Access Reviews API Application Roles Reference
Assign one of the following predefined roles for performing API operations.
| Method | Path | Application Roles (Unrestricted) | Application Roles (Restricted) |
|---|---|---|---|
| GET | /access-governance/access-reviews/20250331/accessReviews/accessControl | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/identity | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/ownership | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId} | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actionablePolicyStatements | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| POST | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/accept | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| POST | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/assign | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| POST | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/modify | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| POST | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/reassign | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| POST | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/remove | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| POST | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/revoke | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/associations | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/eventChanges | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/identities | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/insights | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/membershipRules | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/policyStatements/{policyStatementId} | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/policyStatements/{policyStatementId}/identities | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/policyStatements/{policyStatementId}/resourceCounts | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/policyStatements/{policyStatementId}/resources | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/priorActions | AG_AccessControl_Admin, AG_AccessControl_Admin_Restricted, AG_Administrator, AG_AppOwner_Admin, AG_AppOwner_Admin_Restricted, AG_Auditor, AG_CampaignAdmin, AG_Enterprise_Wide_Access_Admin, AG_ServiceDesk_Admin, AG_User |
|
| GET | /access-governance/access-reviews/20250331/campaigns | AG_Administrator, AG_Auditor |
|
| GET | /access-governance/access-reviews/20250331/campaigns/{campaignId} | AG_Administrator, AG_Auditor |
|
| POST | /access-governance/access-reviews/20250331/campaigns/{campaignId}/actions/approve | AG_Administrator |
|
| POST | /access-governance/access-reviews/20250331/campaigns/{campaignId}/actions/changeOwner | AG_Administrator |
|
| POST | /access-governance/access-reviews/20250331/campaigns/{campaignId}/actions/terminate | AG_Administrator |
|
| GET | /access-governance/access-reviews/20250331/campaigns/{campaignId}/overviewReport | AG_Administrator, AG_Auditor |
|
| GET | /access-governance/access-reviews/20250331/campaigns/{campaignId}/stages/{stageId}/reviewers | AG_Administrator, AG_Auditor |