Oracle Access Governance REST APIs

Reassign an access review

post

/access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/reassign

Reassigning the access review to new reviewer(identityId) for a given accessReviewId.

Request

Path Parameters

accessReviewId(required): string

Unique access review identifier.

Header Parameters

if-match: string

For optimistic concurrency control. In the PUT or DELETE call for a resource, set the `if-match` parameter to the value of the etag from a previous GET or POST response for that resource. The resource will be updated or deleted only if the etag you provide matches the resource's current etag value.
opc-request-id: string

The client request ID for tracing. The only valid characters for request IDs are letters, numbers, underscore, and dash.

Details to reassign the Access Review.

Root Schema : UpdateOwnerAccessReviewDetails

Type: object

Details to update owner of the access review.

Show Source

identityId: string

Minimum Length: 1

Maximum Length: 255

Global Identity ID to whom this review task is reassigned or matched to Orphan account.
justification: string

Maximum Length: 500

The justification for the decision.

{
    "type":"object",
    "description":"Details to update owner of the access review.",
    "properties":{
        "justification":{
            "description":"The justification for the decision.",
            "type":"string",
            "maxLength":500
        },
        "identityId":{
            "description":"Global Identity ID to whom this review task is reassigned or matched to Orphan account.",
            "type":"string",
            "minLength":1,
            "maxLength":255
        }
    }
}

Response

Supported Media Types

application/json

202 Response

Successfully submitted request to Reassign the access review.

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

400 Response

Bad Request

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

401 Response

Unauthorized

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

404 Response

Not Found

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

412 Response

Precondition failed

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

429 Response

Too Many Requests

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

500 Response

Internal Server Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Default Response

Unknown Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Examples

The following example shows how to reassign an access review task. After reassignment, you can run

/access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/priorActions

to view the audit trail for this access review task.

Note:

Generate Access Token using grant_type = password or Authorization code.

cURL Request Example

curl -i -X POST \
   -H "Authorization:Bearer <your-access-token>" \
   -H "Content-Type:application/json" \
    -d \
    '{
        "justification": "On long medical leave",
        "identityId": "globalId.ICF.xxxx-598c-45cd-be94-xxxx.c1e3f423afdc10bc3c378823a8390f9f"
      }'
 '<${service-instance-url}/access-governance/access-reviews/${version}/accessReviews/${accessReviewId}/actions/reassign>'

Sample Request Payload

Select POST and add the following URL

${service-instance-url}/access-governance/access-reviews/${version}/accessReviews/${accessReviewId}/actions/reassign>

{
  "justification": "On long medical leave",
  "identityId": "globalId.ICF.xxxx-598c-45cd-be94-xxxx.c1e3f423afdc10bc3c378823a8390f9f"
}

Example of the Response Code

You'll receive 204 response no body content.

Verify Reassignment through Audit Trail of an Access Review Task

Run the following API using the access review task

/access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/priorActions

You'll receive the following response:

{
  "items": [
    {
      "campaignName": "Quarterly Audit Q2 2025",
      "level": 1,
      "reviewerName": "Amel Maclead",
      "reviewerType": "CUSTOM_USER",
      "action": "REASSIGN",
      "timeReviewed": "2025-06-12T07:55:43.588Z",
      "isAutoActioned": null,
      "isCompletionRuleActioned": null,
      "justification": "On long medical leave",
      "finalAction": null,
      "subLevel": null,
      "hasSodViolation": false
    }
  ]
}