Get the status of Separation of Duties Analysis requests

post

/access-governance/service-administration/20250331/orchestratedSystem/{orchestratedSystemId}/sod/status

Returns the current Separation of Duties Analysis status for input request IDs.

Request

Path Parameters
Header Parameters
  • The client request ID for tracing. The only valid characters for request IDs are letters, numbers, underscore, and dash.
Body ()
Separation of Duties Analysis Request IDs.
Root Schema : CheckSeparationOfDutiesStatus
Type: object
Separation of Duties Analysis Request IDs.
Show Source
Nested Schema : requestIds
Type: array
List of request IDs.
Show Source
Back to Top

Response

Supported Media Types

200 Response

Separation of Duties status details are successfully fetched.
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : CheckSeparationOfDutiesStatusDetails
Type: object
List of request statuses per Request ID.
Show Source
Nested Schema : items
Type: array
List of request statuses.
Show Source
Nested Schema : CheckSeparationOfDutiesRequestStatus
Type: object
Request status.
Show Source
Nested Schema : events
Type: array
Separation of Duties Events.
Show Source
Nested Schema : SeparationOfDutiesEvent
Type: object
Separation Of Duties Event.
Show Source
Nested Schema : RequestPayload
Type: object
Represents the payload for a request.
Show Source
Nested Schema : violationSummary
Type: array
Separation Of Duties Violation Summary.
Show Source
Nested Schema : AccountData
Type: object
Information about the user account.
Show Source
Nested Schema : childAssignmentData
Type: array
List of child assignment data.
Show Source
Nested Schema : SeparationOfDutiesAnalysisDetails
Type: object
Details for performing Separation of Duties analysis.
Show Source
Nested Schema : UserData
Type: object
Data of the User associated to a Separation of Duties event.
Show Source
Nested Schema : attributes
Type: array
Account attributes.
Show Source
Nested Schema : Attribute
Type: object
Attribute of the account.
Show Source
Nested Schema : additionalAttributes
Type: array
Additional attributes.
Show Source
Nested Schema : attributes
Type: array
Attributes.
Show Source
Nested Schema : value
Type: array
Value of the attribute.
Show Source
Nested Schema : AdditionalAttribute
Type: object
Additional Attribute.
Show Source
Nested Schema : value
Type: array
Value of the attribute.
Show Source
Nested Schema : ChildAssignmentData
Type: object
Entitlement attributes.
Show Source
Nested Schema : attributes
Type: array
Entitlement attributes.
Show Source
Nested Schema : permissionAssignments
Type: array
Permissions to be analyzed along with the account.
Show Source
Nested Schema : AccountPermission
Type: object
Permission to be scanned.
Show Source
Nested Schema : attributes
Type: array
Account attributes.
Show Source
Nested Schema : attributes
Type: array
User attributes.
Show Source
Nested Schema : SeparationOfDutiesViolationSummary
Type: object
A Separation of Duties violation.
Show Source
Nested Schema : existingRoles
Type: array
Roles already granted to an identity.
Show Source
Nested Schema : requestedRoles
Type: array
Roles requested for an identity.
Show Source
Nested Schema : RoleInfo
Type: object
Identifying information for a role.
Show Source
Nested Schema : accessPoints
Type: array
Access points of the role.
Show Source

400 Response

Bad Request
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

401 Response

Unauthorized
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

404 Response

Not Found
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

409 Response

Conflict
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

412 Response

Precondition failed
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

429 Response

Too Many Requests
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

500 Response

Internal Server Error
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source

Default Response

Unknown Error
Headers
  • Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
Body ()
Root Schema : Error
Type: object
Error Information.
Show Source
Back to Top

Examples

The following example shows how to fetch status of separation of duties using the request ID. This is applicable for an Oracle Fusion Cloud Applications orchestrated system and the Oracle Fusion Cloud Risk Management and Compliance (RMC) integration must be enabled.

Run the following APIs before running this API: POST /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/sod/analyze to retrieve request ID.

cURL Request Example

curl -i -X POST \
   -H "Authorization:Bearer <your access token>" \
   -H "Content-Type:application/json" \
   -d \
'{
    "requestIds": [
        "c87b487de125418eaxx150bd62e5f2c7"
    ]
}' \
 '${service-instance-url}/access-governance/service-administration/${versionID}/orchestratedSystems/${orchestratedSystemId}/sod/status

Example Request Payload

In your REST Client tool, submit the POST request
${service-instance-url}/access-governance/service-administration/${versionID}/orchestratedSystems/${orchestratedSystemId}/sod/status
{
    "requestIds": [
        "c87b487de125418ea73150bd62e5f2c7"
    ]
}

Example of the Response Code

You'll receive 200 OK response along with the following response body:

{
    "items": [
        {
            "requestId": "c87xx87de125xx8ea7315xxd62e5fxx7",
            "requestStatus": "SUCCESS",
            "timeRequested": "2025-06-16T18:49:15.000Z",
            "timeRequestCompletion": "2025-06-16T18:51:21.525Z",
            "requestedBy": "Amel Maclead",
            "events": [
                {
                    "id": "56cxxd86c802xx01b7a33xx6ffb07xx4",
                    "status": "SUCCESS",
                    "createdBy": "Amel Maclead",
                    "timeCreated": "2025-06-16T18:49:15.000Z",
                    "timeProcessingStarted": "2025-06-16T18:49:18.303Z",
                    "timeProcessingEnded": "2025-06-16T18:51:21.525Z",
                    "requestPayload": {
                        "requestData": {
                            "orchestratedSystemIdentityId": "targetId.account.ICF.306xx8290-efc9xx9a-bae9xxeefecaadf1.3b3xx2e1a4f60xxfc313xx9602acxx02",
                            "accountData": null,
                            "permissionAssignments": [
                                {
                                    "id": "roles.ICF.306xx8290-efc9xx9a-bae9xxeefecaadf1.f832xx90ddb243xxb476xxa01961dxxe",
                                    "action": "ADD",
                                    "attributes": [
                                        {
                                            "name": "roles",
                                            "displayName": null,
                                            "value": [
                                                "ADB42xx383FB48xxCB16Bxx7AA4FDExxA"
                                            ],
                                            "action": null,
                                            "additionalAttributes": null,
                                            "attributes": null
                                        }
                                    ]
                                }
                            ],
                            "requestedBy": "Amel Maclead"
                        },
                        "userData": {
                            "attributes": [
                                {
                                    "name": "displayName",
                                    "displayName": "displayName",
                                    "value": [
                                        "abuser10 abuser10"
                                    ],
                                    "action": null,
                                    "additionalAttributes": null,
                                    "attributes": null
                                },
                                {
                                    "name": "userName",
                                    "displayName": "userName",
                                    "value": [
                                        "abuser10@idmconnector.onmicrosoft.com"
                                    ],
                                    "action": null,
                                    "additionalAttributes": null,
                                    "attributes": null
                                }
                            ]
                        },
                        "accountData": {
                            "attributes": [
                                {
                                    "name": "name",
                                    "displayName": "User login",
                                    "value": [
                                        "abuser10@idmconnector.onmicrosoft.com"
                                    ],
                                    "action": null,
                                    "additionalAttributes": null,
                                    "attributes": null
                                }
                            ]
                        },
                        "childAssignmentData": [
                            {
                                "attributes": [
                                    {
                                        "name": "Name",
                                        "displayName": "Name",
                                        "value": [
                                            "ORA_ASM_APPLICATION_IMPLEMENTATION_CONSULTANT_JOB"
                                        ],
                                        "action": null,
                                        "additionalAttributes": null,
                                        "attributes": [
                                            {
                                                "name": "roles",
                                                "displayName": "Roles",
                                                "value": [
                                                    "ADB42xx383FB48xxCB16Bxx7AA4FDExxA"
                                                ],
                                                "action": null,
                                                "additionalAttributes": null,
                                                "attributes": null
                                            }
                                        ]
                                    }
                                ]
                            }
                        ]
                    },
                    "hasViolation": true,
                    "provider": "FA_RMCS",
                    "violationSummary": [
                        {
                            "controlName": "10103: Sensitive Joint Venture Stakeholder Privileges",
                            "existingRoles": [],
                            "requestedRoles": [
                                {
                                    "id": "roles.ICF.306xx8290-efc9xx9a-bae9xxeefecaadf1.f832xx90ddb243xxb476xxa01961dxxe",
                                    "name": "ORA_ASM_APPLICATION_IMPLEMENTATION_CONSULTANT_JOB",
                                    "displayName": "Application Implementation Consultant",
                                    "accessPoints": [
                                        "Manage Joint Venture Definition"
                                    ]
                                }
                            ]
                        }
                    ]
                }
            ]
        }
    ]
}
Back to Top