Oracle Access Governance REST APIs

List Policy statements resources for the given policy statement

get

/access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/policyStatements/{policyStatementId}/resources

Retrieves list of resources for the policy statement.

Request

Path Parameters

accessReviewId(required): string

Unique access review identifier.
policyStatementId(required): string

Unique policy statement identifier.

Query Parameters

limit: integer

Minimum Value: 1

Maximum Value: 1000

The maximum number of items to return.

Default Value: 10
page: string

Minimum Length: 1

A token representing the position at which to start retrieving results. This must come from the `opc-next-page` header field of a previous response.
sortBy: string

The parameter for policy resources sortBy. The default value is resourceName.

Default Value: resourceName

Allowed Values: [ "resourceName", "resourceType", "compartmentName" ]
sortOrder: string

The sort order to use, either 'ASC' or 'DESC'.

Allowed Values: [ "ASC", "DESC" ]

Header Parameters

opc-request-id: string

The client request ID for tracing. The only valid characters for request IDs are letters, numbers, underscore, and dash.

Response

Supported Media Types

application/json

200 Response

The details of policy statement for given policy.

Headers

opc-next-page: string

For pagination of a list of items. When paging through a list, if this header appears in the response, then a partial list might have been returned. Include this value as the `page` parameter for the subsequent GET request to get the next batch of items.
opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
opc-total-items: integer

The total number of items.

Root Schema : PolicyStatementResourceSummaryCollection

Type: object

List of policy statement Resource summaries.

Show Source

items(required): array items

List of policy statement Resource summaries.

{
    "type":"object",
    "description":"List of policy statement Resource summaries.",
    "required":[
        "items"
    ],
    "properties":{
        "items":{
            "description":"List of policy statement Resource summaries.",
            "type":"array",
            "items":{
                "$ref":"#/definitions/PolicyStatementResourceSummary"
            }
        }
    }
}

Nested Schema : items

Type: array

List of policy statement Resource summaries.

Show Source

Array of: object PolicyStatementResourceSummary

The policy statement resource associated with the given policy statement.

{
    "description":"List of policy statement Resource summaries.",
    "type":"array",
    "items":{
        "$ref":"#/definitions/PolicyStatementResourceSummary"
    }
}

Nested Schema : PolicyStatementResourceSummary

Type: object

The policy statement resource associated with the given policy statement.

Show Source

compartmentFullName(required): string

The resource compartment full name belonging to policy statement.
compartmentName(required): string

The resource compartment name belonging to policy statement.
id(required): string

The id of the resource belonging to policy statement.
resourceName(required): string

The display name of the resource belonging to policy statement.
resourceType(required): string

The type of resource belonging to policy statement.

{
    "type":"object",
    "description":"The policy statement resource associated with the given policy statement.",
    "required":[
        "id",
        "resourceName",
        "resourceType",
        "compartmentName",
        "compartmentFullName"
    ],
    "properties":{
        "id":{
            "type":"string",
            "description":"The id of the resource belonging to policy statement."
        },
        "resourceName":{
            "description":"The display name of the resource belonging to policy statement.",
            "type":"string"
        },
        "resourceType":{
            "description":"The type of resource belonging to policy statement.",
            "type":"string"
        },
        "compartmentName":{
            "description":"The resource compartment name belonging to policy statement.",
            "type":"string"
        },
        "compartmentFullName":{
            "description":"The resource compartment full name belonging to policy statement.",
            "type":"string"
        }
    }
}

400 Response

Bad Request

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

401 Response

Unauthorized

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

404 Response

Not Found

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

429 Response

Too Many Requests

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

500 Response

Internal Server Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Default Response

Unknown Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Examples

The following example shows how to retrieve resources list and their details for a policy statement in a policy access control review task. Use the Access Control review task id for a policy, policy statement id to retrieve resources included in the policy.

cURL Example

curl -i -X GET \
   -H "Authorization:Bearer <your access token>" \
 '${service-instance-url}/access-governance/access-reviews/accessReviews/${accessReviewId}/policyStatements/${policyStatementId}/resources

Example of the Response Body

The following example shows the contents of the response body in JSON format:

This JSON represents a policy statement listing resources within a compartment. It defines multiple resource types, such as networking components and access configurations, that belong to a specific environment and included in the policy.

{
    "items": [
        {
            "id": "resource.OCI.020xxxx-xxxx-xxxx-xxxx-xxxxxx.0cxxxxxx",
            "resourceName": "Default DHCP Options for vcn-test-network",
            "resourceType": "DHCPOPTIONS",
            "compartmentName": "TestNetwork",
            "compartmentFullName": "org-root/TestNetwork"
        },
        {
            "id": "resource.OCI.020xxxx-xxxx-xxxx-xxxx-xxxxxx.04xxxxxx",
            "resourceName": "Default Security List for vcn-test-network",
            "resourceType": "SECURITYLIST",
            "compartmentName": "TestNetwork",
            "compartmentFullName": "org-root/TestNetwork"
        },
        {
            "id": "resource.OCI.020xxxx-xxxx-xxxx-xxxx-xxxxxx.axxxxxxx",
            "resourceName": "IP for NAT gateway: ocid1.natgateway.xx-xx-xx-xxxxxxxxxxxxxxxxxx",
            "resourceType": "PUBLICIP",
            "compartmentName": "TestNetwork",
            "compartmentFullName": "org-root/TestNetwork"
        },
        {
            "id": "resource.OCI.020xxxx-xxxx-xxxx-xxxx-xxxxxx.76xxxxxx",
            "resourceName": "Internet gateway-vcn-test-network",
            "resourceType": "INTERNETGATEWAY",
            "compartmentName": "TestNetwork",
            "compartmentFullName": "org-root/TestNetwork"
        }
    ]
}