--- title: "Get" method: GET path: "/api/v1/apps/{id}" tags: ["App"] --- # Get `GET /api/v1/apps/{id}` Get an app by ID. ## Path parameters - `id` string, required — The id field. ## Response `200` The GetAppResponse message contains the details of the requested app in the app field. - C1ApiAppV1GetAppResponse — The GetAppResponse message contains the details of the requested app in the app field. - `app` C1ApiAppV1App — The App object provides all of the details for an app, as well as some configuration. - `accessModel` 'APP_ACCESS_MODEL_UNSPECIFIED' | 'APP_ACCESS_MODEL_CLASSIC' | 'APP_ACCESS_MODEL_HYBRID' | 'APP_ACCESS_MODEL_SPARSE' — How this app models access. Derived during uplift from the app's resource type traits. Sparse ACL feature. - `appAccountId` string — The ID of the Account named by AccountName. - `appAccountName` string — The AccountName of the app. For example, AWS is AccountID, Github is Org Name, and Okta is Okta Subdomain. - `appOwners` C1ApiUserV1User[], nullable — The owners of the app. - `createdAt` string, date-time - `delegatedUserId` string — The id of the user to whom tasks will be automatically reassigned to. - `deletedAt` string, date-time - `department` string — The department which the user belongs to in the organization. - `departmentSources` C1ApiUserV1UserAttributeMappingSource[], nullable — A list of objects mapped based on department attribute mappings configured in the system. - `appId` string — The appId field. - `appUserId` string — The appUserId field. - `appUserProfileAttributeKey` string — The appUserProfileAttributeKey field. - `userAttributeMappingId` string — The userAttributeMappingId field. - `value` string — The value field. - `directoryIds` string[], nullable — A list of unique ids that represent different directories. - `directoryStatus` 'UNKNOWN' | 'ENABLED' | 'DISABLED' | 'DELETED' — The status of the user in the directory. - `directoryStatusSources` C1ApiUserV1UserAttributeMappingSource[], nullable — A list of objects mapped based on directoryStatus attribute mappings configured in the system. - `appId` string — The appId field. - `appUserId` string — The appUserId field. - `appUserProfileAttributeKey` string — The appUserProfileAttributeKey field. - `userAttributeMappingId` string — The userAttributeMappingId field. - `value` string — The value field. - `displayName` string — The display name of the user. - `email` string — This is the user's email. - `emailSources` C1ApiUserV1UserAttributeMappingSource[], nullable — A list of source data for the email attribute. - `appId` string — The appId field. - `appUserId` string — The appUserId field. - `appUserProfileAttributeKey` string — The appUserProfileAttributeKey field. - `userAttributeMappingId` string — The userAttributeMappingId field. - `value` string — The value field. - `emails` string[], nullable — This is a list of all of the user's emails from app users. - `employeeIdSources` C1ApiUserV1UserAttributeMappingSource[], nullable — A list of source data for the employee IDs attribute. - `appId` string — The appId field. - `appUserId` string — The appUserId field. - `appUserProfileAttributeKey` string — The appUserProfileAttributeKey field. - `userAttributeMappingId` string — The userAttributeMappingId field. - `value` string — The value field. - `employeeIds` string[], nullable — This is a list of all of the user's employee IDs from app users. - `employmentStatus` string — The users employment status. - `employmentStatusSources` C1ApiUserV1UserAttributeMappingSource[], nullable — A list of objects mapped based on employmentStatus attribute mappings configured in the system. - `appId` string — The appId field. - `appUserId` string — The appUserId field. - `appUserProfileAttributeKey` string — The appUserProfileAttributeKey field. - `userAttributeMappingId` string — The userAttributeMappingId field. - `value` string — The value field. - `employmentType` string — The employment type of the user. - `employmentTypeSources` C1ApiUserV1UserAttributeMappingSource[], nullable — A list of objects mapped based on employmentType attribute mappings configured in the system. - `appId` string — The appId field. - `appUserId` string — The appUserId field. - `appUserProfileAttributeKey` string — The appUserProfileAttributeKey field. - `userAttributeMappingId` string — The userAttributeMappingId field. - `value` string — The value field. - `id` string — A unique identifier of the user. - `jobTitle` string — The job title of the user. - `jobTitleSources` C1ApiUserV1UserAttributeMappingSource[], nullable — A list of objects mapped based on jobTitle attribute mappings configured in the system. - `appId` string — The appId field. - `appUserId` string — The appUserId field. - `appUserProfileAttributeKey` string — The appUserProfileAttributeKey field. - `userAttributeMappingId` string — The userAttributeMappingId field. - `value` string — The value field. - `managerIds` string[], nullable — A list of ids of the user's managers. - `managerSources` C1ApiUserV1UserAttributeMappingSource[], nullable — A list of objects mapped based on managerId attribute mappings configured in the system. - `appId` string — The appId field. - `appUserId` string — The appUserId field. - `appUserProfileAttributeKey` string — The appUserProfileAttributeKey field. - `userAttributeMappingId` string — The userAttributeMappingId field. - `value` string — The value field. - `origin` 'USER_ORIGIN_UNSPECIFIED' | 'USER_ORIGIN_DIRECTORY' | 'USER_ORIGIN_LOCAL' | 'USER_ORIGIN_SYSTEM' — The origin of the user, describing who owns the user's lifecycle. - `profile` object - `roleIds` string[], nullable — A list of unique identifiers that maps to ConductorOne's user roles let you assign users permissions tailored to the work they do in the software. - `status` 'UNKNOWN' | 'ENABLED' | 'DISABLED' | 'DELETED' — The status of the user in the system. - `type` 'USER_TYPE_UNSPECIFIED' | 'USER_TYPE_SYSTEM' | 'USER_TYPE_HUMAN' | 'USER_TYPE_SERVICE' | 'USER_TYPE_AGENT' — The type of the user. - `updatedAt` string, date-time - `username` string — This is the user's primary username. Typically sourced from the primary directory. - `usernameSources` C1ApiUserV1UserAttributeMappingSource[], nullable — A list of source data for the usernames attribute. - `appId` string — The appId field. - `appUserId` string — The appUserId field. - `appUserProfileAttributeKey` string — The appUserProfileAttributeKey field. - `userAttributeMappingId` string — The userAttributeMappingId field. - `value` string — The value field. - `usernames` string[], nullable — This is a list of all of the user's usernames from app users. - `appUserMapper` C1ApiAppV1AppUserMapper — AppUserMapper configures custom account mapping for uplift. - `mappingCases` C1ApiAppV1AppUserMapperMatchCase[], nullable — Ordered list of match cases. Each case defines a pair of CEL key extractors. - `appUserKeyCel` string — CEL expression evaluated against an AppUser to produce match key(s). - `userKeyCel` string — CEL expression evaluated against a User to produce match key(s). - `certifyPolicyId` string — The ID of the Certify Policy associated with this App. - `connectorVersion` integer — The connectorVersion field. - `createdAt` string, date-time - `defaultRequestCatalogId` string — The ID for the default request catalog for this app. - `deletedAt` string, date-time - `description` string — The app's description. - `displayName` string — The app's display name. - `enableConnectorSourcedOwnership` boolean — When enabled, resource ownership is sourced from the connector. - `fieldMask` string, nullable - `grantPolicyId` string — The ID of the Grant Policy associated with this App. - `iconUrl` string — The URL of an icon to display for the app. - `id` string — The ID of the app. - `identityMatching` 'APP_USER_IDENTITY_MATCHING_UNSPECIFIED' | 'APP_USER_IDENTITY_MATCHING_STRICT' | 'APP_USER_IDENTITY_MATCHING_DISPLAY_NAME' | 'APP_USER_IDENTITY_MATCHING_CUSTOM' — The identityMatching field. - `instructions` string — If you add instructions here, they will be shown to users in the access request form when requesting access for this app. - `isDirectory` boolean — Specifies if the app is a directory. - `isManuallyManaged` boolean — The isManuallyManaged field. - `logoUri` string — The URL of a logo to display for the app. - `monthlyCostUsd` integer — The cost of an app per-seat, so that total cost can be calculated by the grant count. - `parentAppId` string — The ID of the app that created this app, if any. - `revokePolicyId` string — The ID of the Revoke Policy associated with this App. - `strictAccessEntitlementProvisioning` boolean — The strictAccessEntitlementProvisioning field. - `updatedAt` string, date-time - `userCount` string, int64 — The number of users with grants to this app. ## Changes - **2026-04-30** `fa2bb307d6fa` — 1 info - added the optional property `app/accessModel` to the response with the `200` status - **2026-03-10** `7fa698b04b81` — 1 warning, 2 info - added the new `APP_USER_IDENTITY_MATCHING_CUSTOM` enum value to the `app/identityMatching` response property for the response status `200` - added the optional property `app/appOwners/items/origin` to the response with the `200` status - added the optional property `app/appUserMapper` to the response with the `200` status - **2026-02-05** `417c5bf9b0a2` — 1 info - added the optional property `app/enableConnectorSourcedOwnership` to the response with the `200` status - **2025-06-09** `e4cbd4b6a944` — 1 info - added the optional property `app/instructions` to the response with the `200` status - **2025-05-30** `d5c56e8615fe` — 1 info - added the optional property `app/defaultRequestCatalogId` to the response with the `200` status [Full history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/apps/:id/get.md) --- [API](https://skmtc.dev/conductorone/apis/c1-api.md) · [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/fa2bb307d6fa/schema)