Skip to content

Commit

Permalink
Automated commit 'Merge pull request #1416 from sailpoint/devrel-1200
Browse files Browse the repository at this point in the history
devrel-1200' by github action: 6200091232
  • Loading branch information
tyler-mairose-sp committed Sep 15, 2023
1 parent 6bbf155 commit 3471857
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions idn/v3/paths/access-requests.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -22,19 +22,19 @@ post:
* Can be requested for multiple identities in a single request.
* Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options.
* Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others.
* Roles, Access Profiles and Entitlements can be requested.
* Roles, access profiles and entitlements can be requested.
* While requesting entitlements, maximum of 25 entitlements and 10 recipients are allowed in a request.
__REVOKE_ACCESS__
* Can only be requested for a single identity at a time.
* Does not support self request. Only manager can request to revoke access for their directly managed employees.
* If removeDate is specified, then the access will be removed on that date and time only for Roles and Access Profiles. Entitlements are currently unsupported for removeDate.
* Roles, Access Profiles, and Entitlements can be requested for revocation.
* If a `removeDate` is specified, then the access will be removed on that date and time only for roles and access profiles. Entitlements are currently unsupported for `removeDate`.
* Roles, access profiles, and entitlements can be requested for revocation.
* Revoke requests for entitlements are limited to 1 entitlement per access request currently.
* [Roles, Access Profiles] removeDate can be specified if access don't have a sunset date or if a revoke access with a removeDate earlier than the current endDate.
* [Roles, Access Profiles] You can specify a `removeDate` if the access doesn't already have a sunset date. The `removeDate` must be a future date, in the UTC timezone.
* Allows a manager to request to revoke access for direct employees. A token with ORG_ADMIN authority can also request to revoke access from anyone.
NOTE: There is no indication to the approver in the IdentityNow UI that the approval request is for a revoke action. Take this into consideration when calling this API.
>**Note:** There is no indication to the approver in the IdentityNow UI that the approval request is for a revoke action. Take this into consideration when calling this API.
A token with API authority cannot be used to call this endpoint.
Expand Down

0 comments on commit 3471857

Please sign in to comment.