Skip to main content

access_reviews_definitions_instances_decisions

Creates, updates, deletes, gets or lists an access_reviews_definitions_instances_decisions resource.

Overview​

Nameaccess_reviews_definitions_instances_decisions
TypeResource
Identra_id.identity_governance.access_reviews_definitions_instances_decisions

Fields​

The following fields are returned by SELECT queries:

Retrieved navigation property

NameDatatypeDescription
idstringThe unique identifier for an entity. Read-only.
accessReviewIdstringThe identifier of the accessReviewInstance parent. Supports $select. Read-only.
appliedByThe identifier of the user who applied the decision. Read-only.
appliedDateTimestring (date-time)The timestamp when the approval decision was applied.00000000-0000-0000-0000-000000000000 if the assigned reviewer hasn't applied the decision or it was automatically applied. The DatetimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Supports $select. Read-only. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$)
applyResultstringThe result of applying the decision. Possible values: New, AppliedSuccessfully, AppliedWithUnknownFailure, AppliedSuccessfullyButObjectNotFound and ApplyNotSupported. Supports $select, $orderby, and $filter (eq only). Read-only.
decisionstringResult of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).
insightsarrayInsights are recommendations to reviewers on whether to approve or deny a decision. There can be multiple insights associated with an accessReviewInstanceDecisionItem.
justificationstringJustification left by the reviewer when they made the decision.
principalEvery decision item in an access review represents a principal's access to a resource. This property represents details of the principal. For example, if a decision item represents access of User 'Bob' to Group 'Sales' - The principal is 'Bob' and the resource is 'Sales'. Principals can be of two types - userIdentity and servicePrincipalIdentity. Supports $select. Read-only.
principalLinkstringA link to the principal object. For example, https://graph.microsoft.com/v1.0/users/a6c7aecb-cbfd-4763-87ef-e91b4bd509d9. Read-only.
recommendationstringA system-generated recommendation for the approval decision based off last interactive sign-in to tenant. The value is Approve if the sign-in is fewer than 30 days after the start of review, Deny if the sign-in is greater than 30 days after, or NoInfoAvailable. Possible values: Approve, Deny, or NoInfoAvailable. Supports $select, $orderby, and $filter (eq only). Read-only.
resourceEvery decision item in an access review represents a principal's access to a resource. This property represents details of the resource. For example, if a decision item represents access of User 'Bob' to Group 'Sales' - The principal is Bob and the resource is 'Sales'. Resources can be of multiple types. See accessReviewInstanceDecisionItemResource. Read-only.
resourceLinkstringA link to the resource. For example, https://graph.microsoft.com/v1.0/servicePrincipals/c86300f3-8695-4320-9f6e-32a2555f5ff8. Supports $select. Read-only.
reviewedByThe identifier of the reviewer.00000000-0000-0000-0000-000000000000 if the assigned reviewer hasn't reviewed. Supports $select. Read-only.
reviewedDateTimestring (date-time)The timestamp when the review decision occurred. Supports $select. Read-only. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$)

Methods​

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectaccess_review_schedule_definition_id, access_review_instance_id, access_review_instance_decision_item_idRead the properties and relationships of an accessReviewInstanceDecisionItem object.
listselectaccess_review_schedule_definition_id, access_review_instance_idRetrieve the accessReviewInstanceDecisionItem objects for a specific accessReviewInstance. A list of zero or more accessReviewInstanceDecisionItem objects are returned, including all of their nested properties.
insertinsertaccess_review_schedule_definition_id, access_review_instance_id
updateupdateaccess_review_schedule_definition_id, access_review_instance_id, access_review_instance_decision_item_id
deletedeleteaccess_review_schedule_definition_id, access_review_instance_id, access_review_instance_decision_item_idIf-Match

Parameters​

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
access_review_instance_decision_item_idstringThe unique identifier of accessReviewInstanceDecisionItem
access_review_instance_idstringThe unique identifier of accessReviewInstance
access_review_schedule_definition_idstringThe unique identifier of accessReviewScheduleDefinition
If-MatchstringETag

SELECT examples​

Read the properties and relationships of an accessReviewInstanceDecisionItem object.

SELECT
id,
accessReviewId,
appliedBy,
appliedDateTime,
applyResult,
decision,
insights,
justification,
principal,
principalLink,
recommendation,
resource,
resourceLink,
reviewedBy,
reviewedDateTime
FROM entra_id.identity_governance.access_reviews_definitions_instances_decisions
WHERE access_review_schedule_definition_id = '{{ access_review_schedule_definition_id }}' -- required
AND access_review_instance_id = '{{ access_review_instance_id }}' -- required
AND access_review_instance_decision_item_id = '{{ access_review_instance_decision_item_id }}' -- required
;

INSERT examples​

No description available.

INSERT INTO entra_id.identity_governance.access_reviews_definitions_instances_decisions (
id,
accessReviewId,
appliedBy,
appliedDateTime,
applyResult,
decision,
justification,
principal,
principalLink,
recommendation,
resource,
resourceLink,
reviewedBy,
reviewedDateTime,
insights,
access_review_schedule_definition_id,
access_review_instance_id
)
SELECT 
'{{ id }}',
'{{ accessReviewId }}',
'{{ appliedBy }}',
'{{ appliedDateTime }}',
'{{ applyResult }}',
'{{ decision }}',
'{{ justification }}',
'{{ principal }}',
'{{ principalLink }}',
'{{ recommendation }}',
'{{ resource }}',
'{{ resourceLink }}',
'{{ reviewedBy }}',
'{{ reviewedDateTime }}',
'{{ insights }}',
'{{ access_review_schedule_definition_id }}',
'{{ access_review_instance_id }}'
RETURNING
id,
accessReviewId,
appliedBy,
appliedDateTime,
applyResult,
decision,
insights,
justification,
principal,
principalLink,
recommendation,
resource,
resourceLink,
reviewedBy,
reviewedDateTime
;

UPDATE examples​

No description available.

UPDATE entra_id.identity_governance.access_reviews_definitions_instances_decisions
SET 
id = '{{ id }}',
accessReviewId = '{{ accessReviewId }}',
appliedBy = '{{ appliedBy }}',
appliedDateTime = '{{ appliedDateTime }}',
applyResult = '{{ applyResult }}',
decision = '{{ decision }}',
justification = '{{ justification }}',
principal = '{{ principal }}',
principalLink = '{{ principalLink }}',
recommendation = '{{ recommendation }}',
resource = '{{ resource }}',
resourceLink = '{{ resourceLink }}',
reviewedBy = '{{ reviewedBy }}',
reviewedDateTime = '{{ reviewedDateTime }}',
insights = '{{ insights }}'
WHERE 
access_review_schedule_definition_id = '{{ access_review_schedule_definition_id }}' --required
AND access_review_instance_id = '{{ access_review_instance_id }}' --required
AND access_review_instance_decision_item_id = '{{ access_review_instance_decision_item_id }}' --required
RETURNING
id,
accessReviewId,
appliedBy,
appliedDateTime,
applyResult,
decision,
insights,
justification,
principal,
principalLink,
recommendation,
resource,
resourceLink,
reviewedBy,
reviewedDateTime;

DELETE examples​

No description available.

DELETE FROM entra_id.identity_governance.access_reviews_definitions_instances_decisions
WHERE access_review_schedule_definition_id = '{{ access_review_schedule_definition_id }}' --required
AND access_review_instance_id = '{{ access_review_instance_id }}' --required
AND access_review_instance_decision_item_id = '{{ access_review_instance_decision_item_id }}' --required
AND If-Match = '{{ If-Match }}'
;