Skip to main content
An Access Review is a campaign that reviews who has access to what across your connected apps. Each app in it is an app review. Inside an app review, reviewers decide on subjects: the accounts on the app, or the entitlements those accounts hold. v1 can sync an app review and read its subjects. It can’t create, list, or update Access Reviews yet, so do that in the Lumos web app.
Lumos enables the Access Reviews endpoints per organization, separately from the rest of v1. To enable them for your organization, contact your Lumos representative.

​
App reviews

Reviewers decide on a snapshot of the app, not on live data. Lumos takes the snapshot when the app is added to the Access Review, and takes it again when you call Sync App Review. The same call can replace the app review’s scope filters, as its reference page describes. You can sync an app review until the Access Review launches. After that, the call returns 409 with code app_review.launched. A sync that’s already running returns 409 with code app_review.sync_in_progress. The call returns 202 with an operation. Poll it until it’s done, as Long-running operations describes. A call you aren’t allowed to make returns 403.

​
Endpoints