---
title: "List administrator MFA approvals by descending activity"
method: GET
path: "/organizations/{organizationId}/admin-mfa-approval/approvals"
tags: ["Organizations"]
---

# List administrator MFA approvals by descending activity

`GET /organizations/{organizationId}/admin-mfa-approval/approvals`

## Request

- Base URL: `https://api.xfa.tech`
- URL: `https://api.xfa.tech/organizations/{organizationId}/admin-mfa-approval/approvals`
- Auth: HTTP bearer

## Path parameters

- `organizationId` string, required

## Query parameters

- `status` 'PENDING' | 'APPROVED' | 'REJECTED'
- `limit` integer
- `cursor` string

## Response `200`

Approval activity page

- AdminMfaApprovalPage
  - `approvals` AdminMfaApprovalSummary[], required
    - `requester_email` string, email: Verified sign-in email of the applicant. Omitted when not yet recorded; never inferred from the device owner.
    - `approval_id` string, required
    - `canonical_user_id` string, required
    - `device_id` string, required
    - `status` 'PENDING' | 'APPROVED' | 'REJECTED', required
    - `revision` integer, required
    - `application` AdminMfaApprovalApplication, required
      - `application_id` string, required
      - `application_name` string
    - `requested_at` string, date-time
    - `updated_at` string, date-time, required: Last change, including a sign-in that refreshes the request context.
    - `decided_at` string, date-time: When an admin (or turning approval off) last decided; absent while never decided.
    - `rejection_reason` string: The reason of the latest rejection, only for REJECTED approvals. It is the text the user sees on sign-in; who decided stays out of the list.
    - `resolution_source` 'MANAGED_DEVICE' | 'ADMIN' | 'POLICY_OFF': What resolved the approval: automatic approval of a managed device, an administrator, or turning approval off. Absent while never decided.
  - `cursor` string, required

## Other responses

- `400`: Invalid filter, limit, or cursor
- `404`: Organization not found or capability unavailable

---

[API](https://skmtc.dev/xfa/apis/xfa-api.md) · [All operations](https://skmtc.dev/xfa/apis/xfa-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xfa/apis/xfa-api/revisions/1a1be0e8972b?raw)