Skip to main content
POST
Create Access Review

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json
name
string
required

Name of the access review campaign.

Required string length: 1 - 255
deadline_at
string<date-time>
required

Deadline by which reviewers must complete their reviews. ISO 8601 datetime (e.g. '2026-05-01T00:00:00Z').

owner_id
string | null

UUID of the user to set as the review owner. Defaults to the authenticated user if not provided.

target_launch_date
string<date-time> | null

Scheduled launch date for the review. ISO 8601 datetime.

recurrence_config
RecurrenceConfigInput · object | null

Recurrence configuration. Mutually exclusive with recurrence_days_frequency.

recurrence_days_frequency
integer | null

Recurrence frequency in days. Mutually exclusive with recurrence_config.

apps
AccessReviewDomainAppInput · object[]

List of domain apps to include in this review. Capped at 200 entries per the Access Review scale limits (technically-supported tier).

Maximum array length: 200

Response

Successful Response

access_review
AccessReviewOutput · object
required

The newly created access review.

errors
AccessReviewDomainAppErrorOutput · object[] | null

Per-app errors for any domain apps that could not be added. The review is still created with the valid apps.