Oracle Access Governance REST APIs

Assign an access review

post

/access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/assign

Assigning ownership of an unmatched account to the identity id of the access review.

Request

Path Parameters

accessReviewId(required): string

Unique access review identifier.

Header Parameters

if-match: string

For optimistic concurrency control. In the PUT or DELETE call for a resource, set the `if-match` parameter to the value of the etag from a previous GET or POST response for that resource. The resource will be updated or deleted only if the etag you provide matches the resource's current etag value.
opc-request-id: string

The client request ID for tracing. The only valid characters for request IDs are letters, numbers, underscore, and dash.

Details to assign the Access Review.

Root Schema : UpdateOwnerAccessReviewDetails

Type: object

Details to update owner of the access review.

Show Source

identityId: string

Minimum Length: 1

Maximum Length: 255

Global Identity ID to whom this review task is reassigned or matched to Orphan account.
justification: string

Maximum Length: 500

The justification for the decision.

{
    "type":"object",
    "description":"Details to update owner of the access review.",
    "properties":{
        "justification":{
            "description":"The justification for the decision.",
            "type":"string",
            "maxLength":500
        },
        "identityId":{
            "description":"Global Identity ID to whom this review task is reassigned or matched to Orphan account.",
            "type":"string",
            "minLength":1,
            "maxLength":255
        }
    }
}

Response

Supported Media Types

application/json

202 Response

Successfully submitted request to assign the access review.

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

400 Response

Bad Request

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

401 Response

Unauthorized

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

404 Response

Not Found

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

412 Response

Precondition failed

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

429 Response

Too Many Requests

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

500 Response

Internal Server Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Default Response

Unknown Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Examples

The following example shows how to assign an unmatched account to an identity. Select the Ownership task review ID for an Unmatched account. After assignment, you can run /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/priorActions to view the audit trail for this access review task.

Note:

Generate Access Token using grant_type = password or Authorization code.

cURL Request Example

curl -i -X POST \
   -H "Authorization:Bearer <your-access-token>" \
   -H "Content-Type:application/json" \
    -d \
    '{
  "justification": "Assigning Unmatched Account To Aaron Simmons",
  "identityId": "globalId.0f131ed6-998d-405e-888c-xxxxxx.82027.0932b53ab6f9e9efad517830c6437d5b"
}'
 '<${service-instance-url}/access-governance/access-reviews/${version}/accessReviews/${accessReviewId}/actions/assign>'

Sample Request Payload

Select POST and add the following URL

${si}/access-governance/access-reviews/${version}/accessReviews/${accessReviewId}/actions/assign

{
  "justification": "Assigning Unmatched Account To Aaron Simmons",
  "identityId": "globalId.0f131ed6-998d-405e-888c-xxxxxx.82027.0932b53ab6f9e9efad517830c6437d5b"
}

Example of the Response Code

You'll receive 204 No Content response no body content.

Verify Assignment through Audit Trail of an Access Review Task

Run the following API using the access review task

/access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/priorActions

{
  "items": [
    {
      "campaignName": "Unmatched Account Review – Orphan Accounts (Event: AmelMacLead@example.COM, June 19, 2025, 8:53 PM)",
      "level": 1,
      "reviewerName": "Amel Maclead",
      "reviewerType": "CUSTOM_USER",
      "action": "ASSIGN",
      "timeReviewed": "2025-06-20T06:50:22.174Z",
      "isAutoActioned": null,
      "isCompletionRuleActioned": null,
      "justification": "Assigning unmatched account to Aaron Simmons",
      "finalAction": "ASSIGN",
      "subLevel": null,
      "hasSodViolation": false
    }
  ]
}