> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-leet-slack-mcp-docs.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Create > Create creates a new access review template that defines a reusable configuration for launching campaigns. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/access_review_template openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/access_review_template: post: tags: - Access Review Template summary: Create description: >- Create creates a new access review template that defines a reusable configuration for launching campaigns. operationId: c1.api.accessreview.v1.AccessReviewTemplateService.Create requestBody: content: application/json: schema: $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewTemplateServiceCreateRequest responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewTemplateServiceCreateResponse description: Successful response x-codeSamples: - lang: go label: Create source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"log\"\n)\n\nfunc main() {\n ctx := context.Background()\n\n s := conductoronesdkgo.New(\n conductoronesdkgo.WithSecurity(shared.Security{\n BearerAuth: \"\",\n Oauth: \"\",\n }),\n )\n\n res, err := s.AccessReviewTemplate.Create(ctx, nil)\n if err != nil {\n log.Fatal(err)\n }\n if res.AccessReviewTemplateServiceCreateResponse != nil {\n // handle response\n }\n}" - lang: typescript label: Typescript (SDK) source: >- import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript"; const conductoroneSDKTypescript = new ConductoroneSDKTypescript({ security: { bearerAuth: "", oauth: "", }, }); async function run() { const result = await conductoroneSDKTypescript.accessReviewTemplate.create(); console.log(result); } run(); components: schemas: c1.api.accessreview.v1.AccessReviewTemplateServiceCreateRequest: description: The AccessReviewTemplateServiceCreateRequest message. properties: accessReviewDuration: format: duration type: - string - 'null' accuracyIssueAction: description: The accuracyIssueAction field. enum: - ACCURACY_ISSUE_ACTION_UNSPECIFIED - ACCURACY_ISSUE_ACTION_CONTINUE - ACCURACY_ISSUE_ACTION_WAIT type: string x-speakeasy-unknown-values: allow annotations: additionalProperties: type: string description: |- Bounded key/value metadata bag for IaC marking and customer tags. See .rfcs/object-annotations.md §2. Limits: ≤16 entries; keys 1–128 chars matching ^[A-Za-z][A-Za-z0-9._/-]{0,127}$; values 0–256 chars matching URL-safe ASCII; total serialized ≤4096 bytes. Keys starting with `c1/` are reserved for server-managed use and rejected on write. Well-known keys: `managed_by`, `iac_workspace`, `iac_resource_address`, `iac_tool_version`. type: object x-speakeasy-terraform-plan-modifier: imports: - >- github.com/conductorone/terraform-provider-conductorone/internal/annotations schemaDefinition: annotations.PlanModifier() autoCloseCampaign: description: The autoCloseCampaign field. type: boolean autoCloseDecision: description: The autoCloseDecision field. enum: - CLOSE_DECISION_UNSPECIFIED - CLOSE_DECISION_REVOKED - CLOSE_DECISION_SKIP - CLOSE_DECISION_NO_ACTION type: string x-speakeasy-unknown-values: allow autoGenerateReport: description: auto generate report when campaign is closed type: boolean autoStartCampaign: description: The autoStartCampaign field. type: boolean columnConfig: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewColumnConfig - type: 'null' defaultView: description: The defaultView field. enum: - ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED - ACCESS_REVIEW_VIEW_TYPE_BY_APP - ACCESS_REVIEW_VIEW_TYPE_BY_USER - ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED - ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE type: string x-speakeasy-unknown-values: allow description: description: An optional description providing context about the template. type: string displayName: description: The display name for the new template. type: string exemptCertifiedAccessConflicts: description: The exemptCertifiedAccessConflicts field. type: boolean isCampaignScheduleEnabled: description: The isCampaignScheduleEnabled field. type: boolean notificationConfig: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.NotificationConfig' - type: 'null' ownerIds: description: >- The IDs of the users who own this template. At least one owner is required. items: type: string type: - array - 'null' policyId: description: >- The ID of the default review policy for campaigns created from this template. type: string recurrenceRule: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.RecurrenceRule' - type: 'null' reviewInstructions: description: The reviewInstructions field. type: string reviewerAttributeConfig: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ReviewerAttributeConfig - type: 'null' scope: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReviewScopeV2' - type: 'null' scopeType: description: The scopeType field. enum: - ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED - ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS - ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS - ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE - ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE - ACCESS_REVIEW_SCOPE_TYPE_BY_USERS type: string x-speakeasy-unknown-values: allow signatureConfig: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ReviewSignatureConfig - type: 'null' usePolicyOverride: description: The usePolicyOverride field. type: boolean title: Access Review Template Service Create Request type: object x-speakeasy-name-override: AccessReviewTemplateServiceCreateRequest c1.api.accessreview.v1.AccessReviewTemplateServiceCreateResponse: description: The AccessReviewTemplateServiceCreateResponse message. properties: accessReviewTemplate: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReviewTemplate' - type: 'null' title: Access Review Template Service Create Response type: object x-speakeasy-name-override: AccessReviewTemplateServiceCreateResponse c1.api.accessreview.v1.AccessReviewColumnConfig: description: Configuration for which columns are visible in the reviewer task list. properties: columns: description: |- Ordered list of columns visible to reviewers. If empty, the default column set for the campaign's default_view is used. items: enum: - ACCESS_REVIEW_TASK_COLUMN_UNSPECIFIED - ACCESS_REVIEW_TASK_COLUMN_VIEW_LINK - ACCESS_REVIEW_TASK_COLUMN_CURRENT_STATE - ACCESS_REVIEW_TASK_COLUMN_ACCOUNT - ACCESS_REVIEW_TASK_COLUMN_ACCOUNT_OWNER - ACCESS_REVIEW_TASK_COLUMN_ENTITLEMENT - ACCESS_REVIEW_TASK_COLUMN_ENTITLEMENT_DESCRIPTION - ACCESS_REVIEW_TASK_COLUMN_RESOURCE - ACCESS_REVIEW_TASK_COLUMN_RESOURCE_TYPE - ACCESS_REVIEW_TASK_COLUMN_INSIGHTS - ACCESS_REVIEW_TASK_COLUMN_RECOMMENDATION - ACCESS_REVIEW_TASK_COLUMN_ASSIGNED_TO - ACCESS_REVIEW_TASK_COLUMN_STATUS - ACCESS_REVIEW_TASK_COLUMN_APP - ACCESS_REVIEW_TASK_COLUMN_DUE - ACCESS_REVIEW_TASK_COLUMN_PROJECT - ACCESS_REVIEW_TASK_COLUMN_CREATED_ON - ACCESS_REVIEW_TASK_COLUMN_TASK_AGE - ACCESS_REVIEW_TASK_COLUMN_RESOLVED_ON - ACCESS_REVIEW_TASK_COLUMN_ENROLLMENT_STATUS - ACCESS_REVIEW_TASK_COLUMN_INHERITED_FROM - ACCESS_REVIEW_TASK_COLUMN_DEPARTMENT - ACCESS_REVIEW_TASK_COLUMN_JOB_TITLE - ACCESS_REVIEW_TASK_COLUMN_CREATED_BY - ACCESS_REVIEW_TASK_COLUMN_LAST_LOGIN - ACCESS_REVIEW_TASK_COLUMN_RESOURCE_PARENT - ACCESS_REVIEW_TASK_COLUMN_RESOURCE_CHILDREN - ACCESS_REVIEW_TASK_COLUMN_APP_USER_USERNAME - ACCESS_REVIEW_TASK_COLUMN_ACCESS_HOLDER_TYPE - ACCESS_REVIEW_TASK_COLUMN_RISK_LEVEL - ACCESS_REVIEW_TASK_COLUMN_COMPLIANCE_FRAMEWORK type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: Access Review Column Config type: object x-speakeasy-name-override: AccessReviewColumnConfig c1.api.accessreview.v1.NotificationConfig: description: >- Controls which email notifications are sent during the access review lifecycle. properties: sendClose: description: Whether to send a notification when the campaign is closed. type: boolean sendKickoff: description: Whether to send a notification when the campaign is started. type: boolean sendReminders: description: >- Whether to send periodic reminder emails to reviewers with outstanding tasks. type: boolean title: Notification Config type: object x-speakeasy-name-override: NotificationConfig c1.api.accessreview.v1.RecurrenceRule: description: > The RecurrenceRule message. This message contains a oneof named end_condition. Only a single field of the following list may be set at a time: - endDate - occurrences properties: endDate: format: date-time type: - string - 'null' frequency: description: The frequency field. enum: - FREQUENCY_UNSPECIFIED - FREQUENCY_NONE - FREQUENCY_DAILY - FREQUENCY_WEEKLY - FREQUENCY_MONTHLY - FREQUENCY_YEARLY type: string x-speakeasy-unknown-values: allow interval: description: The interval field. format: int32 type: integer occurrences: description: >- The occurrences field. This field is part of the `end_condition` oneof. See the documentation for `c1.api.accessreview.v1.RecurrenceRule` for more details. format: int32 type: - integer - 'null' startDate: format: date-time type: - string - 'null' title: Recurrence Rule type: object x-speakeasy-name-override: RecurrenceRule c1.api.accessreview.v1.ReviewerAttributeConfig: description: |- Allowlist of AppUser.profile keys visible to reviewers, scoped per app. Empty = reviewers see no profile attributes in the AppUser tooltip. properties: bindings: description: The bindings field. items: $ref: >- #/components/schemas/c1.api.accessreview.v1.ReviewerAttributeBinding type: - array - 'null' title: Reviewer Attribute Config type: object x-speakeasy-name-override: ReviewerAttributeConfig c1.api.accessreview.v1.AccessReviewScopeV2: description: > The AccessReviewScopeV2 message. This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time: - appAccess - specificResources - appSelectionCriteria - resourceTypeSelections This message contains a oneof named users_scope. Only a single field of the following list may be set at a time: - allUsers - selectedUsers - userCriteria - celExpression This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time: - allAccounts - accountCriteria - accountCelExpression This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time: - allGrants - grantsByCriteria This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time: - allAccessConflicts - specificAccessConflicts This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time: - resourceSelection This message contains a oneof named excluded_apps_and_resources_scope. Only a single field of the following list may be set at a time: - excludedSpecificResources - excludedResourceTypeSelections properties: accountCelExpression: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.CelExpressionScope' - type: 'null' accountCriteria: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccountCriteriaScope' - type: 'null' allAccessConflicts: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AllAccessConflictsScope - type: 'null' allAccounts: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AllAccountsScope' - type: 'null' allGrants: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AllGrantsScope' - type: 'null' allUsers: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AllUsersScope' - type: 'null' appAccess: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ApplicationAccessScope - type: 'null' appSelectionCriteria: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AppSelectionCriteriaScope - type: 'null' celExpression: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.CelExpressionScope' - type: 'null' excludedResourceTypeSelections: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ResourceTypeSelectionScope - type: 'null' excludedSpecificResources: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.SpecificResourcesScope - type: 'null' grantsByCriteria: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.GrantsByCriteriaScope - type: 'null' principalTypeFilter: description: >- Filters principals included in the scope. Unspecified is treated as users. enum: - PRINCIPAL_TYPE_FILTER_UNSPECIFIED - PRINCIPAL_TYPE_FILTER_USERS - PRINCIPAL_TYPE_FILTER_RESOURCES - PRINCIPAL_TYPE_FILTER_USERS_AND_RESOURCES type: string x-speakeasy-unknown-values: allow resourceSelection: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ResourceSelectionScope - type: 'null' resourceTypeSelections: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ResourceTypeSelectionScope - type: 'null' scopeRoleSelection: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ScopeRoleSelectionScope - type: 'null' selectedUsers: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.SelectedUsersScope' - type: 'null' specificAccessConflicts: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.SpecificAccessConflictsScope - type: 'null' specificResources: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.SpecificResourcesScope - type: 'null' userCriteria: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.UserCriteriaScope' - type: 'null' title: Access Review Scope V 2 type: object x-speakeasy-name-override: AccessReviewScopeV2 c1.api.accessreview.v1.ReviewSignatureConfig: description: Signature configuration for access review submissions properties: meaningOfSignature: description: The meaningOfSignature field. type: string requireSignature: description: The requireSignature field. type: boolean stepUpProviderId: description: The stepUpProviderId field. type: string tspUrl: description: The tspUrl field. type: string title: Review Signature Config type: object x-speakeasy-name-override: ReviewSignatureConfig c1.api.accessreview.v1.AccessReviewTemplate: description: > A reusable template that defines the configuration for creating access review campaigns. Templates can optionally be scheduled to automatically create campaigns on a recurring basis. This message contains a oneof named slack_channel_details. Only a single field of the following list may be set at a time: - slackChannel properties: accessReviewDuration: format: duration type: - string - 'null' accuracyIssueAction: description: The accuracyIssueAction field. enum: - ACCURACY_ISSUE_ACTION_UNSPECIFIED - ACCURACY_ISSUE_ACTION_CONTINUE - ACCURACY_ISSUE_ACTION_WAIT type: string x-speakeasy-unknown-values: allow annotations: additionalProperties: type: string description: |- Key/value metadata. Up to 16 entries; keys 1-128 chars; values 0-256 chars; URL-safe ASCII. Keys starting with `c1/` are reserved. Updates have PATCH semantics: keys absent from the request are preserved; an empty value deletes the key. Well-known keys: `managed_by`, `iac_workspace`, `iac_resource_address`, `iac_tool_version`. type: object x-speakeasy-terraform-plan-modifier: imports: - >- github.com/conductorone/terraform-provider-conductorone/internal/annotations schemaDefinition: annotations.PlanModifier() autoCloseCampaign: description: |- Auto-close configuration start date and access_review_duration will be used to calculate the scheduled close date type: boolean autoCloseDecision: description: The autoCloseDecision field. enum: - CLOSE_DECISION_UNSPECIFIED - CLOSE_DECISION_REVOKED - CLOSE_DECISION_SKIP - CLOSE_DECISION_NO_ACTION type: string x-speakeasy-unknown-values: allow autoGenerateReport: description: auto generate report when campaign is closed type: boolean autoStartCampaign: description: |- Auto-start configuration next_scheduled_campaign_at will be used as the scheduled start date type: boolean columnConfig: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewColumnConfig - type: 'null' createdAt: format: date-time readOnly: true type: - string - 'null' defaultView: description: The defaultView field. enum: - ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED - ACCESS_REVIEW_VIEW_TYPE_BY_APP - ACCESS_REVIEW_VIEW_TYPE_BY_USER - ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED - ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE type: string x-speakeasy-unknown-values: allow deletedAt: format: date-time readOnly: true type: - string - 'null' description: description: An optional description providing context about this template. type: string displayName: description: The human-readable name of this template. type: string exemptCertifiedAccessConflicts: description: The exemptCertifiedAccessConflicts field. type: boolean id: description: The unique identifier of this template. type: string inclusionScope: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.AccessReviewInclusionScope - type: 'null' isCampaignScheduleEnabled: description: >- Whether automatic campaign creation on the recurrence schedule is enabled. type: boolean nextScheduledCampaignAt: format: date-time type: - string - 'null' notificationConfig: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.NotificationConfig' - type: 'null' occurrences: description: The number of campaigns that have been created from this template. format: int32 type: integer policyId: description: >- The ID of the default review policy applied to campaigns created from this template. type: string recurrenceRule: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.RecurrenceRule' - type: 'null' reviewInstructions: description: The reviewInstructions field. type: string reviewerAttributeConfig: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ReviewerAttributeConfig - type: 'null' scope: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.AccessReviewScopeV2' - type: 'null' scopeType: description: The scopeType field. enum: - ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED - ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS - ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS - ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE - ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE - ACCESS_REVIEW_SCOPE_TYPE_BY_USERS type: string x-speakeasy-unknown-values: allow signatureConfig: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.ReviewSignatureConfig - type: 'null' slackChannel: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.SlackChannel' - type: 'null' updatedAt: format: date-time readOnly: true type: - string - 'null' usePolicyOverride: description: The usePolicyOverride field. type: boolean title: Access Review Template type: object x-speakeasy-entity: Access Review Template x-speakeasy-name-override: AccessReviewTemplate c1.api.accessreview.v1.ReviewerAttributeBinding: description: Pair of an app and one of that app's user profile attribute keys. properties: appId: description: The appId field. type: string attributeKey: description: The attributeKey field. type: string title: Reviewer Attribute Binding type: object x-speakeasy-name-override: ReviewerAttributeBinding c1.api.accessreview.v1.CelExpressionScope: description: The CelExpressionScope message. properties: expression: description: The expression field. type: string title: Cel Expression Scope type: object x-speakeasy-name-override: CelExpressionScope c1.api.accessreview.v1.AccountCriteriaScope: description: The AccountCriteriaScope message. properties: accountDomain: description: The accountDomain field. enum: - APP_USER_DOMAIN_UNSPECIFIED - APP_USER_DOMAIN_EXTERNAL - APP_USER_DOMAIN_TRUSTED type: string x-speakeasy-unknown-values: allow accountTypes: description: The accountTypes field. items: enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT type: string x-speakeasy-unknown-values: allow type: - array - 'null' appUserStatuses: description: The appUserStatuses field. items: enum: - APP_USER_STATUS_UNSPECIFIED - APP_USER_STATUS_ENABLED - APP_USER_STATUS_DISABLED - APP_USER_STATUS_DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' noAccountOwner: description: The noAccountOwner field. type: boolean title: Account Criteria Scope type: object x-speakeasy-name-override: AccountCriteriaScope c1.api.accessreview.v1.AllAccessConflictsScope: description: The AllAccessConflictsScope message. title: All Access Conflicts Scope type: object x-speakeasy-name-override: AllAccessConflictsScope c1.api.accessreview.v1.AllAccountsScope: description: The AllAccountsScope message. title: All Accounts Scope type: object x-speakeasy-name-override: AllAccountsScope c1.api.accessreview.v1.AllGrantsScope: description: The AllGrantsScope message. title: All Grants Scope type: object x-speakeasy-name-override: AllGrantsScope c1.api.accessreview.v1.AllUsersScope: description: The AllUsersScope message. title: All Users Scope type: object x-speakeasy-name-override: AllUsersScope c1.api.accessreview.v1.ApplicationAccessScope: description: The ApplicationAccessScope message. title: Application Access Scope type: object x-speakeasy-name-override: ApplicationAccessScope c1.api.accessreview.v1.AppSelectionCriteriaScope: description: The AppSelectionCriteriaScope message. properties: complianceFrameworkAttributeValueIds: description: The complianceFrameworkAttributeValueIds field. items: type: string type: - array - 'null' riskLevelAttributeValueIds: description: The riskLevelAttributeValueIds field. items: type: string type: - array - 'null' title: App Selection Criteria Scope type: object x-speakeasy-name-override: AppSelectionCriteriaScope c1.api.accessreview.v1.ResourceTypeSelectionScope: description: The ResourceTypeSelectionScope message. title: Resource Type Selection Scope type: object x-speakeasy-name-override: ResourceTypeSelectionScope c1.api.accessreview.v1.SpecificResourcesScope: description: The SpecificResourcesScope message. title: Specific Resources Scope type: object x-speakeasy-name-override: SpecificResourcesScope c1.api.accessreview.v1.GrantsByCriteriaScope: description: > The GrantsByCriteriaScope message. This message contains a oneof named criteria_filter. Only a single field of the following list may be set at a time: - daysSinceAdded - daysSinceReviewed - grantsAddedBetween properties: accessProfileFilter: oneOf: - $ref: >- #/components/schemas/c1.api.accessreview.v1.GrantAccessProfileFilter - type: 'null' daysSinceAdded: format: duration type: - string - 'null' daysSinceLastUsed: format: duration type: - string - 'null' daysSinceReviewed: format: duration type: - string - 'null' grantsAddedBetween: oneOf: - $ref: '#/components/schemas/c1.api.accessreview.v1.GrantsAddedBetween' - type: 'null' sourceFilter: description: The sourceFilter field. enum: - GRANT_SOURCE_FILTER_UNSPECIFIED - GRANT_SOURCE_FILTER_DIRECT - GRANT_SOURCE_FILTER_INHERITED type: string x-speakeasy-unknown-values: allow typeFilter: description: The typeFilter field. enum: - GRANT_FILTER_TYPE_UNSPECIFIED - GRANT_FILTER_TYPE_PERMANENT - GRANT_FILTER_TYPE_TEMPORARY type: string x-speakeasy-unknown-values: allow title: Grants By Criteria Scope type: object x-speakeasy-name-override: GrantsByCriteriaScope c1.api.accessreview.v1.ResourceSelectionScope: description: The ResourceSelectionScope message. title: Resource Selection Scope type: object x-speakeasy-name-override: ResourceSelectionScope c1.api.accessreview.v1.ScopeRoleSelectionScope: description: |- Empty marker for scope+role pair scoping on IaaS-type apps. Actual selections stored in AccessReviewScopeRoleSelection rows. May coexist with ResourceSelectionScope on the same campaign; prepare unions both. title: Scope Role Selection Scope type: object x-speakeasy-name-override: ScopeRoleSelectionScope c1.api.accessreview.v1.SelectedUsersScope: description: The SelectedUsersScope message. properties: userIds: description: The userIds field. items: type: string type: - array - 'null' title: Selected Users Scope type: object x-speakeasy-name-override: SelectedUsersScope c1.api.accessreview.v1.SpecificAccessConflictsScope: description: The SpecificAccessConflictsScope message. title: Specific Access Conflicts Scope type: object x-speakeasy-name-override: SpecificAccessConflictsScope c1.api.accessreview.v1.UserCriteriaScope: description: The UserCriteriaScope message. properties: groupAppEntitlementsRef: description: The groupAppEntitlementsRef field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' type: - array - 'null' managerUserIds: description: The managerUserIds field. items: type: string type: - array - 'null' multiUserProfileAttributes: additionalProperties: $ref: >- #/components/schemas/c1.api.accessreview.v1.IncludedUserAttributeValues description: The multiUserProfileAttributes field. type: object userStatus: description: The userStatus field. items: enum: - UNKNOWN - ENABLED - DISABLED - DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: User Criteria Scope type: object x-speakeasy-name-override: UserCriteriaScope c1.api.accessreview.v1.AccessReviewInclusionScope: description: The AccessReviewInclusionScope message. properties: appUserStatuses: description: The appUserStatuses field. items: enum: - APP_USER_STATUS_UNSPECIFIED - APP_USER_STATUS_ENABLED - APP_USER_STATUS_DISABLED - APP_USER_STATUS_DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' appUserTypes: description: The appUserTypes field. items: enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT type: string x-speakeasy-unknown-values: allow type: - array - 'null' managerIds: description: The managerIds field. items: type: string type: - array - 'null' multiUserProfileAttributes: additionalProperties: $ref: >- #/components/schemas/c1.api.accessreview.v1.IncludedUserAttributeValues description: The multiUserProfileAttributes field. type: object noAccountOwners: description: The noAccountOwners field. type: boolean userIds: description: The userIds field. items: type: string type: - array - 'null' userStatuses: description: The userStatuses field. items: enum: - USER_UNKNOWN - USER_ENABLED - USER_DISABLED - USER_DELETED type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: Access Review Inclusion Scope type: object x-speakeasy-name-override: AccessReviewInclusionScope c1.api.accessreview.v1.SlackChannel: description: The SlackChannel message. properties: channelId: description: >- Existing Slack channel ID (e.g. "C0123ABCD"). Set with is_channel_id=true to target an existing channel instead of creating one by name. type: string description: description: The description field. type: string isChannelId: description: >- When true, channel_id identifies an existing channel to use as-is: the backend resolves it by ID (conversations.info) and fails if it is missing or the bot cannot access it. It never creates or searches by name. type: boolean name: description: >- Channel name to create/resolve. Required unless is_channel_id is true. type: string title: Slack Channel type: object x-speakeasy-name-override: SlackChannel c1.api.accessreview.v1.GrantAccessProfileFilter: description: The GrantAccessProfileFilter message. properties: excludedAccessProfileIds: description: |- Access profile IDs to EXCLUDE from the campaign Used when filter_type = EXCLUDE_SPECIFIC Max 32 profile IDs items: type: string type: - array - 'null' filterType: description: The filterType field. enum: - ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED - ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL - ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL - ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC - ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC type: string x-speakeasy-unknown-values: allow includedAccessProfileIds: description: |- Access profile IDs to INCLUDE in the campaign Used when filter_type = INCLUDE_SPECIFIC Max 32 profile IDs items: type: string type: - array - 'null' title: Grant Access Profile Filter type: object x-speakeasy-name-override: GrantAccessProfileFilter c1.api.accessreview.v1.GrantsAddedBetween: description: The GrantsAddedBetween message. properties: endDate: format: date-time type: - string - 'null' startDate: format: date-time type: - string - 'null' title: Grants Added Between type: object x-speakeasy-name-override: GrantsAddedBetween c1.api.app.v1.AppEntitlementRef: description: The AppEntitlementRef message. properties: appId: description: The appId field. type: string id: description: The id field. type: string title: App Entitlement Ref type: object x-speakeasy-name-override: AppEntitlementRef c1.api.accessreview.v1.IncludedUserAttributeValues: description: The IncludedUserAttributeValues message. properties: values: description: The values field. items: $ref: >- #/components/schemas/c1.api.accessreview.v1.IncludedUserAttributeValue type: - array - 'null' title: Included User Attribute Values type: object x-speakeasy-name-override: IncludedUserAttributeValues c1.api.accessreview.v1.IncludedUserAttributeValue: description: The IncludedUserAttributeValue message. properties: value: description: The value field. type: string title: Included User Attribute Value type: object x-speakeasy-name-override: IncludedUserAttributeValue securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````