Access Conflict

Retrieve a single conflict monitor by ID.

get/api/v1/accessconflict/{id}

Request

  • Base URL
    https://example.conductor.one
  • URL
    https://example.conductor.one/api/v1/accessconflict/{id}
  • Auth
    HTTP bearer and OAuth 2
    Client credentials
    Token URL: /auth/v1/token

Path parameters

idstring required

The unique identifier of the conflict monitor to retrieve.

Response

A conflict monitor defines a Separation of Duty rule between two entitlement sets. It detects when any user holds entitlements from both set A and set B simultaneously.

createdAtstring date-time nullable
deletedAtstring date-time nullable
descriptionstring

A description explaining the purpose of this Separation of Duty rule.

displayNamestring

The human-readable name of the conflict monitor.

enabledboolean

Whether the conflict monitor is actively scanning for violations.

entitlementSetAIdstring

The identifier of entitlement set A in the conflict rule.

entitlementSetBIdstring

The identifier of entitlement set B in the conflict rule.

idstring

The unique identifier of this conflict monitor.

negateGroupBboolean

When true, the rule flags users who are in set A but NOT in set B ("is not in"), instead of the default A-and-B intersection.

updatedAtstring date-time nullable

Changes

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      added subschema #2 to the response property oneOf list for the response status

    • breaking

      the response's property type changed from object to no type for status

    • warning

      removed the optional property / from the response with the status

    • warning

      removed the optional property / from the response with the status

    • info

      added the optional property to the response with the status

    • info

      endpoint added