> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Update > Update modifies an existing access review campaign. Use the update_mask to specify which fields to change. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/access_review/{id} openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/access_review/{id}: post: tags: - Access Review summary: Update description: >- Update modifies an existing access review campaign. Use the update_mask to specify which fields to change. operationId: c1.api.accessreview.v1.AccessReviewService.Update parameters: - in: path name: id required: true schema: description: The unique identifier of this access review campaign. type: string requestBody: content: application/json: schema: $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewServiceUpdateRequestInput responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewServiceUpdateResponse description: Successful response x-codeSamples: - lang: go label: Update source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/operations\"\n\t\"log\"\n)\n\nfunc main() {\n ctx := context.Background()\n\n s := conductoronesdkgo.New(\n conductoronesdkgo.WithSecurity(shared.Security{\n BearerAuth: \"\",\n Oauth: \"\",\n }),\n )\n\n res, err := s.AccessReview.Update(ctx, operations.C1APIAccessreviewV1AccessReviewServiceUpdateRequest{\n ID: \"\",\n })\n if err != nil {\n log.Fatal(err)\n }\n if res.AccessReviewServiceUpdateResponse != nil {\n // handle response\n }\n}" - lang: typescript label: Typescript (SDK) source: >- import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript"; const conductoroneSDKTypescript = new ConductoroneSDKTypescript({ security: { bearerAuth: "", oauth: "", }, }); async function run() { const result = await conductoroneSDKTypescript.accessReview.update({ id: "", }); console.log(result); } run(); components: schemas: c1.api.accessreview.v1.AccessReviewServiceUpdateRequestInput: description: The AccessReviewServiceUpdateRequest message. properties: accessReview: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReview' - type: 'null' expandMask: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewExpandMask - type: 'null' updateMask: type: - string - 'null' title: Access Review Service Update Request type: object x-speakeasy-name-override: AccessReviewServiceUpdateRequest c1.api.accessreview.v1.AccessReviewServiceUpdateResponse: description: The AccessReviewServiceUpdateResponse message. properties: accessReview: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReviewView' - type: 'null' expanded: description: Related objects requested via the expand mask. items: additionalProperties: true description: >- Contains an arbitrary serialized message along with a @type that describes the type of the serialized message. properties: '@type': description: The type of the serialized message. type: string type: object type: - array - 'null' title: Access Review Service Update Response type: object x-speakeasy-name-override: AccessReviewServiceUpdateResponse c1.api.accessreview.v1.AccessReview: description: > An access review campaign (also called a certification campaign) that verifies whether users still need their access entitlements. This message contains a oneof named setup_metadata. Only a single field of the following list may be set at a time: - singleApp - multiApp - bindings properties: accessReviewTemplateId: description: The ID of the template if the campaign was created from one type: - string - 'null' accuracyIssueAction: description: The accuracyIssueAction field. enum: - ACCURACY_ISSUE_ACTION_UNSPECIFIED - ACCURACY_ISSUE_ACTION_CONTINUE - ACCURACY_ISSUE_ACTION_WAIT type: - string - 'null' x-speakeasy-unknown-values: allow autoCloseCampaign: description: |- Auto-close configuration completion_date is used as the scheduled close date type: - boolean - 'null' autoCloseDecision: description: The autoCloseDecision field. enum: - CLOSE_DECISION_UNSPECIFIED - CLOSE_DECISION_REVOKED - CLOSE_DECISION_SKIP - CLOSE_DECISION_NO_ACTION type: - string - 'null' x-speakeasy-unknown-values: allow autoGenerateReport: description: The autoGenerateReport field. type: - boolean - 'null' autoResolve: description: >- When true, selections are automatically resolved if the entitlement grant no longer exists. type: - boolean - 'null' autoStartCampaign: description: Auto-start configuration type: - boolean - 'null' bindings: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.BindingObjectSetup' - type: 'null' campaignHealth: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.CampaignHealthSnapshot - type: 'null' campaignInsights: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.CampaignInsights' - type: 'null' closedAt: format: date-time type: - string - 'null' columnConfig: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewColumnConfig - type: 'null' completionDate: format: date-time type: - string - 'null' connectorSourcesFrozenAt: format: date-time type: - string - 'null' createdAt: format: date-time readOnly: true type: - string - 'null' createdById: description: The ID of the user who created this campaign. type: - string - 'null' defaultView: description: >- the default view that reviewers will see when they complete their access reviews enum: - ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED - ACCESS_REVIEW_VIEW_TYPE_BY_APP - ACCESS_REVIEW_VIEW_TYPE_BY_USER - ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED - ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE type: - string - 'null' x-speakeasy-unknown-values: allow description: description: An optional description providing context about this campaign. type: - string - 'null' displayName: description: The human-readable name of this campaign. type: - string - 'null' errorState: description: >- Error state set when a prepare action fails with a recoverable condition. Cleared when the campaign scope is changed. enum: - ACCESS_REVIEW_ERROR_STATE_UNSPECIFIED - ACCESS_REVIEW_ERROR_STATE_SELECTION_QUOTA_EXCEED_ERROR readOnly: true type: - string - 'null' x-speakeasy-unknown-values: allow exclusionScope: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewExclusionScope - type: 'null' exemptCertifiedAccessConflicts: description: this setting is used for access conflict type scope type: - boolean - 'null' expectedTicketCount: description: >- The estimated number of review tasks that will be generated when the campaign starts. format: int32 type: - integer - 'null' hasAccuracySupport: description: Whether the connectors in this campaign support accuracy checking. type: - boolean - 'null' id: description: The unique identifier of this access review campaign. type: - string - 'null' inclusionScope: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewInclusionScope - type: 'null' multiApp: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.MultiAppSetup' - type: 'null' notificationConfig: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.NotificationConfig' - type: 'null' policyId: description: >- The ID of the review policy that governs how review tasks are assigned and resolved. type: - string - 'null' reviewInstructions: description: >- Optional instructions displayed to reviewers when completing their review tasks. type: - string - 'null' reviewerAttributeConfig: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ReviewerAttributeConfig - type: 'null' scheduledStartDate: format: date-time type: - string - 'null' scope: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReviewScope' - type: 'null' scopeType: description: this sets the scope type for the access review enum: - ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED - ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS - ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS - ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE - ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE type: - string - 'null' x-speakeasy-unknown-values: allow scopeV2: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReviewScopeV2' - type: 'null' scopingVersion: description: >- Internal version counter incremented when the campaign scope changes. format: int64 type: - string - 'null' signatureConfig: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ReviewSignatureConfig - type: 'null' singleApp: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.SingleAppSetup' - type: 'null' startedAt: format: date-time type: - string - 'null' state: description: >- The current lifecycle state of the campaign (e.g., draft, open, closed). enum: - ACCESS_REVIEW_STATE_UNSPECIFIED - ACCESS_REVIEW_STATE_OPEN - ACCESS_REVIEW_STATE_CLOSED - ACCESS_REVIEW_STATE_PENDING - ACCESS_REVIEW_STATE_REVIEW - ACCESS_REVIEW_STATE_PREPARING - ACCESS_REVIEW_STATE_STARTING - ACCESS_REVIEW_STATE_DRAFT - ACCESS_REVIEW_STATE_DELETING - ACCESS_REVIEW_STATE_DELETED - ACCESS_REVIEW_STATE_RESETTING_POLICIES - ACCESS_REVIEW_STATE_COPYING_SETUP_ENTITLEMENTS - ACCESS_REVIEW_STATE_COPYING_RESOURCE_TYPE_SELECTIONS type: - string - 'null' x-speakeasy-unknown-values: allow updatedAt: format: date-time readOnly: true type: - string - 'null' usePolicyOverride: description: >- Determines the policy applied to the campaign. Default is false, using the campaign policy. If true, the order of precedence is entitlement → app → campaign policy. type: - boolean - 'null' title: Access Review type: object x-speakeasy-entity: Access Review x-speakeasy-name-override: AccessReview c1.api.accessreview.v1.AccessReviewExpandMask: description: The AccessReviewExpandMask message. properties: paths: description: The paths field. items: type: string type: - array - 'null' title: Access Review Expand Mask type: object x-speakeasy-name-override: AccessReviewExpandMask c1.api.accessreview.v1.AccessReviewView: description: The AccessReviewView message. properties: accessReview: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReview' - type: 'null' createdByUserPath: description: The createdByUserPath field. type: - string - 'null' objectPermissions: oneOf: - $ref: '#/components/schemas/c1.api.iam.v1.ActorObjectPermissions' - type: 'null' policyPath: description: The policyPath field. type: - string - 'null' title: Access Review View type: object x-speakeasy-name-override: AccessReviewView c1.api.accessreview.v1.BindingObjectSetup: description: The BindingObjectSetup message. title: Binding Object Setup type: object x-speakeasy-name-override: BindingObjectSetup c1.api.accessreview.v1.CampaignHealthSnapshot: description: >- Campaign health snapshot. Read-only; updated by backend maintenance processors. properties: checkedAt: format: date-time type: - string - 'null' phantomLockedCount: description: Number of pending actions locked by terminal (dead) submissions. format: int32 type: - integer - 'null' title: Campaign Health Snapshot type: object x-speakeasy-name-override: CampaignHealthSnapshot c1.api.accessreview.v1.CampaignInsights: description: >- AI-generated campaign insights (markdown). Read-only; set by backend when campaign is closed. properties: markdown: description: The markdown field. type: - string - 'null' title: Campaign Insights type: object x-speakeasy-name-override: CampaignInsights c1.api.accessreview.v1.AccessReviewColumnConfig: description: Configuration for which columns are visible in the reviewer task list. properties: columns: description: |- Ordered list of columns visible to reviewers. If empty, the default column set for the campaign's default_view is used. items: enum: - ACCESS_REVIEW_TASK_COLUMN_UNSPECIFIED - ACCESS_REVIEW_TASK_COLUMN_VIEW_LINK - ACCESS_REVIEW_TASK_COLUMN_CURRENT_STATE - ACCESS_REVIEW_TASK_COLUMN_ACCOUNT - ACCESS_REVIEW_TASK_COLUMN_ACCOUNT_OWNER - ACCESS_REVIEW_TASK_COLUMN_ENTITLEMENT - ACCESS_REVIEW_TASK_COLUMN_ENTITLEMENT_DESCRIPTION - ACCESS_REVIEW_TASK_COLUMN_RESOURCE - ACCESS_REVIEW_TASK_COLUMN_RESOURCE_TYPE - ACCESS_REVIEW_TASK_COLUMN_INSIGHTS - ACCESS_REVIEW_TASK_COLUMN_RECOMMENDATION - ACCESS_REVIEW_TASK_COLUMN_ASSIGNED_TO - ACCESS_REVIEW_TASK_COLUMN_STATUS - ACCESS_REVIEW_TASK_COLUMN_APP - ACCESS_REVIEW_TASK_COLUMN_DUE - ACCESS_REVIEW_TASK_COLUMN_PROJECT - ACCESS_REVIEW_TASK_COLUMN_CREATED_ON - ACCESS_REVIEW_TASK_COLUMN_TASK_AGE - ACCESS_REVIEW_TASK_COLUMN_RESOLVED_ON - ACCESS_REVIEW_TASK_COLUMN_ENROLLMENT_STATUS - ACCESS_REVIEW_TASK_COLUMN_INHERITED_FROM - ACCESS_REVIEW_TASK_COLUMN_DEPARTMENT - ACCESS_REVIEW_TASK_COLUMN_JOB_TITLE - ACCESS_REVIEW_TASK_COLUMN_CREATED_BY - ACCESS_REVIEW_TASK_COLUMN_LAST_LOGIN - ACCESS_REVIEW_TASK_COLUMN_RESOURCE_PARENT - ACCESS_REVIEW_TASK_COLUMN_RESOURCE_CHILDREN - ACCESS_REVIEW_TASK_COLUMN_APP_USER_USERNAME type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: Access Review Column Config type: object x-speakeasy-name-override: AccessReviewColumnConfig c1.api.accessreview.v1.AccessReviewExclusionScope: description: The AccessReviewExclusionScope message. properties: appUserStatuses: description: The appUserStatuses field. items: enum: - APP_USER_STATUS_UNSPECIFIED - APP_USER_STATUS_ENABLED - APP_USER_STATUS_DISABLED - APP_USER_STATUS_DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' appUserTypes: description: The appUserTypes field. items: enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: Access Review Exclusion Scope type: object x-speakeasy-name-override: AccessReviewExclusionScope c1.api.accessreview.v1.AccessReviewInclusionScope: description: The AccessReviewInclusionScope message. properties: appUserStatuses: description: The appUserStatuses field. items: enum: - APP_USER_STATUS_UNSPECIFIED - APP_USER_STATUS_ENABLED - APP_USER_STATUS_DISABLED - APP_USER_STATUS_DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' appUserTypes: description: The appUserTypes field. items: enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT type: string x-speakeasy-unknown-values: allow type: - array - 'null' managerIds: description: The managerIds field. items: type: string type: - array - 'null' multiUserProfileAttributes: additionalProperties: $ref: >- #/components/schemas/c1.api.accessreview.v1.IncludedUserAttributeValues description: The multiUserProfileAttributes field. type: object noAccountOwners: description: The noAccountOwners field. type: - boolean - 'null' userIds: description: The userIds field. items: type: string type: - array - 'null' userStatuses: description: The userStatuses field. items: enum: - USER_UNKNOWN - USER_ENABLED - USER_DISABLED - USER_DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: Access Review Inclusion Scope type: object x-speakeasy-name-override: AccessReviewInclusionScope c1.api.accessreview.v1.MultiAppSetup: description: The MultiAppSetup message. properties: appEntitlementDetails: additionalProperties: $ref: '#/components/schemas/c1.api.accessreview.v1.EntitlementToDetails' description: The appEntitlementDetails field. type: object appEntitlements: additionalProperties: $ref: '#/components/schemas/c1.api.accessreview.v1.MultiAppEntitlement' description: The appEntitlements field. type: object title: Multi App Setup type: object x-speakeasy-name-override: MultiAppSetup c1.api.accessreview.v1.NotificationConfig: description: >- Controls which email notifications are sent during the access review lifecycle. properties: sendClose: description: Whether to send a notification when the campaign is closed. type: - boolean - 'null' sendKickoff: description: Whether to send a notification when the campaign is started. type: - boolean - 'null' sendReminders: description: >- Whether to send periodic reminder emails to reviewers with outstanding tasks. type: - boolean - 'null' title: Notification Config type: object x-speakeasy-name-override: NotificationConfig c1.api.accessreview.v1.ReviewerAttributeConfig: description: |- Allowlist of AppUser.profile keys visible to reviewers, scoped per app. Empty = reviewers see no profile attributes in the AppUser tooltip. properties: bindings: description: The bindings field. items: $ref: >- #/components/schemas/c1.api.accessreview.v1.ReviewerAttributeBinding type: - array - 'null' title: Reviewer Attribute Config type: object x-speakeasy-name-override: ReviewerAttributeConfig c1.api.accessreview.v1.AccessReviewScope: description: The AccessReviewScope message. properties: appUserStatuses: description: The appUserStatuses field. items: enum: - APP_USER_STATUS_UNSPECIFIED - APP_USER_STATUS_ENABLED - APP_USER_STATUS_DISABLED - APP_USER_STATUS_DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' appUserTypes: description: The appUserTypes field. items: enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: Access Review Scope type: object x-speakeasy-name-override: AccessReviewScope c1.api.accessreview.v1.AccessReviewScopeV2: description: > The AccessReviewScopeV2 message. This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time: - appAccess - specificResources - appSelectionCriteria - resourceTypeSelections This message contains a oneof named users_scope. Only a single field of the following list may be set at a time: - allUsers - selectedUsers - userCriteria - celExpression This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time: - allAccounts - accountCriteria - accountCelExpression This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time: - allGrants - grantsByCriteria This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time: - allAccessConflicts - specificAccessConflicts This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time: - resourceSelection properties: accountCelExpression: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.CelExpressionScope' - type: 'null' accountCriteria: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccountCriteriaScope' - type: 'null' allAccessConflicts: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AllAccessConflictsScope - type: 'null' allAccounts: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AllAccountsScope' - type: 'null' allGrants: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AllGrantsScope' - type: 'null' allUsers: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AllUsersScope' - type: 'null' appAccess: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ApplicationAccessScope - type: 'null' appSelectionCriteria: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AppSelectionCriteriaScope - type: 'null' celExpression: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.CelExpressionScope' - type: 'null' grantsByCriteria: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.GrantsByCriteriaScope - type: 'null' resourceSelection: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ResourceSelectionScope - type: 'null' resourceTypeSelections: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ResourceTypeSelectionScope - type: 'null' selectedUsers: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.SelectedUsersScope' - type: 'null' specificAccessConflicts: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.SpecificAccessConflictsScope - type: 'null' specificResources: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.SpecificResourcesScope - type: 'null' userCriteria: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.UserCriteriaScope' - type: 'null' title: Access Review Scope V 2 type: object x-speakeasy-name-override: AccessReviewScopeV2 c1.api.accessreview.v1.ReviewSignatureConfig: description: Signature configuration for access review submissions properties: meaningOfSignature: description: The meaningOfSignature field. type: - string - 'null' requireSignature: description: The requireSignature field. type: - boolean - 'null' stepUpProviderId: description: The stepUpProviderId field. type: - string - 'null' tspUrl: description: The tspUrl field. type: - string - 'null' title: Review Signature Config type: object x-speakeasy-name-override: ReviewSignatureConfig c1.api.accessreview.v1.SingleAppSetup: description: The SingleAppSetup message. properties: appId: description: The appId field. type: - string - 'null' title: Single App Setup type: object x-speakeasy-name-override: SingleAppSetup c1.api.iam.v1.ActorObjectPermissions: description: The ActorObjectPermissions message. properties: delete: description: The delete field. type: - boolean - 'null' edit: description: The edit field. type: - boolean - 'null' extra: additionalProperties: type: boolean description: The extra field. type: object read: description: The read field. type: - boolean - 'null' title: Actor Object Permissions type: object x-speakeasy-name-override: ActorObjectPermissions c1.api.accessreview.v1.IncludedUserAttributeValues: description: The IncludedUserAttributeValues message. properties: values: description: The values field. items: $ref: >- #/components/schemas/c1.api.accessreview.v1.IncludedUserAttributeValue type: - array - 'null' title: Included User Attribute Values type: object x-speakeasy-name-override: IncludedUserAttributeValues c1.api.accessreview.v1.EntitlementToDetails: description: The EntitlementToDetails message. properties: entitlementDetails: additionalProperties: $ref: >- #/components/schemas/c1.api.accessreview.v1.CampaignEntitlementDetails description: The entitlementDetails field. type: object title: Entitlement To Details type: object x-speakeasy-name-override: EntitlementToDetails c1.api.accessreview.v1.MultiAppEntitlement: description: The MultiAppEntitlement message. properties: appId: description: The appId field. type: - string - 'null' entitlementIds: description: The entitlementIds field. items: type: string type: - array - 'null' title: Multi App Entitlement type: object x-speakeasy-name-override: MultiAppEntitlement c1.api.accessreview.v1.ReviewerAttributeBinding: description: Pair of an app and one of that app's user profile attribute keys. properties: appId: description: The appId field. type: - string - 'null' attributeKey: description: The attributeKey field. type: - string - 'null' title: Reviewer Attribute Binding type: object x-speakeasy-name-override: ReviewerAttributeBinding c1.api.accessreview.v1.CelExpressionScope: description: The CelExpressionScope message. properties: expression: description: The expression field. type: - string - 'null' title: Cel Expression Scope type: object x-speakeasy-name-override: CelExpressionScope c1.api.accessreview.v1.AccountCriteriaScope: description: The AccountCriteriaScope message. properties: accountDomain: description: The accountDomain field. enum: - APP_USER_DOMAIN_UNSPECIFIED - APP_USER_DOMAIN_EXTERNAL - APP_USER_DOMAIN_TRUSTED type: - string - 'null' x-speakeasy-unknown-values: allow accountTypes: description: The accountTypes field. items: enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT type: string x-speakeasy-unknown-values: allow type: - array - 'null' appUserStatuses: description: The appUserStatuses field. items: enum: - APP_USER_STATUS_UNSPECIFIED - APP_USER_STATUS_ENABLED - APP_USER_STATUS_DISABLED - APP_USER_STATUS_DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' noAccountOwner: description: The noAccountOwner field. type: - boolean - 'null' title: Account Criteria Scope type: object x-speakeasy-name-override: AccountCriteriaScope c1.api.accessreview.v1.AllAccessConflictsScope: description: The AllAccessConflictsScope message. title: All Access Conflicts Scope type: object x-speakeasy-name-override: AllAccessConflictsScope c1.api.accessreview.v1.AllAccountsScope: description: The AllAccountsScope message. title: All Accounts Scope type: object x-speakeasy-name-override: AllAccountsScope c1.api.accessreview.v1.AllGrantsScope: description: The AllGrantsScope message. title: All Grants Scope type: object x-speakeasy-name-override: AllGrantsScope c1.api.accessreview.v1.AllUsersScope: description: The AllUsersScope message. title: All Users Scope type: object x-speakeasy-name-override: AllUsersScope c1.api.accessreview.v1.ApplicationAccessScope: description: The ApplicationAccessScope message. title: Application Access Scope type: object x-speakeasy-name-override: ApplicationAccessScope c1.api.accessreview.v1.AppSelectionCriteriaScope: description: The AppSelectionCriteriaScope message. properties: complianceFrameworkAttributeValueIds: description: The complianceFrameworkAttributeValueIds field. items: type: string type: - array - 'null' riskLevelAttributeValueIds: description: The riskLevelAttributeValueIds field. items: type: string type: - array - 'null' title: App Selection Criteria Scope type: object x-speakeasy-name-override: AppSelectionCriteriaScope c1.api.accessreview.v1.GrantsByCriteriaScope: description: > The GrantsByCriteriaScope message. This message contains a oneof named criteria_filter. Only a single field of the following list may be set at a time: - daysSinceAdded - daysSinceReviewed - grantsAddedBetween properties: accessProfileFilter: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.GrantAccessProfileFilter - type: 'null' daysSinceAdded: format: duration type: - string - 'null' daysSinceLastUsed: format: duration type: - string - 'null' daysSinceReviewed: format: duration type: - string - 'null' grantsAddedBetween: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.GrantsAddedBetween' - type: 'null' sourceFilter: description: The sourceFilter field. enum: - GRANT_SOURCE_FILTER_UNSPECIFIED - GRANT_SOURCE_FILTER_DIRECT - GRANT_SOURCE_FILTER_INHERITED type: - string - 'null' x-speakeasy-unknown-values: allow typeFilter: description: The typeFilter field. enum: - GRANT_FILTER_TYPE_UNSPECIFIED - GRANT_FILTER_TYPE_PERMANENT - GRANT_FILTER_TYPE_TEMPORARY type: - string - 'null' x-speakeasy-unknown-values: allow title: Grants By Criteria Scope type: object x-speakeasy-name-override: GrantsByCriteriaScope c1.api.accessreview.v1.ResourceSelectionScope: description: The ResourceSelectionScope message. title: Resource Selection Scope type: object x-speakeasy-name-override: ResourceSelectionScope c1.api.accessreview.v1.ResourceTypeSelectionScope: description: The ResourceTypeSelectionScope message. title: Resource Type Selection Scope type: object x-speakeasy-name-override: ResourceTypeSelectionScope c1.api.accessreview.v1.SelectedUsersScope: description: The SelectedUsersScope message. properties: userIds: description: The userIds field. items: type: string type: - array - 'null' title: Selected Users Scope type: object x-speakeasy-name-override: SelectedUsersScope c1.api.accessreview.v1.SpecificAccessConflictsScope: description: The SpecificAccessConflictsScope message. title: Specific Access Conflicts Scope type: object x-speakeasy-name-override: SpecificAccessConflictsScope c1.api.accessreview.v1.SpecificResourcesScope: description: The SpecificResourcesScope message. title: Specific Resources Scope type: object x-speakeasy-name-override: SpecificResourcesScope c1.api.accessreview.v1.UserCriteriaScope: description: The UserCriteriaScope message. properties: groupAppEntitlementsRef: description: The groupAppEntitlementsRef field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' type: - array - 'null' managerUserIds: description: The managerUserIds field. items: type: string type: - array - 'null' multiUserProfileAttributes: additionalProperties: $ref: >- #/components/schemas/c1.api.accessreview.v1.IncludedUserAttributeValues description: The multiUserProfileAttributes field. type: object userStatus: description: The userStatus field. items: enum: - UNKNOWN - ENABLED - DISABLED - DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: User Criteria Scope type: object x-speakeasy-name-override: UserCriteriaScope c1.api.accessreview.v1.IncludedUserAttributeValue: description: The IncludedUserAttributeValue message. properties: value: description: The value field. type: - string - 'null' title: Included User Attribute Value type: object x-speakeasy-name-override: IncludedUserAttributeValue c1.api.accessreview.v1.CampaignEntitlementDetails: description: The CampaignEntitlementDetails message. properties: appId: description: The appId field. type: - string - 'null' entitlementId: description: The entitlementId field. type: - string - 'null' policyId: description: The policyId field. type: - string - 'null' title: Campaign Entitlement Details type: object x-speakeasy-name-override: CampaignEntitlementDetails c1.api.accessreview.v1.GrantAccessProfileFilter: description: The GrantAccessProfileFilter message. properties: excludedAccessProfileIds: description: |- Access profile IDs to EXCLUDE from the campaign Used when filter_type = EXCLUDE_SPECIFIC Max 32 profile IDs items: type: string type: - array - 'null' filterType: description: The filterType field. enum: - ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED - ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL - ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL - ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC - ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC type: - string - 'null' x-speakeasy-unknown-values: allow includedAccessProfileIds: description: |- Access profile IDs to INCLUDE in the campaign Used when filter_type = INCLUDE_SPECIFIC Max 32 profile IDs items: type: string type: - array - 'null' title: Grant Access Profile Filter type: object x-speakeasy-name-override: GrantAccessProfileFilter c1.api.accessreview.v1.GrantsAddedBetween: description: The GrantsAddedBetween message. properties: endDate: format: date-time type: - string - 'null' startDate: format: date-time type: - string - 'null' title: Grants Added Between type: object x-speakeasy-name-override: GrantsAddedBetween c1.api.app.v1.AppEntitlementRef: description: The AppEntitlementRef message. properties: appId: description: The appId field. type: - string - 'null' id: description: The id field. type: - string - 'null' title: App Entitlement Ref type: object x-speakeasy-name-override: AppEntitlementRef securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````