Oracle Access Governance REST APIs

All REST Endpoints

AccessBundles

The operations from the AccessBundles category.

Activate an Access Bundle: Method: patch
Path: /access-governance/access-controls/20250331/accessBundles/{accessBundleId}/activate
Create an Access Bundle: Method: post
Path: /access-governance/access-controls/20250331/accessBundles
Delete an Access Bundle: Method: delete
Path: /access-governance/access-controls/20250331/accessBundles/{accessBundleId}
Get a list of Access Bundles: Method: get
Path: /access-governance/access-controls/20250331/accessBundles
Get an Access Bundle: Method: get
Path: /access-governance/access-controls/20250331/accessBundles/{accessBundleId}
Update an Access Bundle: Method: put
Path: /access-governance/access-controls/20250331/accessBundles/{accessBundleId}

AccessGuardrails

The operations from the AccessGuardrails category.

Analyze Access Guardrails: Method: post
Path: /access-governance/access-controls/20250331/accessGuardrails/analyze
Get a list of Access Guardrails: Method: get
Path: /access-governance/access-controls/20250331/accessGuardrails
Get an Access Guardrail: Method: get
Path: /access-governance/access-controls/20250331/accessGuardrails/{accessGuardrailId}

AccessRequests

The operations from the AccessRequests category.

Create an Access Request: Method: post
Path: /access-governance/access-controls/20250331/accessRequests
Create an extension request: Method: post
Path: /access-governance/access-controls/20250331/accessRequests/extension
Get a list of Access Requests: Method: get
Path: /access-governance/access-controls/20250331/accessRequests
Get an Access Request: Method: get
Path: /access-governance/access-controls/20250331/accessRequests/{accessRequestId}

AccessReviews

Access Reviews that checks and certifies if privileges granted are still required and align with the current job at work

Accept an access review: Method: post
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/accept
Assign an access review: Method: post
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/assign
Get membership rules and excluded identities for Identity collection access review: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/membershipRules
Get a list of Access Control Access Reviews: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/accessControl
Get a list of Identity Access Reviews: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/identity
Get a list of Ownership Access Reviews: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/ownership
Get details of an access review: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}
Get insights for an access review: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/insights
Get list of Access Association for the given review task: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/associations
Get list of Actionable Policy Statements for an policy access review: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actionablePolicyStatements
Get list of event changes for an access review: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/eventChanges
Get list of identities for an Ownership or Identity collection access review based on ConditionType param: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/identities
Get list of prior actions for an access review: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/priorActions
Get the policy statements details for the given policy statement ID for the policy access review: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/policyStatements/{policyStatementId}
List Policy statement identities for the given policy statement: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/policyStatements/{policyStatementId}/identities
List Policy statements resources for the given policy statement: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/policyStatements/{policyStatementId}/resources
List resource counts summary of the policy statement: Method: get
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/policyStatements/{policyStatementId}/resourceCounts
Modify an access review: Method: post
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/modify
Reassign an access review: Method: post
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/reassign
Remove an access review: Method: post
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/remove
Revoke an access review: Method: post
Path: /access-governance/access-reviews/20250331/accessReviews/{accessReviewId}/actions/revoke

ApprovalWorkflows

The operations from the ApprovalWorkflows category.

Get a list of Approval Processes: Method: get
Path: /access-governance/access-controls/20250331/approvalWorkflows

Approvals

The operations from the Approvals category.

Act on Approval Tasks in Bulk (Async): Method: post
Path: /access-governance/access-controls/20250331/approvals/workRequest
Act on one or more Approval Tasks.: Method: post
Path: /access-governance/access-controls/20250331/approvals
Get a list of Approval tasks: Method: get
Path: /access-governance/access-controls/20250331/approvals
Get a list of my Approval tasks: Method: get
Path: /access-governance/access-controls/20250331/approvals/me
Get an Approval task: Method: get
Path: /access-governance/access-controls/20250331/approvals/{taskId}
Get status for asynchronous bulk Approval Task creation.: Method: get
Path: /access-governance/access-controls/20250331/approvals/workRequest/{workRequestId}

Campaigns

The operations from the Campaigns category.

Approve or sign-off a campaign: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/{campaignId}/actions/approve
Change Campaign Owner: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/{campaignId}/actions/changeOwner
Create a new campaign: Method: post
Path: /access-governance/access-reviews/20250331/campaigns
Deletes the campaign: Method: delete
Path: /access-governance/access-reviews/20250331/campaigns/{campaignId}
Get Access Governance criteria type with its states: Method: get
Path: /access-governance/access-reviews/20250331/campaigns/systemBrowser/ag/criteria
Get Campaigns: Method: get
Path: /access-governance/access-reviews/20250331/campaigns
Get Cloud Providers: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/cloudProviders
Get Compartments: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/compartments
Get custom attributes values: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/customAttributes/{customAttributeId}
Get Domains: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/domains
Get Entity Attributes: Method: get
Path: /access-governance/access-reviews/20250331/campaigns/attributes/{agEntityType}
Get Identity Collections: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/identityCollections
Get Pending reviewers for a given stage: Method: get
Path: /access-governance/access-reviews/20250331/campaigns/{campaignId}/stages/{stageId}/reviewers
Get Permissions: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/permissions
Get Policies: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/policies
Get Resources: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/resources
Get Roles: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/roles
Get the details of an existing campaign.: Method: get
Path: /access-governance/access-reviews/20250331/campaigns/{campaignId}
Get the overview report for the given campaign: Method: get
Path: /access-governance/access-reviews/20250331/campaigns/{campaignId}/overviewReport
Get valid operators and data types: Method: get
Path: /access-governance/access-reviews/20250331/campaigns/operators
List attribute values for the given entity type: Method: get
Path: /access-governance/access-reviews/20250331/campaigns/attributes/{agEntityType}/{attributeId}/values
Terminate a campaign instance or series: Method: post
Path: /access-governance/access-reviews/20250331/campaigns/{campaignId}/actions/terminate
Update Campaign: Method: put
Path: /access-governance/access-reviews/20250331/campaigns/{campaignId}

Identities

Identities in Access Governance

Activate an Identity: Method: post
Path: /access-governance/identities/20250331/identities/{identityId}/action/activate
Delete an Account: Method: post
Path: /access-governance/identities/20250331/identities/{identityId}/accounts/{accountId}/action/delete
Disable an Account: Method: post
Path: /access-governance/identities/20250331/identities/{identityId}/accounts/{accountId}/action/disable
Enable an Account: Method: post
Path: /access-governance/identities/20250331/identities/{identityId}/accounts/{accountId}/action/enable
Get an Account: Method: get
Path: /access-governance/identities/20250331/identities/{identityId}/accounts/{accountId}
Get an Identity: Method: get
Path: /access-governance/identities/20250331/identities/{identityId}
Get Identity Attributes: Method: get
Path: /access-governance/identities/20250331/identities/attributes
Get Identity Attributes values: Method: get
Path: /access-governance/identities/20250331/identities/attributeValues/{identityAttributeId}
Get Identity Operators: Method: get
Path: /access-governance/identities/20250331/identities/operators
List Accounts: Method: get
Path: /access-governance/identities/20250331/identities/{identityId}/accounts
List an Identity's Permissions: Method: get
Path: /access-governance/identities/20250331/identities/{identityId}/permissions
List Identities: Method: get
Path: /access-governance/identities/20250331/identities
Terminate an Identity: Method: post
Path: /access-governance/identities/20250331/identities/{identityId}/action/terminate

IdentityCollections

The operations from the IdentityCollections category.

Creates a new Identity Collection: Method: post
Path: /access-governance/access-controls/20250331/identityCollections
Delete an Identity Collection: Method: delete
Path: /access-governance/access-controls/20250331/identityCollections/{identityCollectionId}
Get a list of Identity Collections: Method: get
Path: /access-governance/access-controls/20250331/identityCollections
Get a list of members in an identity collection: Method: get
Path: /access-governance/access-controls/20250331/identityCollections/{identityCollectionId}/members
Get an Identity Collection: Method: get
Path: /access-governance/access-controls/20250331/identityCollections/{identityCollectionId}
Update the Identity Collection identified by the id: Method: put
Path: /access-governance/access-controls/20250331/identityCollections/{identityCollectionId}

OrchestratedSystems

The operations from the OrchestratedSystems category.

Find Permission Attributes: Method: post
Path: /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/permissionAttributes
Get a list of Account Profiles: Method: get
Path: /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/accountProfiles
Get a list of items from lookup table: Method: get
Path: /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/lookupAttributes
Get a list of Orchestrated Systems: Method: get
Path: /access-governance/service-administration/20250331/orchestratedSystems
Get a list of Permissions for an Orchestrated System: Method: get
Path: /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/permissions
Get an Account Profile: Method: get
Path: /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}/accountProfiles/{accountProfileId}
Get an Orchestrated System: Method: get
Path: /access-governance/service-administration/20250331/orchestratedSystems/{orchestratedSystemId}
Get the status of Separation of Duties Analysis requests: Method: post
Path: /access-governance/service-administration/20250331/orchestratedSystem/{orchestratedSystemId}/sod/status
Request analysis of Separation of Duties (async): Method: post
Path: /access-governance/service-administration/20250331/orchestratedSystem/{orchestratedSystemId}/sod/analyze

Organizations

The operations from the Organizations category.

Gets a list of all identities that are part of organization: Method: get
Path: /access-governance/service-administration/20250331/organizations/{organizationId}/members
Gets a list of Organizations: Method: get
Path: /access-governance/service-administration/20250331/organizations

Permissions

The operations from the Permissions category.

Revoke a granted permission: Method: post
Path: /access-governance/access-controls/20250331/permissions/{permissionId}/actions/revoke

Policies

The operations from the Policies category.

Create a Policy: Method: post
Path: /access-governance/access-controls/20250331/policies
Delete a policy: Method: delete
Path: /access-governance/access-controls/20250331/policies/{policyId}
Get a list of Policies: Method: get
Path: /access-governance/access-controls/20250331/policies
Get Policy: Method: get
Path: /access-governance/access-controls/20250331/policies/{policyId}
Update a Policy: Method: put
Path: /access-governance/access-controls/20250331/policies/{policyId}

Roles

The operations from the Roles category.

Creates a new Role: Method: post
Path: /access-governance/access-controls/20250331/roles
Delete Role: Method: delete
Path: /access-governance/access-controls/20250331/roles/{roleId}
Get a list of Roles: Method: get
Path: /access-governance/access-controls/20250331/roles
Get Role: Method: get
Path: /access-governance/access-controls/20250331/roles/{roleId}
Update Role: Method: put
Path: /access-governance/access-controls/20250331/roles/{roleId}

Types

The operations from the Types category.

Gets a Type available in Access Governance by id: Method: get
Path: /access-governance/identities/20250331/types/{typeId}