Skip to main content

RequestedItemAccountSelections

Properties

NameTypeDescriptionNotes
DescriptionStringThe description for this requested item[optional]
AccountsSelectionBlockedBooleanThis field indicates if account selections are not allowed for this requested item. * If true, this field indicates that account selections will not be available for this item and identity combination. In this case, no account selections should be provided in the access request for this item and identity combination, irrespective of whether the identity has single or multiple accounts on a source. * An example is where a user is requesting an access profile that is already assigned to one of their accounts. * For machine identities, this can be true with reason NO_ACCOUNT_ON_SOURCE when the machine has no account on a requested source. Empty sources[].accounts on the accounts-selection response is valid in that blocked case; submitting empty accounts on create is not valid.[optional] [default to $false]
AccountsSelectionBlockedReasonStringIf account selections are not allowed for an item, this field will denote the reason. * ACCESS_PROFILE_ALREADY_ASSIGNED_TO_AN_ACCOUNT - access profile already assigned on an account. * NO_ACCOUNT_ON_SOURCE - no account found on at least one requested source (only for machine identities).[optional]
TypeEnum [ "ACCESS_PROFILE", "ROLE", "ENTITLEMENT" ]The type of the item being requested.[optional]
IdStringThe id of the requested item[optional]
NameStringThe name of the requested item[optional]
Sources[]SourceAccountSelectionsThe details for the sources and accounts for the requested item and identity combination[optional]

Examples

  • Prepare the resource
$RequestedItemAccountSelections = Initialize-RequestedItemAccountSelections -Description An access profile for the admins `
-AccountsSelectionBlocked false `
-AccountsSelectionBlockedReason ACCESS_PROFILE_ALREADY_ASSIGNED_TO_AN_ACCOUNT `
-Type ACCESS_PROFILE `
-Id 720fd239701344aea76c93ba91376aec `
-Name Test Access Profile `
-Sources null
  • Convert the resource to JSON
$RequestedItemAccountSelections | ConvertTo-JSON

[Back to top]