Skip to main content

AccessRequestItem

Properties

NameTypeDescriptionNotes
TypeEnum [ "ACCESS_PROFILE", "ROLE", "ENTITLEMENT" ]The type of the item being requested.[required]
IdStringID of Role, Access Profile or Entitlement being requested.[required]
CommentStringComment provided by requester. * Comment is required when the request is of type Revoke Access.[optional]
ClientMetadatamap[string]StringArbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities and /access-request-status.[optional]
RemoveDateSystem.DateTimeThe date the role or access profile or entitlement is no longer assigned to the specified identity. Also known as the expiration date. * Specify a date in the future. * The current SLA for the deprovisioning is 24 hours. * This date can be modified to either extend or decrease the duration of access item assignments for the specified identity. You can change the expiration date for requests for yourself or direct reports, but you cannot remove an expiration date on an already approved item. If the access request has not been approved, you can cancel it and submit a new one without the expiration. If it has already been approved, then you have to revoke the access and then re-request without the expiration.[optional]

Examples

  • Prepare the resource
$AccessRequestItem = Initialize-PSSailpoint.V2024AccessRequestItem  -Type ACCESS_PROFILE `
-Id 2c9180835d2e5168015d32f890ca1581 `
-Comment Requesting access profile for John Doe `
-ClientMetadata {requestedAppName=test-app, requestedAppId=2c91808f7892918f0178b78da4a305a1} `
-RemoveDate 2020-07-11T21:23:15Z
  • Convert the resource to JSON
$AccessRequestItem | ConvertTo-JSON

[Back to top]