Oracle Access Governance REST APIs

Create an extension request

post

/access-governance/access-controls/20250331/accessRequests/extension

Creates a new extension request for an identity with the specified details.

Request

Header Parameters

opc-request-id: string

The client request ID for tracing. The only valid characters for request IDs are letters, numbers, underscore, and dash.

Details for the new Extension Request

Root Schema : CreateExtensionRequestDetails

Type: object

The information about new ExtensionRequest.

Show Source

extensionDateInEpoch(required): integer(int64)

Requested extension date represented as epoch timestamp
justification(required): string

Justification for creating the extension request
processInstanceId(required): string

Process Instance id of the request being extended

{
    "type":"object",
    "required":[
        "extensionDateInEpoch",
        "justification",
        "processInstanceId"
    ],
    "properties":{
        "processInstanceId":{
            "type":"string",
            "description":"Process Instance id of the request being extended"
        },
        "extensionDateInEpoch":{
            "type":"integer",
            "format":"int64",
            "description":"Requested extension date represented as epoch timestamp"
        },
        "justification":{
            "type":"string",
            "description":"Justification for creating the extension request"
        }
    },
    "description":"The information about new ExtensionRequest."
}

Response

Supported Media Types

application/json

200 Response

The newly created Extension Request

Headers

etag: string

For optimistic concurrency control. See `if-match`.
opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : ExtensionRequest

Type: object

Description of ExtensionRequest.

Show Source

createdBy: string

The user that created the request
extensionDateInEpoch: integer(int64)

Requested extension date represented as epoch timestamp
id(required): string

The Unique Oracle ID (OCID) that is immutable on creation of extension request.
justification: string

Justification for creating or updating the extension request
processInstanceId: string

Process Instance id of the request being extended
requestStatus: string

Status of the extension request
timeCreated: string(date-time)

The time the the ExtensionRequest was created. An RFC3339 formatted datetime string
timeUpdated: string(date-time)

The time the the ExtensionRequest was last updated. An RFC3339 formatted datetime string

{
    "type":"object",
    "required":[
        "id"
    ],
    "properties":{
        "id":{
            "type":"string",
            "description":"The Unique Oracle ID (OCID) that is immutable on creation of extension request."
        },
        "processInstanceId":{
            "type":"string",
            "description":"Process Instance id of the request being extended"
        },
        "extensionDateInEpoch":{
            "type":"integer",
            "format":"int64",
            "description":"Requested extension date represented as epoch timestamp"
        },
        "justification":{
            "type":"string",
            "description":"Justification for creating or updating the extension request"
        },
        "requestStatus":{
            "type":"string",
            "description":"Status of the extension request"
        },
        "timeCreated":{
            "type":"string",
            "format":"date-time",
            "description":"The time the the ExtensionRequest was created. An RFC3339 formatted datetime string"
        },
        "timeUpdated":{
            "type":"string",
            "format":"date-time",
            "description":"The time the the ExtensionRequest was last updated. An RFC3339 formatted datetime string"
        },
        "createdBy":{
            "type":"string",
            "description":"The user that created the request"
        }
    },
    "description":"Description of ExtensionRequest."
}

400 Response

Bad Request

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

401 Response

Unauthorized

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

404 Response

Not Found

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

409 Response

Conflict

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

429 Response

Too Many Requests

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

500 Response

Internal Server Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Default Response

Unknown Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Examples

The following example shows how to request extension for your time-limited access. Use the approvalRequestID as the process Instance ID and timestamp in EPOC format milliseconds.

The extension time should be after the expiration of the access. Use EPOC Converter for timestamp. Before creating an extension request, run Get Details of an Access Request for fetching the approvalRequestID. Your Access Bundle configuration must allow extension request and should have an approval workflow associated with it.

cURL Request Example

curl -i -X POST \
   -H "Authorization:Bearer <your-access-token>" \
   -H "Content-Type:application/json" \
   -d \
'{
    "processInstanceId": "25d5ed10-da3d-4405-8151-2ca90b7df645:0a2e2c08-3bb6-11f0-a9b2-728731956d82",
    "justification": "test extension request validation again",
    "extensionDateInEpoch": 1748446221000
}' \
 '<${service-instance-url}/access-governance/access-controls/${versionId}/accessRequests/extension>'

Example Request Payload

{
    "processInstanceId": "25d5ed10-da3d-4405-8151-2ca90b7df645:0a2e2c08-3bb6-11f0-a9b2-728731956d82",
    "justification": "test extension request validation again",
    "extensionDateInEpoch": 1750179992000
}

Example of the Response Code

It may take a few seconds to create an identity collection. Do not try to abort the request.

You'll receive 200 OK response along with the following response body:

{
  "id": "5996aa34-825f-4569-xxx-a0b2c4b64c7a",
  "processInstanceId": "25d5ed10-da3d-4405-8151-2ca90b7df645:0a2e2c08-3bb6-11f0-a9b2-728731956d82",
  "extensionDateInEpoch": 1750179992000,
  "justification": "Extension till June 17 5:06:32 PM",
  "requestStatus": "APPROVED",
  "timeCreated": "2025-06-15T13:42:06.644Z",
  "timeUpdated": "2025-06-16T13:42:06.644Z",
  "createdBy": "clientId.External.88b9690ece344xxx53570480031e7d0"
}

The approval requests for the extension request is associated with the original access request ID. You can get the details of the access request by running GET accessRequests/{accessRequestId}.