Skip to main content

Update a Campaign Template​

Allows updating individual fields on a campaign template using the JSON Patch standard.

Path Parameters
  • id string required

    The ID of the campaign template being modified.

    Example: 2c9180835d191a86015d28455b4a2329
Request Body array required

A list of campaign update operations according to the JSON Patch standard.

The following fields are patchable:

  • name
  • description
  • deadlineDuration
  • campaign (all fields that are allowed during create)
  • type
Responses

Indicates the PATCH operation succeeded, and returns the template's new representation.

Schema
  • id string

    Id of the campaign template

  • name string

    This template's name. Has no bearing on generated campaigns' names.

  • description string

    This template's description. Has no bearing on generated campaigns' descriptions.

  • created date-time

    Creation date of Campaign Template

  • modified date-time

    Modification date of Campaign Template

  • scheduled boolean

    Indicates if this campaign template has been scheduled.

  • ownerRef object

    The owner of this template, and the owner of campaigns generated from this template via a schedule. This field is automatically populated at creation time with the current user.

  • id string

    Id of the owner

  • type string

    Possible values: [IDENTITY]

    Type of the owner

  • name string

    Name of the owner

  • email string

    Email of the owner

  • deadlineDuration string

    The time period during which the campaign should be completed, formatted as an ISO-8601 Duration. When this template generates a campaign, the campaign's deadline will be the current date plus this duration. For example, if generation occurred on 2020-01-01 and this field was "P2W" (two weeks), the resulting campaign's deadline would be 2020-01-15 (the current date plus 14 days).

  • campaign object
  • id string

    Id of the campaign

  • name string

    The campaign name. If this object is part of a template, special formatting applies; see the /campaign-templates/{id}/generate endpoint documentation for details.

  • description string

    The campaign description. If this object is part of a template, special formatting applies; see the /campaign-templates/{id}/generate endpoint documentation for details.

  • deadline date-time

    The campaign's completion deadline.

  • type string

    Possible values: [MANAGER, SOURCE_OWNER, SEARCH, ROLE_COMPOSITION]

    The type of campaign. Could be extended in the future.

  • emailNotificationEnabled boolean

    Enables email notification for this campaign

  • autoRevokeAllowed boolean

    Allows auto revoke for this campaign

  • recommendationsEnabled boolean

    Enables IAI for this campaign. Accepts true even if the IAI product feature is off. If IAI is turned off then campaigns generated from this template will indicate false. The real value will then be returned if IAI is ever enabled for the org in the future.

  • status string

    Possible values: [PENDING, STAGED, CANCELING, ACTIVATING, ACTIVE, COMPLETING, COMPLETED, ERROR, ARCHIVED]

    The campaign's current status.

  • correlatedStatus string

    Possible values: [CORRELATED, UNCORRELATED]

    The correlatedStatus of the campaign. Only SOURCE_OWNER campaigns can be Uncorrelated. An Uncorrelated certification campaign only includes Uncorrelated identities (An identity is uncorrelated if it has no accounts on an authoritative source).

  • created date-time

    Created time of the campaign

  • modified date-time

    Modified time of the campaign

  • filter object

    Determines which items will be included in this campaign. The default campaign filter is used if this field is left blank.

  • id string

    The ID of whatever type of filter is being used.

  • type string

    Possible values: [CAMPAIGN_FILTER, RULE]

    Type of the filter

  • name string

    Name of the filter

  • sunsetCommentsRequired boolean

    Default value: true

    Determines if comments on sunset date changes are required.

  • sourceOwnerCampaignInfo object

    Must be set only if the campaign type is SOURCE_OWNER.

  • sourceIds string[]

    The list of sources to be included in the campaign.

  • searchCampaignInfo object

    Must be set only if the campaign type is SEARCH.

  • type string

    Possible values: [IDENTITY, ACCESS]

    The type of search campaign represented.

  • description string

    Describes this search campaign. Intended for storing the query used, and possibly the number of identities selected/available.

  • reviewer object

    If specified, this identity or governance group will be the reviewer for all certifications in this campaign. The allowed DTO types are IDENTITY and GOVERNANCE_GROUP

  • type string

    Possible values: [ACCOUNT_CORRELATION_CONFIG, ACCESS_PROFILE, ACCESS_REQUEST_APPROVAL, ACCOUNT, APPLICATION, CAMPAIGN, CAMPAIGN_FILTER, CERTIFICATION, CLUSTER, CONNECTOR_SCHEMA, ENTITLEMENT, GOVERNANCE_GROUP, IDENTITY, IDENTITY_PROFILE, IDENTITY_REQUEST, LIFECYCLE_STATE, PASSWORD_POLICY, ROLE, RULE, SOD_POLICY, SOURCE, TAG_CATEGORY, TASK_RESULT, REPORT_RESULT, SOD_VIOLATION, ACCOUNT_ACTIVITY]

    DTO type

  • id string

    ID of the object to which this reference applies

  • name string

    Human-readable display name of the object to which this reference applies

  • query string

    The scope for the campaign. The campaign will cover identities returned by the query and identities that have access items returned by the query. One of query or identityIds must be set.

  • identityIds string[]

    Possible values: <= 1000

    A direct list of identities to include in this campaign. One of identityIds or query must be set.

  • accessConstraints object[]

    Possible values: <= 1000

    Further reduces the scope of the campaign by excluding identities (from query or identityIds) that do not have this access.

  • type string

    Possible values: [ENTITLEMENT, ACCESS_PROFILE, ROLE]

    Type of Access

  • ids string[]

    Must be set only if operator is SELECTED.

  • operator string

    Possible values: [ALL, SELECTED]

    Used to determine whether the scope of the campaign should be reduced for selected ids or all.

  • roleCompositionCampaignInfo object

    Optional configuration options for role composition campaigns.

  • reviewer object

    If specified, this identity or governance group will be the reviewer for all certifications in this campaign. The allowed DTO types are IDENTITY and GOVERNANCE_GROUP

  • type string

    Possible values: [ACCOUNT_CORRELATION_CONFIG, ACCESS_PROFILE, ACCESS_REQUEST_APPROVAL, ACCOUNT, APPLICATION, CAMPAIGN, CAMPAIGN_FILTER, CERTIFICATION, CLUSTER, CONNECTOR_SCHEMA, ENTITLEMENT, GOVERNANCE_GROUP, IDENTITY, IDENTITY_PROFILE, IDENTITY_REQUEST, LIFECYCLE_STATE, PASSWORD_POLICY, ROLE, RULE, SOD_POLICY, SOURCE, TAG_CATEGORY, TASK_RESULT, REPORT_RESULT, SOD_VIOLATION, ACCOUNT_ACTIVITY]

    DTO type

  • id string

    ID of the object to which this reference applies

  • name string

    Human-readable display name of the object to which this reference applies

  • roleIds string[]

    Optional list of roles to include in this campaign. Only one of roleIds and query may be set; if neither are set, all roles are included.

  • remediatorRef object

    This determines who remediation tasks will be assigned to. Remediation tasks are created for each revoke decision on items in the campaign. The only legal remediator type is 'IDENTITY', and the chosen identity must be a Role Admin or Org Admin.

  • type string

    Possible values: [IDENTITY]

    Legal Remediator Type

  • id string

    The ID of the remediator.

  • name string

    The name of the remediator.

  • query string

    Optional search query to scope this campaign to a set of roles. Only one of roleIds and query may be set; if neither are set, all roles are included.

  • description string

    Describes this role composition campaign. Intended for storing the query used, and possibly the number of roles selected/available.

  • alerts object[]

    A list of errors and warnings that have accumulated.

  • level string

    Possible values: [ERROR, WARN, INFO]

    Denotes the level of the message

  • localizations object[]
  • locale string

    The locale for the message text, a BCP 47 language tag.

  • localeOrigin string

    Possible values: [DEFAULT, REQUEST]

    An indicator of how the locale was selected. DEFAULT means the locale is the system default. REQUEST means the locale was selected from the request context (i.e., best match based on the Accept-Language header). Additional values may be added in the future without notice.

  • text string

    Actual text of the error message in the indicated locale.

  • totalCertifications integer

    The total number of certifications in this campaign.

  • completedCertifications integer

    The number of completed certifications in this campaign.

  • sourcesWithOrphanEntitlements object[]

    A list of sources in the campaign that contain \"orphan entitlements\" (entitlements without a corresponding Managed Attribute). An empty list indicates the campaign has no orphan entitlements. Null indicates there may be unknown orphan entitlements in the campaign (the campaign was created before this feature was implemented).

  • id string

    Id of the source

  • type string

    Possible values: [SOURCE]

    Type

  • name string

    Name of the source

Loading...