Oracle Access Governance REST APIs

Get a list of Identity Access Reviews

get

/access-governance/access-reviews/20250331/accessReviews/identity

Returns details of all identity access reviews for a given user with support of pagination.

Request

Query Parameters

keywordContains: array[string]

Collection Format: multi

Maximum Number of Items: 5

The list of keywords to filter on
limit: integer

Minimum Value: 1

Maximum Value: 1000

The maximum number of items to return.

Default Value: 10
page: string

Minimum Length: 1

A token representing the position at which to start retrieving results. This must come from the `opc-next-page` header field of a previous response.
sortBy: string

The field to sort by. The default value will be entityName.

Default Value: entityName

Allowed Values: [ "entityName", "assignmentName", "managerName", "recommendation", "daysRemaining", "campaignName", "appNames" ]
sortOrder: string

The sort order to use, either 'ASC' or 'DESC'.

Allowed Values: [ "ASC", "DESC" ]
userId(required): string

Minimum Length: 1

Maximum Length: 255

Identifier of the user who is performing the operation.

Header Parameters

opc-request-id: string

The client request ID for tracing. The only valid characters for request IDs are letters, numbers, underscore, and dash.

Response

Supported Media Types

application/json

200 Response

A page of ReviewTaskSummary objects.

Headers

opc-next-page: string

For pagination of a list of items. When paging through a list, if this header appears in the response, then a partial list might have been returned. Include this value as the `page` parameter for the subsequent GET request to get the next batch of items.
opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
opc-total-items: integer

The total number of items.

Root Schema : IdentityAccessReviewSummaryCollection

Type: object

Results of an identity access reviews search.

Show Source

items(required): array items

List of identity access review summaries.

{
    "type":"object",
    "description":"Results of an identity access reviews search.",
    "required":[
        "items"
    ],
    "properties":{
        "items":{
            "description":"List of identity access review summaries.",
            "type":"array",
            "items":{
                "$ref":"#/definitions/IdentityAccessReviewSummary"
            }
        }
    }
}

Nested Schema : items

Type: array

List of identity access review summaries.

Show Source

Array of: object IdentityAccessReviewSummary

The summary of an access review task.

{
    "description":"List of identity access review summaries.",
    "type":"array",
    "items":{
        "$ref":"#/definitions/IdentityAccessReviewSummary"
    }
}

Nested Schema : IdentityAccessReviewSummary

Type: object

The summary of an access review task.

Show Source

agOrganizations: array agOrganizations

The AG organizations that the entity belongs to.
appNames: array appNames

Application names associated with the identity review task.
assignmentDescription: string

The description of the assignment to be reviewed.
assignmentName(required): string

The name of the assignment to be reviewed.
assignmentType(required): string

Allowed Values: [ "ACCOUNT", "PERMISSION", "ROLE", "POLICY", "IC_STRUCTURAL", "UNMATCHED_ACCOUNT", "ORCH_SYSTEM", "AM_WORKFLOW", "ACCESS_GUARDRAIL" ]

The type of the assignment to be reviewed.
campaignId: string

Campaign Id for the review task.
campaignName(required): string

The campaign display name.
campaignType(required): string

Allowed Values: [ "ACCESS", "OWNERSHIP" ]

review task belongs to which campaign type (access or ownership).
daysRemaining(required): integer

The number of days remaining.
entityName(required): string

The entity name.
entityType(required): string

The type of the entity.
id(required): string

Unique identifier that is immutable on creation.
isReassignable: boolean

Flag indicating whether the review task can be reassigned or not.
justificationRule(required): string

Allowed Values: [ "REQUIRE_FOR_ALL", "REQUIRE_FOR_REVOKE", "OPTIONAL_FOR_ALL" ]

The justification rule for the campaign.
managerName: string

The name of the manager of the entity.
recommendation: string

Allowed Values: [ "ACCEPT", "REVIEW" ]

The recommendation for the access review task.
templateType: string

Allowed Values: [ "IDENTITY", "AG_IDENTITY", "EVENT", "AG_EVENT", "CLOUD_PROVIDER", "POLICY", "IC_STRUCTURAL", "AG_POLICY", "GOVERNANCE_SYSTEM", "AG", "GOVERNANCE_SYSTEM_EVENT", "CLOUD_PROVIDER_EVENT" ]

The template type of the campaign.

{
    "type":"object",
    "description":"The summary of an access review task.",
    "required":[
        "id",
        "entityName",
        "entityType",
        "assignmentName",
        "assignmentType",
        "campaignName",
        "campaignType",
        "daysRemaining",
        "justificationRule"
    ],
    "properties":{
        "id":{
            "description":"Unique identifier that is immutable on creation.",
            "type":"string"
        },
        "campaignId":{
            "description":"Campaign Id for the review task.",
            "type":"string"
        },
        "appNames":{
            "description":"Application names associated with the identity review task.",
            "type":"array",
            "items":{
                "type":"string"
            }
        },
        "entityName":{
            "description":"The entity name.",
            "type":"string"
        },
        "entityType":{
            "description":"The type of the entity.",
            "type":"string"
        },
        "assignmentName":{
            "description":"The name of the assignment to be reviewed.",
            "type":"string"
        },
        "assignmentDescription":{
            "description":"The description of the assignment to be reviewed.",
            "type":"string"
        },
        "assignmentType":{
            "description":"The type of the assignment to be reviewed.",
            "type":"string",
            "x-obmcs-top-level-enum":"#/definitions/AssignmentType",
            "enum":[
                "ACCOUNT",
                "PERMISSION",
                "ROLE",
                "POLICY",
                "IC_STRUCTURAL",
                "UNMATCHED_ACCOUNT",
                "ORCH_SYSTEM",
                "AM_WORKFLOW",
                "ACCESS_GUARDRAIL"
            ]
        },
        "managerName":{
            "description":"The name of the manager of the entity.",
            "type":"string"
        },
        "recommendation":{
            "description":"The recommendation for the access review task.",
            "type":"string",
            "x-obmcs-top-level-enum":"#/definitions/Recommendation",
            "enum":[
                "ACCEPT",
                "REVIEW"
            ]
        },
        "campaignType":{
            "description":"review task belongs to which campaign type (access or ownership).",
            "type":"string",
            "x-obmcs-top-level-enum":"#/definitions/CampaignType",
            "enum":[
                "ACCESS",
                "OWNERSHIP"
            ]
        },
        "campaignName":{
            "description":"The campaign display name.",
            "type":"string"
        },
        "daysRemaining":{
            "description":"The number of days remaining.",
            "type":"integer"
        },
        "justificationRule":{
            "description":"The justification rule for the campaign.",
            "type":"string",
            "x-obmcs-top-level-enum":"#/definitions/JustificationType",
            "enum":[
                "REQUIRE_FOR_ALL",
                "REQUIRE_FOR_REVOKE",
                "OPTIONAL_FOR_ALL"
            ]
        },
        "templateType":{
            "description":"The template type of the campaign.",
            "type":"string",
            "x-obmcs-top-level-enum":"#/definitions/TemplateType",
            "enum":[
                "IDENTITY",
                "AG_IDENTITY",
                "EVENT",
                "AG_EVENT",
                "CLOUD_PROVIDER",
                "POLICY",
                "IC_STRUCTURAL",
                "AG_POLICY",
                "GOVERNANCE_SYSTEM",
                "AG",
                "GOVERNANCE_SYSTEM_EVENT",
                "CLOUD_PROVIDER_EVENT"
            ]
        },
        "isReassignable":{
            "description":"Flag indicating whether the review task can be reassigned or not.",
            "type":"boolean"
        },
        "agOrganizations":{
            "description":"The AG organizations that the entity belongs to.",
            "type":"array",
            "items":{
                "type":"string"
            }
        }
    }
}

Nested Schema : agOrganizations

Type: array

The AG organizations that the entity belongs to.

Show Source

Array of: string

{
    "description":"The AG organizations that the entity belongs to.",
    "type":"array",
    "items":{
        "type":"string"
    }
}

Nested Schema : appNames

Type: array

Application names associated with the identity review task.

Show Source

Array of: string

{
    "description":"Application names associated with the identity review task.",
    "type":"array",
    "items":{
        "type":"string"
    }
}

400 Response

Bad Request

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

401 Response

Unauthorized

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

404 Response

Not Found

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

429 Response

Too Many Requests

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

500 Response

Internal Server Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Default Response

Unknown Error

Headers

opc-request-id: string

Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.

Root Schema : Error

Type: object

Error Information.

Show Source

code(required): string

A short error code that defines the error, meant for programmatic parsing.
message(required): string

A human-readable error string.

{
    "required":[
        "code",
        "message"
    ],
    "properties":{
        "code":{
            "type":"string",
            "description":"A short error code that defines the error, meant for programmatic parsing."
        },
        "message":{
            "type":"string",
            "description":"A human-readable error string."
        }
    },
    "description":"Error Information."
}

Examples

The following example shows how to retrieve a list of all the identity access reviews for an identity. The userId query parameter is mandatory while retrieving a list.

cURL Example - With Query Parameters

curl -i -X GET \
   -H "Authorization:Bearer <your access token>" \
 'https://${service-instance}/access-governance/access-reviews/${version}/accessReviews/identity?userId=${userId}'

Example of the Response Body

The following example shows the contents of the response body in JSON format:

{
    "items": [
        {
            "id": "ocid1.agcsreviewtask.oc1.iad.amaaaaaaebkbezqaszxtdjxxxxxavzkqsoouwxxxxx352iu34rxxxxxap4a",
            "campaignId": "ocid1.agcscampaign.oc1.iad.amaaaaaaebkbezqaz4bakxxxxxupfj2qzmvnxxxxxfgxgqafi4xxxxxntq",
            "appNames": [
                "OUD_RES_ADMIN"
            ],
            "entityName": "FinanceTeamUser_AccessReview",
            "entityType": "USER",
            "assignmentName": "Finance Team Quarterly Access Review",
            "assignmentDescription": "Review of finance team user access permissions",
            "assignmentType": "PERMISSION",
            "managerName": "John Doe",
            "recommendation": "REVIEW",
            "campaignType": "ACCESS",
            "campaignName": "Finance Team Access Review - Q2 2025",
            "daysRemaining": 3581,
            "justificationRule": "REQUIRE_FOR_ALL",
            "templateType": "AG",
            "isReassignable": true,
            "agOrganizations": []
        },
        {
            "id": "ocid1.agcsreviewtask.oc1.iad.amaaaaaaebkbezqavp4timxxxxxubvlrw74e2xxxxxyrbcubqmxxxxxceq",
            "campaignId": "ocid1.agcscampaign.oc1.iad.amaaaaaaebkbezqaz4bakxxxxxupfj2qzmvnxxxxxfgxgqafi4xxxxxntq",
            "appNames": [
                "OUD_RES_ADMIN"
            ],
            "entityName": "HRBasicPrivilege_AccessReview",
            "entityType": "USER",
            "assignmentName": "HR Basic Privilege Access Bundle Review",
            "assignmentDescription": "Quarterly review of HR department's basic privileges",
            "assignmentType": "ACCOUNT",
            "managerName": "Jane Smith",
            "recommendation": "REVIEW",
            "campaignType": "ACCESS",
            "campaignName": "HR Access Privilege Review - Q2 2025",
            "daysRemaining": 3581,
            "justificationRule": "REQUIRE_FOR_ALL",
            "templateType": "AG",
            "isReassignable": true,
            "agOrganizations": []
        }
    ]
}