string>'
                ],
                'multiUserProfileAttributes' => [
                                
                ],
                'userStatus' => [
                                
                ]
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/access_review")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"completionDate\": \"2023-11-07T05:31:56Z\",\n  \"description\": \"<string>\",\n  \"displayName\": \"<string>\",\n  \"duplicateFrom\": \"<string>\",\n  \"expandMask\": {\n    \"paths\": [\n      \"<string>\"\n    ]\n  },\n  \"notificationConfig\": {\n    \"sendClose\": true,\n    \"sendKickoff\": true,\n    \"sendReminders\": true\n  },\n  \"ownerIds\": [\n    \"<string>\"\n  ],\n  \"policyId\": \"<string>\",\n  \"scopeV2\": {\n    \"accountCelExpression\": {\n      \"expression\": \"<string>\"\n    },\n    \"accountCriteria\": {\n      \"accountTypes\": [],\n      \"appUserStatuses\": [],\n      \"noAccountOwner\": true\n    },\n    \"allAccessConflicts\": {},\n    \"allAccounts\": {},\n    \"allGrants\": {},\n    \"allUsers\": {},\n    \"appAccess\": {},\n    \"appSelectionCriteria\": {\n      \"complianceFrameworkAttributeValueIds\": [\n        \"<string>\"\n      ],\n      \"riskLevelAttributeValueIds\": [\n        \"<string>\"\n      ]\n    },\n    \"celExpression\": {\n      \"expression\": \"<string>\"\n    },\n    \"grantsByCriteria\": {\n      \"accessProfileFilter\": {\n        \"excludedAccessProfileIds\": [\n          \"<string>\"\n        ],\n        \"includedAccessProfileIds\": [\n          \"<string>\"\n        ]\n      },\n      \"daysSinceAdded\": \"<string>\",\n      \"daysSinceLastUsed\": \"<string>\",\n      \"daysSinceReviewed\": \"<string>\",\n      \"grantsAddedBetween\": {\n        \"endDate\": \"2023-11-07T05:31:56Z\",\n        \"startDate\": \"2023-11-07T05:31:56Z\"\n      }\n    },\n    \"resourceSelection\": {},\n    \"resourceTypeSelections\": {},\n    \"selectedUsers\": {\n      \"userIds\": [\n        \"<string>\"\n      ]\n    },\n    \"specificAccessConflicts\": {},\n    \"specificResources\": {},\n    \"userCriteria\": {\n      \"groupAppEntitlementsRef\": [\n        {\n          \"appId\": \"<string>\",\n          \"id\": \"<string>\"\n        }\n      ],\n      \"managerUserIds\": [\n        \"<string>\"\n      ],\n      \"multiUserProfileAttributes\": {},\n      \"userStatus\": []\n    }\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/access_review")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"completionDate\": \"2023-11-07T05:31:56Z\",\n  \"description\": \"<string>\",\n  \"displayName\": \"<string>\",\n  \"duplicateFrom\": \"<string>\",\n  \"expandMask\": {\n    \"paths\": [\n      \"<string>\"\n    ]\n  },\n  \"notificationConfig\": {\n    \"sendClose\": true,\n    \"sendKickoff\": true,\n    \"sendReminders\": true\n  },\n  \"ownerIds\": [\n    \"<string>\"\n  ],\n  \"policyId\": \"<string>\",\n  \"scopeV2\": {\n    \"accountCelExpression\": {\n      \"expression\": \"<string>\"\n    },\n    \"accountCriteria\": {\n      \"accountTypes\": [],\n      \"appUserStatuses\": [],\n      \"noAccountOwner\": true\n    },\n    \"allAccessConflicts\": {},\n    \"allAccounts\": {},\n    \"allGrants\": {},\n    \"allUsers\": {},\n    \"appAccess\": {},\n    \"appSelectionCriteria\": {\n      \"complianceFrameworkAttributeValueIds\": [\n        \"<string>\"\n      ],\n      \"riskLevelAttributeValueIds\": [\n        \"<string>\"\n      ]\n    },\n    \"celExpression\": {\n      \"expression\": \"<string>\"\n    },\n    \"grantsByCriteria\": {\n      \"accessProfileFilter\": {\n        \"excludedAccessProfileIds\": [\n          \"<string>\"\n        ],\n        \"includedAccessProfileIds\": [\n          \"<string>\"\n        ]\n      },\n      \"daysSinceAdded\": \"<string>\",\n      \"daysSinceLastUsed\": \"<string>\",\n      \"daysSinceReviewed\": \"<string>\",\n      \"grantsAddedBetween\": {\n        \"endDate\": \"2023-11-07T05:31:56Z\",\n        \"startDate\": \"2023-11-07T05:31:56Z\"\n      }\n    },\n    \"resourceSelection\": {},\n    \"resourceTypeSelections\": {},\n    \"selectedUsers\": {\n      \"userIds\": [\n        \"<string>\"\n      ]\n    },\n    \"specificAccessConflicts\": {},\n    \"specificResources\": {},\n    \"userCriteria\": {\n      \"groupAppEntitlementsRef\": [\n        {\n          \"appId\": \"<string>\",\n          \"id\": \"<string>\"\n        }\n      ],\n      \"managerUserIds\": [\n        \"<string>\"\n      ],\n      \"multiUserProfileAttributes\": {},\n      \"userStatus\": []\n    }\n  }\n}"

response = http.request(request)
puts response.read_body

200

{
  "accessReview": {
    "accessReview": {
      "accessReviewTemplateId": "<string>",
      "autoCloseCampaign": true,
      "autoGenerateReport": true,
      "autoResolve": true,
      "autoStartCampaign": true,
      "bindings": {},
      "campaignHealth": {
        "checkedAt": "2023-11-07T05:31:56Z",
        "phantomLockedCount": 123
      },
      "campaignInsights": {
        "markdown": "<string>"
      },
      "closedAt": "2023-11-07T05:31:56Z",
      "columnConfig": {
        "columns": []
      },
      "completionDate": "2023-11-07T05:31:56Z",
      "connectorSourcesFrozenAt": "2023-11-07T05:31:56Z",
      "createdAt": "2023-11-07T05:31:56Z",
      "createdById": "<string>",
      "description": "<string>",
      "displayName": "<string>",
      "exclusionScope": {
        "appUserStatuses": [],
        "appUserTypes": []
      },
      "exemptCertifiedAccessConflicts": true,
      "expectedTicketCount": 123,
      "hasAccuracySupport": true,
      "id": "<string>",
      "inclusionScope": {
        "appUserStatuses": [],
        "appUserTypes": [],
        "managerIds": [
          "<string>"
        ],
        "multiUserProfileAttributes": {},
        "noAccountOwners": true,
        "userIds": [
          "<string>"
        ],
        "userStatuses": []
      },
      "multiApp": {
        "appEntitlementDetails": {},
        "appEntitlements": {}
      },
      "notificationConfig": {
        "sendClose": true,
        "sendKickoff": true,
        "sendReminders": true
      },
      "policyId": "<string>",
      "reviewInstructions": "<string>",
      "reviewerAttributeConfig": {
        "bindings": [
          {
            "appId": "<string>",
            "attributeKey": "<string>"
          }
        ]
      },
      "scheduledStartDate": "2023-11-07T05:31:56Z",
      "scope": {
        "appUserStatuses": [],
        "appUserTypes": []
      },
      "scopeV2": {
        "accountCelExpression": {
          "expression": "<string>"
        },
        "accountCriteria": {
          "accountTypes": [],
          "appUserStatuses": [],
          "noAccountOwner": true
        },
        "allAccessConflicts": {},
        "allAccounts": {},
        "allGrants": {},
        "allUsers": {},
        "appAccess": {},
        "appSelectionCriteria": {
          "complianceFrameworkAttributeValueIds": [
            "<string>"
          ],
          "riskLevelAttributeValueIds": [
            "<string>"
          ]
        },
        "celExpression": {
          "expression": "<string>"
        },
        "grantsByCriteria": {
          "accessProfileFilter": {
            "excludedAccessProfileIds": [
              "<string>"
            ],
            "includedAccessProfileIds": [
              "<string>"
            ]
          },
          "daysSinceAdded": "<string>",
          "daysSinceLastUsed": "<string>",
          "daysSinceReviewed": "<string>",
          "grantsAddedBetween": {
            "endDate": "2023-11-07T05:31:56Z",
            "startDate": "2023-11-07T05:31:56Z"
          }
        },
        "resourceSelection": {},
        "resourceTypeSelections": {},
        "selectedUsers": {
          "userIds": [
            "<string>"
          ]
        },
        "specificAccessConflicts": {},
        "specificResources": {},
        "userCriteria": {
          "groupAppEntitlementsRef": [
            {
              "appId": "<string>",
              "id": "<string>"
            }
          ],
          "managerUserIds": [
            "<string>"
          ],
          "multiUserProfileAttributes": {},
          "userStatus": []
        }
      },
      "scopingVersion": "<string>",
      "signatureConfig": {
        "meaningOfSignature": "<string>",
        "requireSignature": true,
        "stepUpProviderId": "<string>",
        "tspUrl": "<string>"
      },
      "singleApp": {
        "appId": "<string>"
      },
      "startedAt": "2023-11-07T05:31:56Z",
      "updatedAt": "2023-11-07T05:31:56Z",
      "usePolicyOverride": true
    },
    "createdByUserPath": "<string>",
    "objectPermissions": {
      "delete": true,
      "edit": true,
      "extra": {},
      "read": true
    },
    "policyPath": "<string>"
  },
  "expanded": [
    {
      "@type": "<string>"
    }
  ]
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

The AccessReviewServiceCreateRequest message.

completionDate · string<date-time> | null

description · string | null

An optional description providing context about the campaign.

displayName · string | null

The display name for the new campaign.

duplicateFrom · string | null

The ID of an existing campaign to copy scope and entitlement configuration from. Optional.

expandMask · Access Review Expand Mask · object | null

The AccessReviewExpandMask message.

Show child attributes

notificationConfig · Notification Config · object | null

Controls which email notifications are sent during the access review lifecycle.

Show child attributes

ownerIds · string[] | null

The IDs of the users who own and manage this campaign. At least one owner is required.

policyId · string | null

The ID of the review policy that governs task assignment and resolution.

scopeType · enum<string> | null

The type of scoping method for the campaign (e.g., by entitlements, by access conflicts, or by resource).

Available options: ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED, ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS, ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS, ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE, ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE

scopeV2 · Access Review Scope V 2 · object | null

The AccessReviewScopeV2 message.

This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time:

• appAccess
• specificResources
• appSelectionCriteria
• resourceTypeSelections

This message contains a oneof named users_scope. Only a single field of the following list may be set at a time:

• allUsers
• selectedUsers
• userCriteria
• celExpression

This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time:

• allAccounts
• accountCriteria
• accountCelExpression

This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time:

• allGrants
• grantsByCriteria

This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time:

• allAccessConflicts
• specificAccessConflicts

This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time:

• resourceSelection

Show child attributes

Response

200 - application/json

Successful response

The AccessReviewServiceCreateResponse message.

accessReview · Access Review View · object | null

The AccessReviewView message.

Show child attributes

expanded · object[] | null

Related objects requested via the expand mask.

Show child attributes