Oracle Access Governance REST APIs

Modify an access review

post

/access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/modify

Modifying the access review for a given accessReviewId.

Request

Path Parameters

accessReviewId(required): string

Unique access review identifier.

Header Parameters

if-match: string

For optimistic concurrency control. In the PUT or DELETE call for a resource, set the `if-match` parameter to the value of the etag from a previous GET or POST response for that resource. The resource will be updated or deleted only if the etag you provide matches the resource's current etag value.
opc-request-id: string

The client request ID for tracing. The only valid characters for request IDs are letters, numbers, underscore, and dash.

Details to modify the Access Review.

Root Schema : ModifyAccessReviewDetails

Type: object

Details to modify the access review. revokedChildIds and acceptedChildIds are mutually exclusive.

Show Source

acceptedChildIds: array acceptedChildIds

Maximum Number of Items: 500

List of child ids that are accepted for given access review.
justification: string

Maximum Length: 500

The justification for the decision.
revokedChildIds: array revokedChildIds

Maximum Number of Items: 500

List of child ids that are revoked for given access review.

{
    "type":"object",
    "description":"Details to modify the access review. revokedChildIds and acceptedChildIds are mutually exclusive.",
    "properties":{
        "justification":{
            "description":"The justification for the decision.",
            "type":"string",
            "maxLength":500
        },
        "revokedChildIds":{
            "type":"array",
            "description":"List of child ids that are revoked for given access review.",
            "items":{
                "$ref":"#/definitions/ChildId"
            },
            "maxItems":500
        },
        "acceptedChildIds":{
            "type":"array",
            "description":"List of child ids that are accepted for given access review.",
            "items":{
                "$ref":"#/definitions/ChildId"
            },
            "maxItems":500
        }
    }
}

Nested Schema : acceptedChildIds

Type: array

Maximum Number of Items: 500

List of child ids that are accepted for given access review.

Show Source

Array of: object ChildId

The child ID object.

{
    "type":"array",
    "description":"List of child ids that are accepted for given access review.",
    "items":{
        "$ref":"#/definitions/ChildId"
    },
    "maxItems":500
}

Nested Schema : revokedChildIds

Type: array

Maximum Number of Items: 500

List of child ids that are revoked for given access review.

Show Source

Array of: object ChildId

The child ID object.

{
    "type":"array",
    "description":"List of child ids that are revoked for given access review.",
    "items":{
        "$ref":"#/definitions/ChildId"
    },
    "maxItems":500
}

Nested Schema : ChildId

Type: object

The child ID object.

Show Source

id(required): string

Minimum Length: 1

Maximum Length: 255

The ID of the child object.
type(required): string

Allowed Values: [ "ASSOCIATION", "CONDITION", "EXCLUDED", "INCLUDED", "PRIMARY", "NON_REVIEWABLE" ]

The type of the child object.

{
    "type":"object",
    "description":"The child ID object.",
    "required":[
        "id",
        "type"
    ],
    "properties":{
        "id":{
            "description":"The ID of the child object.",
            "type":"string",
            "minLength":1,
            "maxLength":255
        },
        "type":{
            "description":"The type of the child object.",
            "type":"string",
            "x-obmcs-top-level-enum":"#/definitions/ChildType",
            "enum":[
                "ASSOCIATION",
                "CONDITION",
                "EXCLUDED",
                "INCLUDED",
                "PRIMARY",
                "NON_REVIEWABLE"
            ]
        }
    }
}

Response

Supported Media Types

application/json

202 Response

Successfully submitted request to modify the access review.

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

400 Response

Bad Request

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

401 Response

Unauthorized

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

404 Response

Not Found

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

412 Response

Precondition failed

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

429 Response

Too Many Requests

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

500 Response

Internal Server Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Default Response

Unknown Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Examples

The following example shows how to review each policy statement, where you accept a few statements and reject a few. Applicable for Policy Access Review task. Use

/access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/accept

to accept all the policy statements for a policy review task.

Note:

Generate Access Token using grant_type = password or Authorization code.

cURL Request Example

curl -i -X POST \
   -H "Authorization:Bearer <your-access-token>" \
   -H "Content-Type:application/json" \
    -d \
    '{
  "justification": "Accepted one of the two",
  "revokedChildIds": [
    {
      "id": "tapolicystmt.OCI.f101xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.bebxxxxx",
      "type": "ASSOCIATION"
    }
  ],
  "acceptedChildIds": [
    {
      "id": "tapolicystmt.OCI.f101xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.248xxxxx",
      "type": "ASSOCIATION"
    }
  ]
}'
 '<${service-instance-url}/access-governance/access-reviews/${version}/accessReviews/${accessReviewId}/actions/modify>'

Sample Request Payload

Select POST and add the following URL

${service-instance-url}/access-governance/access-reviews/${version}/accessReviews/${accessReviewId}/actions/modify>

{
  "justification": "Accepted one of the two",
  "revokedChildIds": [
    {
      "id": "tapolicystmt.OCI.f101xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.bebxxxxx",
      "type": "ASSOCIATION"
    }
  ],
  "acceptedChildIds": [
    {
      "id": "tapolicystmt.OCI.f101xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.248xxxxx",
      "type": "ASSOCIATION"
    }
  ]
}

Example of the Response Code

You'll receive 204 response no body content.

Verify Reassignment through Audit Trail of an Access Review Task

Run the following API using the access review task

/access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/priorActions

You'll receive the following response:

{
  "items": [
    {
      "campaignName": "Policy Review Example - June 2025",
      "level": 1,
      "reviewerName": "John Doe",
      "reviewerType": "CUSTOM_USER",
      "action": "MODIFY",
      "timeReviewed": "2025-06-12T10:23:29.820Z",
      "isAutoActioned": null,
      "isCompletionRuleActioned": null,
      "justification": "Accepted one of the two",
      "finalAction": "MODIFY",
      "subLevel": null,
      "hasSodViolation": false
    }
  ]
}