ACaccessowl
access_requests

Reject an access request

Changed on

Rejects a fully-approved access request on the provisioning side with a required reason, recording the acting token user as provisioner. Distinct from deny (approver refusal before approval). Terminal: a request still in approval or already closed returns a validation error.

post/api/v1/access_requests/{access_request_id}/reject

Request

  • Base URL
    https://app.accessowl.io
  • URL
    https://app.accessowl.io/api/v1/access_requests/{access_request_id}/reject
  • Auth
    HTTP bearer

Path parameters

access_request_idstring uuid required

Access request ID

Headers

Idempotency-Keystring

Optional key (1–255 chars) for safely retrying a request. Reusing the same key for the same request returns 409 Conflict and is not processed again — this confirms the request was already received. Keys are retained for 14 days.

Request body

reasonstring required

Reason for rejecting the request

Example request

{
  "reason": "Unable to provision this access"
}

Response

Access request rejected

application_idstring uuid required

Application ID

durationstring nullable

Duration of time-based access as an ISO 8601 duration (e.g. "PT1H", "P7D"); null for permanent access

expires_atstring date-time nullable

When the time-based access expires; null for permanent access or a time-based request that has not been granted yet

grantee_user_idstring uuid

User ID of the grantee

idstring uuid required

Access request ID

inserted_atstring date-time

Creation timestamp

permission_idsstring[] required

Requested permission IDs

provisioning_type'application_admin' | 'automatic' nullable

Provisioning type

request_reasonstring required

Request reason

requestor_user_idstring uuid

User ID of the requestor

resource_idstring uuid required

Resource ID

status'pending_approval' | 'pending_permissions_assignment' | 'access_granted' | 'denied' | 'rejected' | 'processing_access' | 'scheduled' | 'pending_dependency' required

Current status of the access request

termination_reasonstring nullable

Reason the request was ended: the denial reason when denied, the provisioner's rejection reason when rejected; null otherwise. The status field says which kind it was.

Example response

{
  "application_id": "7488a646-e31f-11e4-aace-600308960662",
  "approval_steps": [
    {
      "approvers": [
        {
          "decided_at": "2023-01-15T11:00:00Z",
          "decided_by_user_id": "9488a646-e31f-11e4-aace-600308960667",
          "status": "approved",
          "user_id": "9488a646-e31f-11e4-aace-600308960667"
        }
      ],
      "decided_at": "2023-01-15T11:00:00Z",
      "status": "approved",
      "step": 1,
      "strategy": "all"
    },
    {
      "approvers": [
        {
          "decided_at": null,
          "decided_by_user_id": null,
          "status": "pending",
          "user_id": "9488a646-e31f-11e4-aace-600308960668"
        },
        {
          "decided_at": null,
          "decided_by_user_id": null,
          "status": "pending",
          "user_id": "9488a646-e31f-11e4-aace-600308960669"
        }
      ],
      "decided_at": null,
      "status": "pending",
      "step": 2,
      "strategy": "first_to_respond"
    },
    {
      "approvers": [
        {
          "decided_at": null,
          "decided_by_user_id": null,
          "status": "pending",
          "user_id": "9488a646-e31f-11e4-aace-60030896066a"
        }
      ],
      "decided_at": null,
      "status": "pending",
      "step": 3,
      "strategy": "all"
    }
  ],
  "duration": "PT1H",
  "expires_at": "2023-01-16T10:30:00Z",
  "grantee_user_id": "9488a646-e31f-11e4-aace-600308960666",
  "id": "8488a646-e31f-11e4-aace-600308960665",
  "inserted_at": "2023-01-15T10:30:00Z",
  "permission_ids": [
    "7488a646-e31f-11e4-aace-600308960664"
  ],
  "provisioning_type": "automatic",
  "request_reason": "Need access to complete Q4 reporting",
  "requestor_user_id": "9488a646-e31f-11e4-aace-600308960666",
  "resource_id": "7488a646-e31f-11e4-aace-600308960663",
  "status": "pending_approval",
  "termination_reason": null
}

Changes

  • 5a1f071e40d8Revision changes
    • breaking

      response property errors/additionalProperties/items/ list-of-types was widened by adding types object to media type application/json of response 422

    • breaking

      removed the required property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      added the new forbidden enum value to the response property for the response status

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

    • info

      added the optional property to the response with the status

  • 1dba1160cea4Revision changes
    • info

      endpoint added