How to efficiently query the status of an Access Request in async processing?

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello!

I’m currently working on an async processing where I need to monitor the status of an Access Request to check if it is still in the “EXECUTING” status. The challenge arises because, upon creating an Access Request using the API endpoint POST /v3/access-requests, the response doesn’t include the ID of the newly created request even when the response has 202 HTTP status code.

I’ve encountered the GET /v3/access-request-status API, which seems to be the right endpoint for checking the status. However, it requires a filter parameter “accountActivityItemId.” So I found GET v3/account-activities, but the query parameters are not enough to efficiently filter the activities list…

How can I efficiently query the status of the Access Request without knowing its ID in advance?

Any insights or alternative approaches to handle this scenario would be greatly appreciated.

Thank you!

2

Hi @matheusfbosa,

I don’t think there is a way to track the Access request status with API’s.

There is already an Idea submitted in the portal

https://ideas.sailpoint.com/ideas/GOV-I-2228

One way of distinguishing an access request would be to pass a unique ID in the client metadata body while submitting the request, but that cannot be used in the GET access request status API call filter.

{
    "requestedFor": [
        "ABC"
       
    ],
    "requestedItems": [
        {
            "id": "XYZ",
            "type": "ROLE",
            "comment": "Requesting access to role Accounts Payable Analyst",
            "clientMetadata": {
                "requestId": "IDN001"
            },
            "removeDate":  null
        }
    ],
    "requestType": "GRANT_ACCESS",
    "clientMetadata": {
       "requestId": "IDN001"
    }
}
1 Like
3

Hi Jesvin,

Thank you for your response and for sharing the Access Request Status API Enhancements. This will help us in some use cases.