Access Certification

Record review decision

Records a Keep, Revoke, or Override decision for one review item.

  • keep — Confirms the identity should retain access.
  • revoke — Removes or suspends access according to the campaign remediation policy.
  • override — (Administrators only) Changes a prior final decision. Requires overrideTargetDecision indicating which decision is being overridden.

The API returns immediately. Remediation for Revoke decisions runs asynchronously — check remediationAction on the response or poll the review item for status updates.

Reviewers can only decide on items assigned to them. Administrators can decide on any item and may use Override.

Required permission: accesscertification (Full Access)

post/api/v2/access-certification/review-items/{reviewItemId}/decisions

Request

Path parameters

reviewItemIdstring required

Review item identifier.

Request body

decision'keep' | 'revoke' | 'override' required

Decision action submitted by reviewer or admin

justificationstring

Required when campaign requires justification or decision is override

overrideTargetDecision'pending' | 'keep' | 'revoke'

Recorded outcome for an identity or stage

Response

Decision recorded successfully

reviewItemIdstring required
finalDecision'pending' | 'keep' | 'revoke' required

Recorded outcome for an identity or stage

remediationAction'no_action' | 'pending' | 'scheduled' | 'completed' | 'failed' | 'canceled' required

Remediation status for one identity after a Revoke decision

remediationEnqueuedboolean

True when a RemediationWorkflow was enqueued (Revoke + immediate timeline)

Changes

No recorded changes to this operation across all 1 revision of this API.