What's New for Oracle Access Governance REST API

Learn about new and updated endpoints for the Oracle Access Governance REST API.

To view Oracle Access Governance Console service updates, see What's New Oracle Access Governance service.

June 2026

REST API Category Changes in REST API
Access Bundles
  • Added endpoint to retry failed provisioning of an Access Bundle POST /accessBundles/{accessBundleId}/retry
  • Added bulk retry endpoint for Access Bundle provisioning (POST /accessBundles/retry)
  • Updated Access Bundle APIs to support Business Approvers.
Roles
  • Added endpoint to revoke a role for an identity POST /roles/{roleId}/revoke
  • Updated Access Bundle APIs to support Business Approvers
Campaigns
  • Updated Campaigns APIs to support primary and secondary owners.
  • Updated Delete Campaign to support deletion for Draft, Approved, System ended, and Terminated campaigns.

April 2026

REST API Category Changes in REST API
Access Guardrails New endpoints:

March 2026

REST API Category Changes in REST API
Access Request Updated specifications and examples to include separationOfDutiesAnalysisRequests response details in Get Access Requests and Create Access Requests endpoints.
Security Context Added use case and example for access bundle and access request with security context values. For a reference scenario, see Access Request with Security Context Values.
Identities New endpoint for Identities API to retrieve roles assigned to an identity.

List Identity's Roles
Orchestrated Systems Updated response to include description attribute for Find Permission Attributes API.

December 2025

REST API Category Changes in REST API
Access Request Updated specifications and examples to remove the createdBy parameter from the Pre-check accesses for Violations and Create Access Requests endpoints.

November 2025

REST API Category Changes in REST API
Access Request Pre-check accesses for Violations
SeparationOfDuties Check status of the separation of duties request(s)

October 2025

REST API Category Changes in REST API
License Requirement You can now use External API with any Oracle Access Governance license.
Revision Management for Identity Collections Oracle Access Governance now includes resource revision approval process before its implementation. If configured, resource edits or deletions go through an approval workflow.
List permissions for an Identity New endpoint for Identities API to retrieve permissions assigned to an identity.

List Identity's Permissions
List members of an Organization New endpoint to retrieve members or identities in an organization.

September 2025

REST API Category Changes in REST API
Organization New endpoints for Oracle Access Governance Organization:
  • Access Bundles
  • Roles
  • Access Requests
 Updated endpoints to support availability of permissions/roles only to the members of an organization For a reference scenario, see Request Limited to Members of Organization.

August 2025

REST API Category Changes in REST API
Campaigns New endpoints with the ability to create and manage campaigns:
Identities New endpoints with the ability to manage Account Lifecycle:

June 2025

REST API Category Changes in REST API
Permissions New category with new endpoint
Rate Limits API Rate Limits have been introduced. For more information, see API Rate Limits
Identities Updated List Identities to simplify querying identity data using the attributeValues and attributes query parameters. See List Identities.
Access Reviews New category with new endpoints - Access Reviews
Campaigns New category with new endpoints - Campaigns
Identity Collections New category with new endpoints - Identity Collections
Access Request Updated category with new endpoint:

POST: Create an extension request

This supports the time-bound access functionality and you can request an extension for the soon-to-expire access, based on the allowed number of days defined during access bundle configuration. For a reference scenario, see Time-Bound Access.
Access Bundles Updated endpoints to support time-bound access functionality
Approvals Updated category with new endpoints:
Orchestrated System Updated category with new endpoints to support Separation of Duties (SoD) Analysis:
Applications Roles Learn about the required application roles to run APIs, segregated based on tasks for each API endpoint. See Application roles.

May 2025

REST API Category Changes in REST API
Authentication Revised Authentication and Authorization mechanism by introducing the Authorization Code grant type. For more details, see Get Bearer Access Token using the OAuth 2.0 Authorization Code.
Polices New category with the following endpoints:
Access Bundles You can now create an access bundle using the following grant types:
  • Client Credentials
  • Authorization Code

April 2025

REST API Category Changes in REST API
Access Guardrails New category with the following endpoints:

For a reference scenario, see Raise an Access Request with High Risk Violations.

Approvals New category with the following endpoints:
Roles New category with the following endpoints:
Identities New category with the following endpoints:

March 2025

REST API Category Changes in REST API
Oracle Access Governance REST API General availability of external API with the following resources: