1. Oracle Access Governance REST APIs
  2. Tasks
  3. AccessGuardrails

Update the Access Guardrail identified by id

put

/access-governance/access-controls/20250331/accessGuardrails/{accessGuardrailId}

Updates the Access Guardrail. Currently, when editing access guardrails via the UI, fields related to condition handling may need to be reapplied.

Request

Path Parameters
Header Parameters
  • For optimistic concurrency control. In the PUT or DELETE call for a resource, set the `if-match` parameter to the value of the etag from a previous GET or POST response for that resource. The resource will be updated or deleted only if the etag you provide matches the resource's current etag value.
  • The client request ID for tracing. The only valid characters for request IDs are letters, numbers, underscore, and dash.
Body ()
The information to be updated.
Root Schema : UpdateAccessGuardrailDetails
Type: object
The information to be updated.
Show Source
Nested Schema : ActionOnFailure
Type: object
The information about remediation in case of condition failure.
Show Source
Nested Schema : owners
Type: array
List of owner entities.
Show Source
Nested Schema : RuleCollection
Type: object
Collection of rule.
Show Source
Nested Schema : tags
Type: array
Tags for the AccessGuardrail.
Show Source
Nested Schema : OwnerSummary
Type: object
Owner entity object
Show Source
Nested Schema : items
Type: array
List of rule.
Show Source
Nested Schema : Rule
Type: object
The information about Rule.
Show Source
Nested Schema : ConditionCollection
Type: object
Collection of conditions.
Show Source
Nested Schema : items
Type: array
List of condition.
Show Source
Nested Schema : Condition
Type: object
The information about Condition.
Show Source
Nested Schema : additionalAttributes
Type: object
Additional Properties Allowed
Show Source
Additional attributes for additional information related to the condition.
Nested Schema : BasicCondition
Type: object
The information about condition.
Show Source
  • Allowed Values: [ "STRING", "NUMBER", "BOOLEAN", "DATE" ]
    Data type for the condition identifier (lhs)
  • Minimum Length: 1
    Maximum Length: 255
    Access Guardrails Identifier
  • Minimum Length: 1
    Maximum Length: 512
    Left hand side of the condition.
  • Allowed Values: [ "EQ", "NE", "GT", "LT", "GTE", "LTE", "BEFORE", "AFTER", "TILL", "FROM", "BETWEEN", "NOT_BETWEEN", "IN", "NOT_IN", "CONTAINS", "NOT_CONTAINS", "BEGINS_WITH", "NOT_BEGINS_WITH", "ENDS_WITH", "NOT_ENDS_WITH", "IS_NULL", "IS_NOT_NULL", "EQUAL_WITH_NULL" ]
    The operator for a access guardrail.
  • rhs
    Right hand side of the condition.
Nested Schema : BasicConditionCollection
Type: object
Collection of conditions.
Show Source
Nested Schema : rhs
Type: array
Right hand side of the condition.
Show Source
Nested Schema : items
Type: array
List of condition.
Show Source
Back to Top

Response

Supported Media Types

200 Response

The Access Guardrail was successfully updated.
Headers
  • For optimistic concurrency control. See `if-match`.
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : AccessGuardrail
Type: object
Description of AccessGuardrail.
Show Source
Nested Schema : ActionOnFailure
Type: object
The information about remediation in case of condition failure.
Show Source
Nested Schema : owners
Type: array
List of owner entities
Show Source
Nested Schema : RuleCollection
Type: object
Collection of rule.
Show Source
Nested Schema : tags
Type: array
Tags for the AccessGuardrail.
Show Source
Nested Schema : OwnerSummary
Type: object
Owner entity object
Show Source
Nested Schema : items
Type: array
List of rule.
Show Source
Nested Schema : Rule
Type: object
The information about Rule.
Show Source
Nested Schema : ConditionCollection
Type: object
Collection of conditions.
Show Source
Nested Schema : items
Type: array
List of condition.
Show Source
Nested Schema : Condition
Type: object
The information about Condition.
Show Source
Nested Schema : additionalAttributes
Type: object
Additional Properties Allowed
Show Source
Additional attributes for additional information related to the condition.
Nested Schema : BasicCondition
Type: object
The information about condition.
Show Source
  • Allowed Values: [ "STRING", "NUMBER", "BOOLEAN", "DATE" ]
    Data type for the condition identifier (lhs)
  • Minimum Length: 1
    Maximum Length: 255
    Access Guardrails Identifier
  • Minimum Length: 1
    Maximum Length: 512
    Left hand side of the condition.
  • Allowed Values: [ "EQ", "NE", "GT", "LT", "GTE", "LTE", "BEFORE", "AFTER", "TILL", "FROM", "BETWEEN", "NOT_BETWEEN", "IN", "NOT_IN", "CONTAINS", "NOT_CONTAINS", "BEGINS_WITH", "NOT_BEGINS_WITH", "ENDS_WITH", "NOT_ENDS_WITH", "IS_NULL", "IS_NOT_NULL", "EQUAL_WITH_NULL" ]
    The operator for a access guardrail.
  • rhs
    Right hand side of the condition.
Nested Schema : BasicConditionCollection
Type: object
Collection of conditions.
Show Source
Nested Schema : rhs
Type: array
Right hand side of the condition.
Show Source
Nested Schema : items
Type: array
List of condition.
Show Source

400 Response

Bad Request
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

401 Response

Unauthorized
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

404 Response

Not Found
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

412 Response

Precondition failed
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

429 Response

Too Many Requests
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

500 Response

Internal Server Error
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

Default Response

Unknown Error
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source
Back to Top

Examples

The following example shows how to update a access guardrail by submitting a PUT request. In this example, as an extension to create example, we will add another condition.

Note:

Generate Access Token using grant_type = password.

cURL Example

curl -i -L -X PUT \
   -H "Authorization:Bearer <your-access-token>" \
   -H "Content-Type:application/json" \
   -d \
'{
  "name": "employee-organization-guardrail",
  "description": "Enforces access control based on employee type and organization",
  "isDetectiveViolationCheckEnabled": true,
  "tags": ["identity-attribute"],
  "rules": {
    "items": [
      {
        "id": "rule-xxx-1",
        "type": "DEFAULT",
        "operator": "AND",
        "conditions": {
          "items": [
            {
              "type": "IDENTITY_ATTRIBUTE",
              "basicCondition": {
                "displayName": "Employee type",
                "operator": "EQ",
                "lhs": "userType",
                "rhs": ["Employee"],
                "rhsUiDetails": [],
                "dataType": "STRING"
              },
              "childConditions": {
                "items": []
              },
              "additionalAttributes": null
            },
            {
              "type": "IDENTITY_ATTRIBUTE",
              "basicCondition": {
                "displayName": "Source organization",
                "operator": "IN",
                "lhs": "organization.displayName",
                "rhs": [
                  "Org A",
                  "Org B",
                  "Org C",
                  "Org D",
                  "Org E",
                  "Org F"
                ],
                "rhsUiDetails": [],
                "dataType": "STRING"
              },
              "childConditions": {
                "items": []
              },
              "additionalAttributes": null
            }
          ]
        }
      }
    ]
  },
  "actionOnFailure": {
    "actionType": "REVOKE_LATER",
    "risk": "LOW",
    "revokeLaterAfterNumberOfDays": 10,
    "shouldUserManagerBeNotified": false
  },
  "owners": [
    {
      "id": "ocid1.tenancy.oc1..xxxxxxownerid",
      "name": "John Doe",
      "isPrimary": true
    }
  ]
}' \
 '<${service-instance-url}/access-governance/access-controls/20250331/accessGuardrails/${accessGuardrailsID}>'

Example Request Payload

{
  "name": "employee-organization-guardrail",
  "description": "Enforces access control based on employee type and organization",
  "isDetectiveViolationCheckEnabled": true,
  "tags": ["identity-attribute"],
  "rules": {
    "items": [
      {
        "id": "rule-xxx-1",
        "type": "DEFAULT",
        "operator": "AND",
        "conditions": {
          "items": [
            {
              "type": "IDENTITY_ATTRIBUTE",
              "basicCondition": {
                "displayName": "Employee type",
                "operator": "EQ",
                "lhs": "userType",
                "rhs": ["Employee"],
                "rhsUiDetails": [],
                "dataType": "STRING"
              },
              "childConditions": {
                "items": []
              },
              "additionalAttributes": null
            },
            {
              "type": "IDENTITY_ATTRIBUTE",
              "basicCondition": {
                "displayName": "Source organization",
                "operator": "IN",
                "lhs": "organization.displayName",
                "rhs": [
                  "Org A",
                  "Org B",
                  "Org C",
                  "Org D",
                  "Org E",
                  "Org F"
                ],
                "rhsUiDetails": [],
                "dataType": "STRING"
              },
              "childConditions": {
                "items": []
              },
              "additionalAttributes": null
            }
          ]
        }
      }
    ]
  },
  "actionOnFailure": {
    "actionType": "REVOKE_LATER",
    "risk": "LOW",
    "revokeLaterAfterNumberOfDays": 10,
    "shouldUserManagerBeNotified": false
  },
  "owners": [
    {
      "id": "ocid1.tenancy.oc1..xxxxxxownerid",
      "name": "John Doe",
      "isPrimary": true
    }
  ]
}

Example of the Response Body

The following example shows the contents of the response body in JSON format:

{
  "id": "ocid1.tenancy.oc1..xxxxxxguardrailid",
  "name": "employee-organization-guardrail",
  "description": "Enforces access control based on employee type and organization",
  "timeCreated": "2026-04-24T14:30:44.785Z",
  "timeUpdated": "2026-04-27T05:32:47.645Z",
  "lifecycleState": "ACTIVE",
  "isDetectiveViolationCheckEnabled": true,
  "tags": [
    "identity-attribute"
  ],
  "rules": {
    "items": [
      {
        "id": "rule-xxx-1",
        "type": "DEFAULT",
        "operator": "AND",
        "conditions": {
          "items": [
            {
              "type": "IDENTITY_ATTRIBUTE",
              "basicCondition": {
                "displayName": "Employee type",
                "operator": "EQ",
                "lhs": "userType",
                "rhs": [
                  "Employee"
                ],
                "rhsUiDetails": [],
                "dataType": "STRING"
              },
              "childConditions": {
                "items": []
              },
              "additionalAttributes": null
            },
            {
              "type": "IDENTITY_ATTRIBUTE",
              "basicCondition": {
                "displayName": "Source organization",
                "operator": "IN",
                "lhs": "organization.displayName",
                "rhs": [
                  "Org A",
                  "Org B",
                  "Org C",
                  "Org D",
                  "Org E",
                  "Org F"
                ],
                "rhsUiDetails": [],
                "dataType": "STRING"
              },
              "childConditions": {
                "items": []
              },
              "additionalAttributes": null
            }
          ]
        }
      }
    ]
  },
  "actionOnFailure": {
    "actionType": "REVOKE_LATER",
    "risk": "LOW",
    "revokeLaterAfterNumberOfDays": 10,
    "shouldUserManagerBeNotified": false
  },
  "ownershipCollectionId": "ocid1.tenancy.oc1..xxxxxxcollectionid",
  "primaryOwnerDisplayName": "John Doe",
  "owners": null,
  "createdBy": "John Doe",
  "updatedBy": "John Doe"
}
Back to Top