---
title: "Get Incident"
method: GET
path: "/incident/v1/incidents/{incidentId}"
tags: ["Incidents"]
---

# Get Incident

`GET /incident/v1/incidents/{incidentId}`

## Request

- Base URL: `https://hostname/api`
- URL: `https://hostname/api/incident/v1/incidents/{incidentId}`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `INCIDENT`, `INCIDENT_READ`

Use this API to retrieve a single incident by its unique identifier along with the linked assessments, status, and the associated attributes.

## Path parameters

- `incidentId` string, uuid, required: Incident ID

## Response `200`

OK

- IncidentDetails
  - `id` string, uuid: Incident Identifier
  - `number` integer: Incident Number
  - `incidentTypeId` string, uuid: The unique identifier for the incident type.
  - `incidentTypeName` string: The name of the incident type.
  - `name` string: Incident Name
  - `description` string: Incident Description
  - `sourceType` 'MANUAL' | 'ASSESSMENT' | 'WEBFORM' | 'NONE' | 'INTEGRATION': Creation Source
  - `assessmentLinks` AssessmentInformation[]: Source Assessment Link
    - `assessmentId` string, uuid, required: Assessment Identifier
    - `assessmentName` string: Assessment Name
    - `assessmentStatus` 'NOT_STARTED' | 'IN_PROGRESS' | 'UNDER_REVIEW' | 'COMPLETED': Assessment Status
    - `primary` boolean
  - `orgGroupId` string, uuid: Organization Group Id
  - `orgGroupName` string: Organization Group Name
  - `rootCause` string: Root Cause
  - `dateOccurred` string, date-time: The date and time when the incident occurred, represented as an ISO 8601 timestamp in UTC.
  - `dateClosed` string, date-time: The date and time when the incident was closed, represented as an ISO 8601 timestamp in UTC.
  - `dateDiscovered` string, date-time: The date and time when the incident was discovered, represented as an ISO 8601 timestamp in UTC.
  - `deadline` string, date-time: The date by which the incident investigation or notification must be completed, represented as an ISO 8601 timestamp in UTC.
  - `createdBy` string, uuid: Incident Created User Id.
  - `creator` string: Incident Created User Name
  - `assigneeId` string, uuid: Incident User Assignee Id
  - `assigneeName` string: Incident User Assignee Name
  - `createdDT` string, date-time: The date and time when the incident was created, represented as an ISO 8601 timestamp in UTC.
  - `workflowId` string, uuid: Incident Workflow Id
  - `workflowName` string: Incident Workflow Name.
  - `incidentStageId` string, uuid: Incident Stage Id
  - `incidentStageName` string: Incident Stage Name
  - `incidentStageBadgeColor` string: The badge color of the incident workflow stage.
  - `notificationNeeded` 'YES' | 'NO' | 'UNKNOWN': Incident Notification Needed
  - `incidentStatus` 'OPEN' | 'CLOSED'
  - `schemaId` string, uuid: The unique identifier of the custom attribute schema associated with the incident.
  - `updatedDT` string, date-time: The date and time when the incident was last updated, represented as an ISO 8601 timestamp in UTC.
  - `attributeValues` object: Custom Attributes
  - `incidentAssigneeInformation` IncidentAssigneeInformation[]: A list containing information about users or groups assigned to the incident
    - `assigneeId` string, uuid: Incident User Assignee Id
    - `assigneeName` string: Incident User Assignee Name
    - `type` 'USER' | 'GROUP': Indicates whether the assignee is an individual user or a group of users.
  - `attachments` IncidentAttachmentResponse[]: List of attachments associated with this incident, including both files and URL links
    - `Incident Attachment Identifier` string, uuid, required: Unique identifier for the incident attachment
    - `Attachment Created Date` string, date-time: Date and time when the attachment was created
    - `Incident Attachment Name` string, required: Display name of the attachment file or URL
    - `Incident Attachment Description` string: Optional description providing additional context about the attachment
    - `Attachment Creator User Name` BasicEntityDetail
      - `id` string, uuid
      - `name` string
    - `Incident Attachment Type` 'FILE' | 'URL', required: Type of attachment - either a file upload or URL link
    - `Incident Attachment Link` string, required: URL link to access the attachment. For FILE type, this is the download link. For URL type, this is the external link.
    - `Incident Sub Task Identifier` string, uuid: Optional identifier of the incident subtask this attachment is associated with. Null if attached directly to the incident.
    - `Attachment resource path` string: Internal system path where the attachment file is stored. Only applicable for FILE type attachments.
  - `closedSettingOn` boolean

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/privacy-automation-incident-management.md) - [All operations](https://skmtc.dev/onetrust/apis/privacy-automation-incident-management/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/privacy-automation-incident-management/revisions/73e6e54c0682?raw)