COconductorone
Access Conflict

Create Monitor

Changed on

Create a new conflict monitor for defining a Separation of Duty rule. Entitlement sets are bound separately via AppEntitlementMonitorBindingService.

post/api/v1/accessconflict

Request

  • Base URL
    https://example.conductor.one
  • URL
    https://example.conductor.one/api/v1/accessconflict
  • Auth
    HTTP bearer and OAuth 2
    Client credentials
    Token URL: /auth/v1/token

Request body

descriptionstring

An optional description explaining the purpose of this Separation of Duty rule.

displayNamestring required

The human-readable name for the conflict monitor.

Response

A conflict monitor defines a Separation of Duty rule between two entitlement sets. It detects when any user holds entitlements from both set A and set B simultaneously.

createdAtstring date-time nullable
deletedAtstring date-time nullable
descriptionstring

A description explaining the purpose of this Separation of Duty rule.

displayNamestring

The human-readable name of the conflict monitor.

enabledboolean

Whether the conflict monitor is actively scanning for violations.

entitlementSetAIdstring

The identifier of entitlement set A in the conflict rule.

entitlementSetBIdstring

The identifier of entitlement set B in the conflict rule.

idstring

The unique identifier of this conflict monitor.

negateGroupBboolean

When true, the rule flags users who are in set A but NOT in set B ("is not in"), instead of the default A-and-B intersection.

updatedAtstring date-time nullable

Changes

  • f2cf3228f366Revision changes
    • breaking

      the request property type changed from object to no type

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      added subschema #2 to the response property oneOf list for the response status

    • breaking

      the response's property type changed from object to no type for status

    • warning

      removed the request property /

    • warning

      removed the request property /

    • warning

      removed the optional property / from the response with the status

    • warning

      removed the optional property / from the response with the status

    • info

      added subschema #2 to the request property oneOf list

    • info

      added the optional property to the response with the status

  • e4cbd4b6a944Revision changes
    • info

      endpoint added