ACaccessowl
access_revocations

Mark an access revocation as rejected

Changed on

Marks a (pending) access revocation as rejected with a required reason, recording the caller as the provisioner. Terminal: an already-revoked or already-rejected revocation returns a validation error.

post/api/v1/access_revocations/{access_revocation_id}/reject

Request

  • Base URL
    https://app.accessowl.io
  • URL
    https://app.accessowl.io/api/v1/access_revocations/{access_revocation_id}/reject
  • Auth
    HTTP bearer

Path parameters

access_revocation_idstring uuid required

Access revocation ID

Headers

Idempotency-Keystring

Optional key (1–255 chars) for safely retrying a request. Reusing the same key for the same request returns 409 Conflict and is not processed again — this confirms the request was already received. Keys are retained for 14 days.

Request body

reasonstring required

Reason for rejecting the revocation

Example request

{
  "reason": "Access is legitimate and stays"
}

Response

Access revocation rejected

application_idstring uuid required

Application ID

grantee_user_idstring uuid

User ID of the grantee

idstring uuid required

Access revocation ID

inserted_atstring date-time

Creation timestamp

permission_idsstring[] nullable

Permission IDs being revoked

provisioning_type'application_admin' | 'automatic' nullable

Provisioning type

reasonstring required

Revocation reason

requestor_user_idstring uuid

User ID of the requestor

resource_idstring uuid nullable

Resource ID (null for app-wide revocations)

status'processing_access' | 'rejected' | 'revoked' required

Current status of the revocation

termination_reasonstring nullable

The provisioner's rejection reason when the revocation was rejected; null otherwise

Changes

  • 5a1f071e40d8Revision changes
    • breaking

      response property errors/additionalProperties/items/ list-of-types was widened by adding types object to media type application/json of response 422

    • breaking

      removed the required property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      added the new forbidden enum value to the response property for the response status

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

    • info

      added the optional property to the response with the status

  • 1dba1160cea4Revision changes
    • info

      endpoint added