> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Create

> Create creates a new access review template that defines a reusable configuration for launching campaigns.



## OpenAPI

````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/access_review_template
openapi: 3.1.0
info:
  description: The C1 API is a HTTP API for managing C1 resources.
  title: C1 API
  version: 0.1.0-alpha
servers:
  - description: The C1 API server for the current tenant.
    url: https://{tenantDomain}.conductor.one
    variables:
      tenantDomain:
        default: example
        description: The domain of the tenant to use for this request.
security:
  - bearerAuth: []
    oauth: []
paths:
  /api/v1/access_review_template:
    post:
      tags:
        - Access Review Template
      summary: Create
      description: >-
        Create creates a new access review template that defines a reusable
        configuration for launching campaigns.
      operationId: c1.api.accessreview.v1.AccessReviewTemplateService.Create
      requestBody:
        content:
          application/json:
            schema:
              $ref: >-
                #/components/schemas/c1.api.accessreview.v1.AccessReviewTemplateServiceCreateRequest
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/c1.api.accessreview.v1.AccessReviewTemplateServiceCreateResponse
          description: Successful response
      x-codeSamples:
        - lang: go
          label: Create
          source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"log\"\n)\n\nfunc main() {\n    ctx := context.Background()\n\n    s := conductoronesdkgo.New(\n        conductoronesdkgo.WithSecurity(shared.Security{\n            BearerAuth: \"<YOUR_BEARER_TOKEN_HERE>\",\n            Oauth: \"<YOUR_OAUTH_HERE>\",\n        }),\n    )\n\n    res, err := s.AccessReviewTemplate.Create(ctx, nil)\n    if err != nil {\n        log.Fatal(err)\n    }\n    if res.AccessReviewTemplateServiceCreateResponse != nil {\n        // handle response\n    }\n}"
        - lang: typescript
          label: Typescript (SDK)
          source: >-
            import { ConductoroneSDKTypescript } from
            "conductorone-sdk-typescript";


            const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
              security: {
                bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
                oauth: "<YOUR_OAUTH_HERE>",
              },
            });


            async function run() {
              const result = await conductoroneSDKTypescript.accessReviewTemplate.create();

              console.log(result);
            }


            run();
components:
  schemas:
    c1.api.accessreview.v1.AccessReviewTemplateServiceCreateRequest:
      description: The AccessReviewTemplateServiceCreateRequest message.
      properties:
        accessReviewDuration:
          format: duration
          type:
            - string
            - 'null'
        accuracyIssueAction:
          description: The accuracyIssueAction field.
          enum:
            - ACCURACY_ISSUE_ACTION_UNSPECIFIED
            - ACCURACY_ISSUE_ACTION_CONTINUE
            - ACCURACY_ISSUE_ACTION_WAIT
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        annotations:
          additionalProperties:
            type: string
          description: |-
            Bounded key/value metadata bag for IaC marking and customer tags.
             See .rfcs/object-annotations.md §2. Limits: ≤16 entries; keys 1–128
             chars matching ^[A-Za-z][A-Za-z0-9._/-]{0,127}$; values 0–256 chars
             matching URL-safe ASCII; total serialized ≤4096 bytes. Keys starting
             with `c1/` are reserved for server-managed use and rejected on write.

             Well-known keys: `managed_by`, `iac_workspace`,
             `iac_resource_address`, `iac_tool_version`.
          type: object
          x-speakeasy-terraform-plan-modifier:
            imports:
              - >-
                github.com/conductorone/terraform-provider-conductorone/internal/annotations
            schemaDefinition: annotations.PlanModifier()
        autoCloseCampaign:
          description: The autoCloseCampaign field.
          type:
            - boolean
            - 'null'
        autoCloseDecision:
          description: The autoCloseDecision field.
          enum:
            - CLOSE_DECISION_UNSPECIFIED
            - CLOSE_DECISION_REVOKED
            - CLOSE_DECISION_SKIP
            - CLOSE_DECISION_NO_ACTION
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        autoGenerateReport:
          description: auto generate report when campaign is closed
          type:
            - boolean
            - 'null'
        autoStartCampaign:
          description: The autoStartCampaign field.
          type:
            - boolean
            - 'null'
        columnConfig:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.AccessReviewColumnConfig
            - type: 'null'
        defaultView:
          description: The defaultView field.
          enum:
            - ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED
            - ACCESS_REVIEW_VIEW_TYPE_BY_APP
            - ACCESS_REVIEW_VIEW_TYPE_BY_USER
            - ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED
            - ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        description:
          description: An optional description providing context about the template.
          type:
            - string
            - 'null'
        displayName:
          description: The display name for the new template.
          type:
            - string
            - 'null'
        exemptCertifiedAccessConflicts:
          description: The exemptCertifiedAccessConflicts field.
          type:
            - boolean
            - 'null'
        isCampaignScheduleEnabled:
          description: The isCampaignScheduleEnabled field.
          type:
            - boolean
            - 'null'
        notificationConfig:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.NotificationConfig'
            - type: 'null'
        ownerIds:
          description: >-
            The IDs of the users who own this template. At least one owner is
            required.
          items:
            type: string
          type:
            - array
            - 'null'
        policyId:
          description: >-
            The ID of the default review policy for campaigns created from this
            template.
          type:
            - string
            - 'null'
        recurrenceRule:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.RecurrenceRule'
            - type: 'null'
        reviewInstructions:
          description: The reviewInstructions field.
          type:
            - string
            - 'null'
        reviewerAttributeConfig:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.ReviewerAttributeConfig
            - type: 'null'
        scope:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReviewScopeV2'
            - type: 'null'
        scopeType:
          description: The scopeType field.
          enum:
            - ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED
            - ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS
            - ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS
            - ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE
            - ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        signatureConfig:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.ReviewSignatureConfig
            - type: 'null'
        usePolicyOverride:
          description: The usePolicyOverride field.
          type:
            - boolean
            - 'null'
      title: Access Review Template Service Create Request
      type: object
      x-speakeasy-name-override: AccessReviewTemplateServiceCreateRequest
    c1.api.accessreview.v1.AccessReviewTemplateServiceCreateResponse:
      description: The AccessReviewTemplateServiceCreateResponse message.
      properties:
        accessReviewTemplate:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReviewTemplate'
            - type: 'null'
      title: Access Review Template Service Create Response
      type: object
      x-speakeasy-name-override: AccessReviewTemplateServiceCreateResponse
    c1.api.accessreview.v1.AccessReviewColumnConfig:
      description: Configuration for which columns are visible in the reviewer task list.
      properties:
        columns:
          description: |-
            Ordered list of columns visible to reviewers.
             If empty, the default column set for the campaign's default_view is used.
          items:
            enum:
              - ACCESS_REVIEW_TASK_COLUMN_UNSPECIFIED
              - ACCESS_REVIEW_TASK_COLUMN_VIEW_LINK
              - ACCESS_REVIEW_TASK_COLUMN_CURRENT_STATE
              - ACCESS_REVIEW_TASK_COLUMN_ACCOUNT
              - ACCESS_REVIEW_TASK_COLUMN_ACCOUNT_OWNER
              - ACCESS_REVIEW_TASK_COLUMN_ENTITLEMENT
              - ACCESS_REVIEW_TASK_COLUMN_ENTITLEMENT_DESCRIPTION
              - ACCESS_REVIEW_TASK_COLUMN_RESOURCE
              - ACCESS_REVIEW_TASK_COLUMN_RESOURCE_TYPE
              - ACCESS_REVIEW_TASK_COLUMN_INSIGHTS
              - ACCESS_REVIEW_TASK_COLUMN_RECOMMENDATION
              - ACCESS_REVIEW_TASK_COLUMN_ASSIGNED_TO
              - ACCESS_REVIEW_TASK_COLUMN_STATUS
              - ACCESS_REVIEW_TASK_COLUMN_APP
              - ACCESS_REVIEW_TASK_COLUMN_DUE
              - ACCESS_REVIEW_TASK_COLUMN_PROJECT
              - ACCESS_REVIEW_TASK_COLUMN_CREATED_ON
              - ACCESS_REVIEW_TASK_COLUMN_TASK_AGE
              - ACCESS_REVIEW_TASK_COLUMN_RESOLVED_ON
              - ACCESS_REVIEW_TASK_COLUMN_ENROLLMENT_STATUS
              - ACCESS_REVIEW_TASK_COLUMN_INHERITED_FROM
              - ACCESS_REVIEW_TASK_COLUMN_DEPARTMENT
              - ACCESS_REVIEW_TASK_COLUMN_JOB_TITLE
              - ACCESS_REVIEW_TASK_COLUMN_CREATED_BY
              - ACCESS_REVIEW_TASK_COLUMN_LAST_LOGIN
              - ACCESS_REVIEW_TASK_COLUMN_RESOURCE_PARENT
              - ACCESS_REVIEW_TASK_COLUMN_RESOURCE_CHILDREN
              - ACCESS_REVIEW_TASK_COLUMN_APP_USER_USERNAME
            type: string
            x-speakeasy-unknown-values: allow
          type:
            - array
            - 'null'
      title: Access Review Column Config
      type: object
      x-speakeasy-name-override: AccessReviewColumnConfig
    c1.api.accessreview.v1.NotificationConfig:
      description: >-
        Controls which email notifications are sent during the access review
        lifecycle.
      properties:
        sendClose:
          description: Whether to send a notification when the campaign is closed.
          type:
            - boolean
            - 'null'
        sendKickoff:
          description: Whether to send a notification when the campaign is started.
          type:
            - boolean
            - 'null'
        sendReminders:
          description: >-
            Whether to send periodic reminder emails to reviewers with
            outstanding tasks.
          type:
            - boolean
            - 'null'
      title: Notification Config
      type: object
      x-speakeasy-name-override: NotificationConfig
    c1.api.accessreview.v1.RecurrenceRule:
      description: >
        The RecurrenceRule message.


        This message contains a oneof named end_condition. Only a single field
        of the following list may be set at a time:
          - endDate
          - occurrences
      properties:
        endDate:
          format: date-time
          type:
            - string
            - 'null'
        frequency:
          description: The frequency field.
          enum:
            - FREQUENCY_UNSPECIFIED
            - FREQUENCY_NONE
            - FREQUENCY_DAILY
            - FREQUENCY_WEEKLY
            - FREQUENCY_MONTHLY
            - FREQUENCY_YEARLY
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        interval:
          description: The interval field.
          format: int32
          type:
            - integer
            - 'null'
        occurrences:
          description: >-
            The occurrences field.

            This field is part of the `end_condition` oneof.

            See the documentation for `c1.api.accessreview.v1.RecurrenceRule`
            for more details.
          format: int32
          type:
            - integer
            - 'null'
        startDate:
          format: date-time
          type:
            - string
            - 'null'
      title: Recurrence Rule
      type: object
      x-speakeasy-name-override: RecurrenceRule
    c1.api.accessreview.v1.ReviewerAttributeConfig:
      description: |-
        Allowlist of AppUser.profile keys visible to reviewers, scoped per app.
         Empty = reviewers see no profile attributes in the AppUser tooltip.
      properties:
        bindings:
          description: The bindings field.
          items:
            $ref: >-
              #/components/schemas/c1.api.accessreview.v1.ReviewerAttributeBinding
          type:
            - array
            - 'null'
      title: Reviewer Attribute Config
      type: object
      x-speakeasy-name-override: ReviewerAttributeConfig
    c1.api.accessreview.v1.AccessReviewScopeV2:
      description: >
        The AccessReviewScopeV2 message.


        This message contains a oneof named apps_and_resources_scope. Only a
        single field of the following list may be set at a time:
          - appAccess
          - specificResources
          - appSelectionCriteria
          - resourceTypeSelections


        This message contains a oneof named users_scope. Only a single field of
        the following list may be set at a time:
          - allUsers
          - selectedUsers
          - userCriteria
          - celExpression


        This message contains a oneof named accounts_scope. Only a single field
        of the following list may be set at a time:
          - allAccounts
          - accountCriteria
          - accountCelExpression


        This message contains a oneof named grants_scope. Only a single field of
        the following list may be set at a time:
          - allGrants
          - grantsByCriteria


        This message contains a oneof named access_conflicts_scope. Only a
        single field of the following list may be set at a time:
          - allAccessConflicts
          - specificAccessConflicts


        This message contains a oneof named resource_scope. Only a single field
        of the following list may be set at a time:
          - resourceSelection
      properties:
        accountCelExpression:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.CelExpressionScope'
            - type: 'null'
        accountCriteria:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.AccountCriteriaScope'
            - type: 'null'
        allAccessConflicts:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.AllAccessConflictsScope
            - type: 'null'
        allAccounts:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.AllAccountsScope'
            - type: 'null'
        allGrants:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.AllGrantsScope'
            - type: 'null'
        allUsers:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.AllUsersScope'
            - type: 'null'
        appAccess:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.ApplicationAccessScope
            - type: 'null'
        appSelectionCriteria:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.AppSelectionCriteriaScope
            - type: 'null'
        celExpression:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.CelExpressionScope'
            - type: 'null'
        grantsByCriteria:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.GrantsByCriteriaScope
            - type: 'null'
        resourceSelection:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.ResourceSelectionScope
            - type: 'null'
        resourceTypeSelections:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.ResourceTypeSelectionScope
            - type: 'null'
        selectedUsers:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.SelectedUsersScope'
            - type: 'null'
        specificAccessConflicts:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.SpecificAccessConflictsScope
            - type: 'null'
        specificResources:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.SpecificResourcesScope
            - type: 'null'
        userCriteria:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.UserCriteriaScope'
            - type: 'null'
      title: Access Review Scope V 2
      type: object
      x-speakeasy-name-override: AccessReviewScopeV2
    c1.api.accessreview.v1.ReviewSignatureConfig:
      description: Signature configuration for access review submissions
      properties:
        meaningOfSignature:
          description: The meaningOfSignature field.
          type:
            - string
            - 'null'
        requireSignature:
          description: The requireSignature field.
          type:
            - boolean
            - 'null'
        stepUpProviderId:
          description: The stepUpProviderId field.
          type:
            - string
            - 'null'
        tspUrl:
          description: The tspUrl field.
          type:
            - string
            - 'null'
      title: Review Signature Config
      type: object
      x-speakeasy-name-override: ReviewSignatureConfig
    c1.api.accessreview.v1.AccessReviewTemplate:
      description: >
        A reusable template that defines the configuration for creating access
        review campaigns.
         Templates can optionally be scheduled to automatically create campaigns on a recurring basis.

        This message contains a oneof named slack_channel_details. Only a single
        field of the following list may be set at a time:
          - slackChannel
      properties:
        accessReviewDuration:
          format: duration
          type:
            - string
            - 'null'
        accuracyIssueAction:
          description: The accuracyIssueAction field.
          enum:
            - ACCURACY_ISSUE_ACTION_UNSPECIFIED
            - ACCURACY_ISSUE_ACTION_CONTINUE
            - ACCURACY_ISSUE_ACTION_WAIT
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        annotations:
          additionalProperties:
            type: string
          description: |-
            Key/value metadata. Up to 16 entries; keys 1-128 chars; values 0-256
             chars; URL-safe ASCII. Keys starting with `c1/` are reserved.

             Updates have PATCH semantics: keys absent from the request are
             preserved; an empty value deletes the key.

             Well-known keys: `managed_by`, `iac_workspace`,
             `iac_resource_address`, `iac_tool_version`.
          type: object
          x-speakeasy-terraform-plan-modifier:
            imports:
              - >-
                github.com/conductorone/terraform-provider-conductorone/internal/annotations
            schemaDefinition: annotations.PlanModifier()
        autoCloseCampaign:
          description: |-
            Auto-close configuration
             start date and access_review_duration will be used to calculate the scheduled close date
          type:
            - boolean
            - 'null'
        autoCloseDecision:
          description: The autoCloseDecision field.
          enum:
            - CLOSE_DECISION_UNSPECIFIED
            - CLOSE_DECISION_REVOKED
            - CLOSE_DECISION_SKIP
            - CLOSE_DECISION_NO_ACTION
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        autoGenerateReport:
          description: auto generate report when campaign is closed
          type:
            - boolean
            - 'null'
        autoStartCampaign:
          description: |-
            Auto-start configuration
             next_scheduled_campaign_at will be used as the scheduled start date
          type:
            - boolean
            - 'null'
        columnConfig:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.AccessReviewColumnConfig
            - type: 'null'
        createdAt:
          format: date-time
          readOnly: true
          type:
            - string
            - 'null'
        defaultView:
          description: The defaultView field.
          enum:
            - ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED
            - ACCESS_REVIEW_VIEW_TYPE_BY_APP
            - ACCESS_REVIEW_VIEW_TYPE_BY_USER
            - ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED
            - ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        deletedAt:
          format: date-time
          readOnly: true
          type:
            - string
            - 'null'
        description:
          description: An optional description providing context about this template.
          type:
            - string
            - 'null'
        displayName:
          description: The human-readable name of this template.
          type:
            - string
            - 'null'
        exemptCertifiedAccessConflicts:
          description: The exemptCertifiedAccessConflicts field.
          type:
            - boolean
            - 'null'
        id:
          description: The unique identifier of this template.
          type:
            - string
            - 'null'
        inclusionScope:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.AccessReviewInclusionScope
            - type: 'null'
        isCampaignScheduleEnabled:
          description: >-
            Whether automatic campaign creation on the recurrence schedule is
            enabled.
          type:
            - boolean
            - 'null'
        nextScheduledCampaignAt:
          format: date-time
          type:
            - string
            - 'null'
        notificationConfig:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.NotificationConfig'
            - type: 'null'
        occurrences:
          description: The number of campaigns that have been created from this template.
          format: int32
          type:
            - integer
            - 'null'
        policyId:
          description: >-
            The ID of the default review policy applied to campaigns created
            from this template.
          type:
            - string
            - 'null'
        recurrenceRule:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.RecurrenceRule'
            - type: 'null'
        reviewInstructions:
          description: The reviewInstructions field.
          type:
            - string
            - 'null'
        reviewerAttributeConfig:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.ReviewerAttributeConfig
            - type: 'null'
        scope:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReviewScopeV2'
            - type: 'null'
        scopeType:
          description: The scopeType field.
          enum:
            - ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED
            - ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS
            - ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS
            - ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE
            - ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        signatureConfig:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.ReviewSignatureConfig
            - type: 'null'
        slackChannel:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.SlackChannel'
            - type: 'null'
        updatedAt:
          format: date-time
          readOnly: true
          type:
            - string
            - 'null'
        usePolicyOverride:
          description: The usePolicyOverride field.
          type:
            - boolean
            - 'null'
      title: Access Review Template
      type: object
      x-speakeasy-entity: Access Review Template
      x-speakeasy-name-override: AccessReviewTemplate
    c1.api.accessreview.v1.ReviewerAttributeBinding:
      description: Pair of an app and one of that app's user profile attribute keys.
      properties:
        appId:
          description: The appId field.
          type:
            - string
            - 'null'
        attributeKey:
          description: The attributeKey field.
          type:
            - string
            - 'null'
      title: Reviewer Attribute Binding
      type: object
      x-speakeasy-name-override: ReviewerAttributeBinding
    c1.api.accessreview.v1.CelExpressionScope:
      description: The CelExpressionScope message.
      properties:
        expression:
          description: The expression field.
          type:
            - string
            - 'null'
      title: Cel Expression Scope
      type: object
      x-speakeasy-name-override: CelExpressionScope
    c1.api.accessreview.v1.AccountCriteriaScope:
      description: The AccountCriteriaScope message.
      properties:
        accountDomain:
          description: The accountDomain field.
          enum:
            - APP_USER_DOMAIN_UNSPECIFIED
            - APP_USER_DOMAIN_EXTERNAL
            - APP_USER_DOMAIN_TRUSTED
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        accountTypes:
          description: The accountTypes field.
          items:
            enum:
              - APP_USER_TYPE_UNSPECIFIED
              - APP_USER_TYPE_USER
              - APP_USER_TYPE_SERVICE_ACCOUNT
              - APP_USER_TYPE_SYSTEM_ACCOUNT
            type: string
            x-speakeasy-unknown-values: allow
          type:
            - array
            - 'null'
        appUserStatuses:
          description: The appUserStatuses field.
          items:
            enum:
              - APP_USER_STATUS_UNSPECIFIED
              - APP_USER_STATUS_ENABLED
              - APP_USER_STATUS_DISABLED
              - APP_USER_STATUS_DELETED
            type: string
            x-speakeasy-unknown-values: allow
          type:
            - array
            - 'null'
        noAccountOwner:
          description: The noAccountOwner field.
          type:
            - boolean
            - 'null'
      title: Account Criteria Scope
      type: object
      x-speakeasy-name-override: AccountCriteriaScope
    c1.api.accessreview.v1.AllAccessConflictsScope:
      description: The AllAccessConflictsScope message.
      title: All Access Conflicts Scope
      type: object
      x-speakeasy-name-override: AllAccessConflictsScope
    c1.api.accessreview.v1.AllAccountsScope:
      description: The AllAccountsScope message.
      title: All Accounts Scope
      type: object
      x-speakeasy-name-override: AllAccountsScope
    c1.api.accessreview.v1.AllGrantsScope:
      description: The AllGrantsScope message.
      title: All Grants Scope
      type: object
      x-speakeasy-name-override: AllGrantsScope
    c1.api.accessreview.v1.AllUsersScope:
      description: The AllUsersScope message.
      title: All Users Scope
      type: object
      x-speakeasy-name-override: AllUsersScope
    c1.api.accessreview.v1.ApplicationAccessScope:
      description: The ApplicationAccessScope message.
      title: Application Access Scope
      type: object
      x-speakeasy-name-override: ApplicationAccessScope
    c1.api.accessreview.v1.AppSelectionCriteriaScope:
      description: The AppSelectionCriteriaScope message.
      properties:
        complianceFrameworkAttributeValueIds:
          description: The complianceFrameworkAttributeValueIds field.
          items:
            type: string
          type:
            - array
            - 'null'
        riskLevelAttributeValueIds:
          description: The riskLevelAttributeValueIds field.
          items:
            type: string
          type:
            - array
            - 'null'
      title: App Selection Criteria Scope
      type: object
      x-speakeasy-name-override: AppSelectionCriteriaScope
    c1.api.accessreview.v1.GrantsByCriteriaScope:
      description: >
        The GrantsByCriteriaScope message.


        This message contains a oneof named criteria_filter. Only a single field
        of the following list may be set at a time:
          - daysSinceAdded
          - daysSinceReviewed
          - grantsAddedBetween
      properties:
        accessProfileFilter:
          oneOf:
            - $ref: >-
                #/components/schemas/c1.api.accessreview.v1.GrantAccessProfileFilter
            - type: 'null'
        daysSinceAdded:
          format: duration
          type:
            - string
            - 'null'
        daysSinceLastUsed:
          format: duration
          type:
            - string
            - 'null'
        daysSinceReviewed:
          format: duration
          type:
            - string
            - 'null'
        grantsAddedBetween:
          oneOf:
            - $ref: '#/components/schemas/c1.api.accessreview.v1.GrantsAddedBetween'
            - type: 'null'
        sourceFilter:
          description: The sourceFilter field.
          enum:
            - GRANT_SOURCE_FILTER_UNSPECIFIED
            - GRANT_SOURCE_FILTER_DIRECT
            - GRANT_SOURCE_FILTER_INHERITED
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        typeFilter:
          description: The typeFilter field.
          enum:
            - GRANT_FILTER_TYPE_UNSPECIFIED
            - GRANT_FILTER_TYPE_PERMANENT
            - GRANT_FILTER_TYPE_TEMPORARY
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
      title: Grants By Criteria Scope
      type: object
      x-speakeasy-name-override: GrantsByCriteriaScope
    c1.api.accessreview.v1.ResourceSelectionScope:
      description: The ResourceSelectionScope message.
      title: Resource Selection Scope
      type: object
      x-speakeasy-name-override: ResourceSelectionScope
    c1.api.accessreview.v1.ResourceTypeSelectionScope:
      description: The ResourceTypeSelectionScope message.
      title: Resource Type Selection Scope
      type: object
      x-speakeasy-name-override: ResourceTypeSelectionScope
    c1.api.accessreview.v1.SelectedUsersScope:
      description: The SelectedUsersScope message.
      properties:
        userIds:
          description: The userIds field.
          items:
            type: string
          type:
            - array
            - 'null'
      title: Selected Users Scope
      type: object
      x-speakeasy-name-override: SelectedUsersScope
    c1.api.accessreview.v1.SpecificAccessConflictsScope:
      description: The SpecificAccessConflictsScope message.
      title: Specific Access Conflicts Scope
      type: object
      x-speakeasy-name-override: SpecificAccessConflictsScope
    c1.api.accessreview.v1.SpecificResourcesScope:
      description: The SpecificResourcesScope message.
      title: Specific Resources Scope
      type: object
      x-speakeasy-name-override: SpecificResourcesScope
    c1.api.accessreview.v1.UserCriteriaScope:
      description: The UserCriteriaScope message.
      properties:
        groupAppEntitlementsRef:
          description: The groupAppEntitlementsRef field.
          items:
            $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef'
          type:
            - array
            - 'null'
        managerUserIds:
          description: The managerUserIds field.
          items:
            type: string
          type:
            - array
            - 'null'
        multiUserProfileAttributes:
          additionalProperties:
            $ref: >-
              #/components/schemas/c1.api.accessreview.v1.IncludedUserAttributeValues
          description: The multiUserProfileAttributes field.
          type: object
        userStatus:
          description: The userStatus field.
          items:
            enum:
              - UNKNOWN
              - ENABLED
              - DISABLED
              - DELETED
            type: string
            x-speakeasy-unknown-values: allow
          type:
            - array
            - 'null'
      title: User Criteria Scope
      type: object
      x-speakeasy-name-override: UserCriteriaScope
    c1.api.accessreview.v1.AccessReviewInclusionScope:
      description: The AccessReviewInclusionScope message.
      properties:
        appUserStatuses:
          description: The appUserStatuses field.
          items:
            enum:
              - APP_USER_STATUS_UNSPECIFIED
              - APP_USER_STATUS_ENABLED
              - APP_USER_STATUS_DISABLED
              - APP_USER_STATUS_DELETED
            type: string
            x-speakeasy-unknown-values: allow
          type:
            - array
            - 'null'
        appUserTypes:
          description: The appUserTypes field.
          items:
            enum:
              - APP_USER_TYPE_UNSPECIFIED
              - APP_USER_TYPE_USER
              - APP_USER_TYPE_SERVICE_ACCOUNT
              - APP_USER_TYPE_SYSTEM_ACCOUNT
            type: string
            x-speakeasy-unknown-values: allow
          type:
            - array
            - 'null'
        managerIds:
          description: The managerIds field.
          items:
            type: string
          type:
            - array
            - 'null'
        multiUserProfileAttributes:
          additionalProperties:
            $ref: >-
              #/components/schemas/c1.api.accessreview.v1.IncludedUserAttributeValues
          description: The multiUserProfileAttributes field.
          type: object
        noAccountOwners:
          description: The noAccountOwners field.
          type:
            - boolean
            - 'null'
        userIds:
          description: The userIds field.
          items:
            type: string
          type:
            - array
            - 'null'
        userStatuses:
          description: The userStatuses field.
          items:
            enum:
              - USER_UNKNOWN
              - USER_ENABLED
              - USER_DISABLED
              - USER_DELETED
            type: string
            x-speakeasy-unknown-values: allow
          type:
            - array
            - 'null'
      title: Access Review Inclusion Scope
      type: object
      x-speakeasy-name-override: AccessReviewInclusionScope
    c1.api.accessreview.v1.SlackChannel:
      description: The SlackChannel message.
      properties:
        description:
          description: The description field.
          type:
            - string
            - 'null'
        name:
          description: The name field.
          type:
            - string
            - 'null'
      title: Slack Channel
      type: object
      x-speakeasy-name-override: SlackChannel
    c1.api.accessreview.v1.GrantAccessProfileFilter:
      description: The GrantAccessProfileFilter message.
      properties:
        excludedAccessProfileIds:
          description: |-
            Access profile IDs to EXCLUDE from the campaign
             Used when filter_type = EXCLUDE_SPECIFIC
             Max 32 profile IDs
          items:
            type: string
          type:
            - array
            - 'null'
        filterType:
          description: The filterType field.
          enum:
            - ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED
            - ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL
            - ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL
            - ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC
            - ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC
          type:
            - string
            - 'null'
          x-speakeasy-unknown-values: allow
        includedAccessProfileIds:
          description: |-
            Access profile IDs to INCLUDE in the campaign
             Used when filter_type = INCLUDE_SPECIFIC
             Max 32 profile IDs
          items:
            type: string
          type:
            - array
            - 'null'
      title: Grant Access Profile Filter
      type: object
      x-speakeasy-name-override: GrantAccessProfileFilter
    c1.api.accessreview.v1.GrantsAddedBetween:
      description: The GrantsAddedBetween message.
      properties:
        endDate:
          format: date-time
          type:
            - string
            - 'null'
        startDate:
          format: date-time
          type:
            - string
            - 'null'
      title: Grants Added Between
      type: object
      x-speakeasy-name-override: GrantsAddedBetween
    c1.api.app.v1.AppEntitlementRef:
      description: The AppEntitlementRef message.
      properties:
        appId:
          description: The appId field.
          type:
            - string
            - 'null'
        id:
          description: The id field.
          type:
            - string
            - 'null'
      title: App Entitlement Ref
      type: object
      x-speakeasy-name-override: AppEntitlementRef
    c1.api.accessreview.v1.IncludedUserAttributeValues:
      description: The IncludedUserAttributeValues message.
      properties:
        values:
          description: The values field.
          items:
            $ref: >-
              #/components/schemas/c1.api.accessreview.v1.IncludedUserAttributeValue
          type:
            - array
            - 'null'
      title: Included User Attribute Values
      type: object
      x-speakeasy-name-override: IncludedUserAttributeValues
    c1.api.accessreview.v1.IncludedUserAttributeValue:
      description: The IncludedUserAttributeValue message.
      properties:
        value:
          description: The value field.
          type:
            - string
            - 'null'
      title: Included User Attribute Value
      type: object
      x-speakeasy-name-override: IncludedUserAttributeValue
  securitySchemes:
    bearerAuth:
      scheme: bearer
      type: http
    oauth:
      description: >-
        This API uses OAuth2 with the Client Credential flow.

        Client Credentials must be sent in the BODY, not the headers.

        For an example of how to implement this, refer to the
        [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187)
        function.
      flows:
        clientCredentials:
          scopes: {}
          tokenUrl: /auth/v1/token
      type: oauth2

````