Add Delete Excluded Entitlements

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "toAdd": [
    {
      "appEntitlementId": "<string>",
      "appId": "<string>"
    }
  ],
  "toDelete": [
    {
      "appEntitlementId": "<string>",
      "appId": "<string>"
    }
  ]
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete"

payload = {
    "toAdd": [
        {
            "appEntitlementId": "<string>",
            "appId": "<string>"
        }
    ],
    "toDelete": [
        {
            "appEntitlementId": "<string>",
            "appId": "<string>"
        }
    ]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    toAdd: [{appEntitlementId: '<string>', appId: '<string>'}],
    toDelete: [{appEntitlementId: '<string>', appId: '<string>'}]
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'toAdd' => [
        [
                'appEntitlementId' => '<string>',
                'appId' => '<string>'
        ]
    ],
    'toDelete' => [
        [
                'appEntitlementId' => '<string>',
                'appId' => '<string>'
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete"

	payload := strings.NewReader("{\n  \"toAdd\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ],\n  \"toDelete\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"toAdd\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ],\n  \"toDelete\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"toAdd\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ],\n  \"toDelete\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{}

Access Review

Add Delete Excluded Entitlements

AddDeleteExcludedEntitlements adds and/or removes individual excluded entitlements for a user-first campaign without replacing the whole excluded set, so concurrent edits are not overwritten. Entitlements that are already excluded are skipped, and entitlements that are not excluded are ignored on removal. Exclusions only take effect for user-first campaigns (scope type ACCESS_REVIEW_SCOPE_TYPE_BY_USERS). This does not change the campaign’s scope_v2, and exclusions only take effect while scope_v2 sets excluded_specific_resources; use SetCampaignScopeAndExcludedEntitlements to set the scope.

POST

api

access_review

{access_review_id}

excluded_entitlements

add_delete

Add Delete Excluded Entitlements

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "toAdd": [
    {
      "appEntitlementId": "<string>",
      "appId": "<string>"
    }
  ],
  "toDelete": [
    {
      "appEntitlementId": "<string>",
      "appId": "<string>"
    }
  ]
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete"

payload = {
    "toAdd": [
        {
            "appEntitlementId": "<string>",
            "appId": "<string>"
        }
    ],
    "toDelete": [
        {
            "appEntitlementId": "<string>",
            "appId": "<string>"
        }
    ]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    toAdd: [{appEntitlementId: '<string>', appId: '<string>'}],
    toDelete: [{appEntitlementId: '<string>', appId: '<string>'}]
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'toAdd' => [
        [
                'appEntitlementId' => '<string>',
                'appId' => '<string>'
        ]
    ],
    'toDelete' => [
        [
                'appEntitlementId' => '<string>',
                'appId' => '<string>'
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete"

	payload := strings.NewReader("{\n  \"toAdd\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ],\n  \"toDelete\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"toAdd\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ],\n  \"toDelete\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/access_review/{access_review_id}/excluded_entitlements/add_delete")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"toAdd\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ],\n  \"toDelete\": [\n    {\n      \"appEntitlementId\": \"<string>\",\n      \"appId\": \"<string>\"\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization

string

header

required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Path Parameters

access_review_id

string

required

The ID of the user-first access review campaign to configure.

Body

application/json

Incrementally adds and/or removes excluded entitlements for a user-first campaign without replacing the entire set (contrast AccessReviewSetCampaignScopeAndExcludedEntitlementsRequest).

toAdd

Access Review Excluded Entitlement Input · object[] | null

The entitlements to add to the campaign's excluded set.

Show child attributes

toDelete

Access Review Excluded Entitlement Input · object[] | null

The entitlements to remove from the campaign's excluded set.

Show child attributes

Response

200 - application/json

AccessReviewAddDeleteExcludedEntitlementsResponse is empty. Read the current exclusions with GetCampaignScopeAndEntitlements.

Welcome

Endpoints

Add Delete Excluded Entitlements

Authorizations

Path Parameters

Body

Response