Edit

accessReviewInstance: batchApplyCustomDataProvidedResourceDecisions

Namespace: microsoft.graph

Enables reviewers to set the applyResult and applyDescription on all accessReviewInstanceDecisionItem objects in a specific accessReviewInstance in batches by using customDataProvidedResourceId.

NOTE: The access review instance must be in an Applying state.

This action is part of the unified access reviews surface and is available only through the /identityGovernance/accessReviews/unified route. For more information, see unifiedRoot.

Permissions

Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.

Permission type Least privileged permission Higher privileged permissions
Delegated (work or school account) AccessReview.ReadWrite.All Not available.
Delegated (personal Microsoft account) Not supported. Not supported.
Application AccessReview.ReadWrite.All Not available.

Important

For delegated access using work or school accounts, the signed-in user must be assigned a supported Microsoft Entra role or a custom role that grants the permissions required for this operation. This operation supports the following built-in roles, which provide only the least privilege necessary:

  • To write access reviews of a group or app: User Administrator, Identity Governance Administrator
  • To write access reviews of a Microsoft Entra role: Identity Governance Administrator, Privileged Role Administrator

HTTP request

POST /identityGovernance/accessReviews/unified/instances/{accessReviewInstanceId}/batchApplyCustomDataProvidedResourceDecisions

Request headers

Name Description
Authorization Bearer {token}. Required. Learn more about authentication and authorization.
Content-Type application/json. Required.

Request body

In the request body, supply a JSON representation of the parameters.

The following table lists the parameters when you call this action.

Parameter Type Description
applyResult accessReviewInstanceDecisionItemApplyResult The applyResult for the entity being reviewed. The possible values are: new, appliedSuccessfully, appliedWithUnknownFailure, appliedSuccessfullyButObjectNotFound, applyNotSupported, unknownFutureValue. Required.
applyDescription String If supplied, a description for the applyResult. Optional.
customDataProvidedResourceId String The applyResult is set on all accessReviewInstanceDecisionItem objects whose custom data provided resource id matches the supplied customDataProvidedResourceId. Required.

Response

If successful, this action returns a 202 Accepted response code.

Examples

Request

The following example shows a request.

POST https://graph.microsoft.com/v1.0/identityGovernance/accessReviews/unified/instances/{accessReviewInstanceId}/batchApplyCustomDataProvidedResourceDecisions
Content-Type: application/json

{
  "applyResult": "appliedSuccessfully",
  "applyDescription": "Access was removed from production application: GitHub-app.",
  "customDataProvidedResourceId": "5c728447-be5c-4565-b4d3-cb248b609891"
}

Response

The following example shows the response.

HTTP/1.1 202 Accepted
  • Last updated on