> ## Documentation Index > Fetch the complete documentation index at: https://www.c1.ai/docs/llms.txt > Use this file to discover all available pages before exploring further. # Search Automations > Search for automations matching the provided filters, including query text, template refs, app, and trigger types. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/search/automations openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/search/automations: post: tags: - Automations summary: Search Automations description: >- Search for automations matching the provided filters, including query text, template refs, app, and trigger types. operationId: c1.api.automations.v1.AutomationSearchService.SearchAutomations requestBody: content: application/json: schema: $ref: >- #/components/schemas/c1.api.automations.v1.SearchAutomationsRequest responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.automations.v1.SearchAutomationsResponse description: Successful response x-codeSamples: - lang: go label: SearchAutomations source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"log\"\n)\n\nfunc main() {\n ctx := context.Background()\n\n s := conductoronesdkgo.New(\n conductoronesdkgo.WithSecurity(shared.Security{\n BearerAuth: \"\",\n Oauth: \"\",\n }),\n )\n\n res, err := s.AutomationSearch.SearchAutomations(ctx, nil)\n if err != nil {\n log.Fatal(err)\n }\n if res.SearchAutomationsResponse != nil {\n // handle response\n }\n}" - lang: typescript label: Typescript (SDK) source: >- import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript"; const conductoroneSDKTypescript = new ConductoroneSDKTypescript({ security: { bearerAuth: "", oauth: "", }, }); async function run() { const result = await conductoroneSDKTypescript.automationSearch.searchAutomations(); console.log(result); } run(); components: schemas: c1.api.automations.v1.SearchAutomationsRequest: description: The SearchAutomationsRequest message. properties: appId: description: Filter results to automations belonging to this application. readOnly: false type: string appIds: description: >- Filter results to automations belonging to any of the specified apps. Supersedes the singular `app_id` field when non-empty; when empty, the server falls back to `app_id` for backward compatibility. items: type: string nullable: true readOnly: false type: array direction: description: >- Direction to sort in. Unspecified falls back to ASC when sort_field is set; when sort_field is also unspecified, the server default order (created_at DESC) applies. enum: - SORT_DIRECTION_UNSPECIFIED - SORT_DIRECTION_ASC - SORT_DIRECTION_DESC readOnly: false type: string x-speakeasy-unknown-values: allow isDraft: description: |- Tri-state draft filter. Unset = include both drafts and published; `true` = drafts only; `false` = published only. nullable: true readOnly: false type: boolean pageSize: description: Maximum number of results to return per page. format: int32 readOnly: false type: integer pageToken: description: Pagination token from a previous SearchAutomationsResponse. readOnly: false type: string query: description: Free-text search query to filter automations by name or description. readOnly: false type: string refs: description: Restrict results to automations matching these template references. items: $ref: '#/components/schemas/c1.api.automations.v1.AutomationTemplateRef' nullable: true readOnly: false type: array sortField: description: >- Column to sort by. Unspecified (0) means sort by created_at desc (server default). enum: - AUTOMATION_SORT_FIELD_UNSPECIFIED - AUTOMATION_SORT_FIELD_DISPLAY_NAME - AUTOMATION_SORT_FIELD_CREATED_AT - AUTOMATION_SORT_FIELD_LAST_EXECUTED_AT - AUTOMATION_SORT_FIELD_ENABLED - AUTOMATION_SORT_FIELD_PRIMARY_TRIGGER_TYPE readOnly: false type: string x-speakeasy-unknown-values: allow statuses: description: >- Filter results by automation status. Empty or containing both ON and OFF applies no status filter. items: enum: - AUTOMATION_STATUS_FILTER_UNSPECIFIED - AUTOMATION_STATUS_FILTER_ON - AUTOMATION_STATUS_FILTER_OFF type: string x-speakeasy-unknown-values: allow nullable: true readOnly: false type: array triggerTypes: description: >- Filter results to automations with any of the specified trigger types. items: enum: - TRIGGER_TYPE_UNSPECIFIED - TRIGGER_TYPE_USER_PROFILE_CHANGE - TRIGGER_TYPE_APP_USER_CREATE - TRIGGER_TYPE_APP_USER_UPDATE - TRIGGER_TYPE_UNUSED_ACCESS - TRIGGER_TYPE_USER_CREATED - TRIGGER_TYPE_GRANT_FOUND - TRIGGER_TYPE_GRANT_DELETED - TRIGGER_TYPE_WEBHOOK - TRIGGER_TYPE_SCHEDULE - TRIGGER_TYPE_FORM - TRIGGER_TYPE_SCHEDULE_APP_USER - TRIGGER_TYPE_ACCESS_CONFLICT - TRIGGER_TYPE_SCHEDULE_NO_USER type: string x-speakeasy-unknown-values: allow nullable: true readOnly: false type: array title: Search Automations Request type: object x-speakeasy-name-override: SearchAutomationsRequest c1.api.automations.v1.SearchAutomationsResponse: description: The SearchAutomationsResponse message. properties: list: description: The page of automations matching the search criteria. items: $ref: '#/components/schemas/c1.api.automations.v1.Automation' nullable: true readOnly: false type: array nextPageToken: description: >- Token to retrieve the next page of results, empty when no more results exist. readOnly: false type: string title: Search Automations Response type: object x-speakeasy-name-override: SearchAutomationsResponse c1.api.automations.v1.AutomationTemplateRef: description: The AutomationTemplateRef message. nullable: true properties: id: description: The id field. readOnly: false type: string title: Automation Template Ref type: object x-speakeasy-name-override: AutomationTemplateRef c1.api.automations.v1.Automation: description: > The Automation message. This message contains a oneof named disabled_reason. Only a single field of the following list may be set at a time: - circuitBreaker properties: appId: description: the app id this workflow_template belongs to readOnly: false type: string automationSteps: description: The automationSteps field. items: $ref: '#/components/schemas/c1.api.automations.v1.AutomationStep' nullable: true readOnly: false type: array circuitBreaker: $ref: >- #/components/schemas/c1.api.automations.v1.DisabledReasonCircuitBreaker circuitBreakerMax: description: >- Circuit breaker rate cap: disable this automation if it executes more than circuit_breaker_max times in the trailing circuit_breaker_period. 0 = circuit breaker off (default). format: uint32 readOnly: false type: integer circuitBreakerPeriod: description: The circuitBreakerPeriod field. enum: - CIRCUIT_BREAKER_PERIOD_UNSPECIFIED - CIRCUIT_BREAKER_PERIOD_HOUR - CIRCUIT_BREAKER_PERIOD_DAY - CIRCUIT_BREAKER_PERIOD_WEEK - CIRCUIT_BREAKER_PERIOD_MONTH readOnly: false type: string x-speakeasy-unknown-values: allow context: $ref: '#/components/schemas/c1.api.automations.v1.AutomationContext' createdAt: format: date-time readOnly: false type: string currentVersion: description: The currentVersion field. format: int64 readOnly: false type: string description: description: The description field. readOnly: false type: string displayName: description: The displayName field. readOnly: false type: string draftAutomationSteps: description: The draftAutomationSteps field. items: $ref: '#/components/schemas/c1.api.automations.v1.AutomationStep' nullable: true readOnly: false type: array draftTriggers: description: The draftTriggers field. items: $ref: '#/components/schemas/c1.api.automations.v1.AutomationTrigger' nullable: true readOnly: false type: array enabled: description: The enabled field. readOnly: false type: boolean id: description: The id field. readOnly: true type: string isDraft: description: The isDraft field. readOnly: false type: boolean lastExecutedAt: format: date-time readOnly: false type: string primaryTriggerType: description: The primaryTriggerType field. enum: - TRIGGER_TYPE_UNSPECIFIED - TRIGGER_TYPE_USER_PROFILE_CHANGE - TRIGGER_TYPE_APP_USER_CREATE - TRIGGER_TYPE_APP_USER_UPDATE - TRIGGER_TYPE_UNUSED_ACCESS - TRIGGER_TYPE_USER_CREATED - TRIGGER_TYPE_GRANT_FOUND - TRIGGER_TYPE_GRANT_DELETED - TRIGGER_TYPE_WEBHOOK - TRIGGER_TYPE_SCHEDULE - TRIGGER_TYPE_FORM - TRIGGER_TYPE_SCHEDULE_APP_USER - TRIGGER_TYPE_ACCESS_CONFLICT - TRIGGER_TYPE_SCHEDULE_NO_USER readOnly: false type: string x-speakeasy-unknown-values: allow triggers: description: The triggers field. items: $ref: '#/components/schemas/c1.api.automations.v1.AutomationTrigger' nullable: true readOnly: false type: array title: Automation type: object x-speakeasy-entity: Automation x-speakeasy-name-override: Automation c1.api.automations.v1.AutomationStep: description: > The AutomationStep message. This message contains a oneof named kind. Only a single field of the following list may be set at a time: - createAccessReview - waitForDuration - unenrollFromAllAccessProfiles - createRevokeTasks - createRevokeTasksV2 - sendEmail - removeFromDelegation - runAutomation - updateUser - taskAction - webhook - connectorAction - connectorCreateAccount - grantEntitlements - sendSlackMessage - callFunction - accountLifecycleAction - generatePassword - evaluateExpressions - setCredential - storeCredential properties: accountLifecycleAction: $ref: '#/components/schemas/c1.api.automations.v1.AccountLifecycleAction' callFunction: $ref: '#/components/schemas/c1.api.automations.v1.CallFunction' connectorAction: $ref: '#/components/schemas/c1.api.automations.v1.ConnectorAction' connectorCreateAccount: $ref: '#/components/schemas/c1.api.automations.v1.ConnectorCreateAccount' createAccessReview: $ref: '#/components/schemas/c1.api.automations.v1.CreateAccessReview' createRevokeTasks: $ref: '#/components/schemas/c1.api.automations.v1.CreateRevokeTasks' createRevokeTasksV2: $ref: '#/components/schemas/c1.api.automations.v1.CreateRevokeTasksV2' evaluateExpressions: $ref: '#/components/schemas/c1.api.automations.v1.EvaluateExpressions' generatePassword: $ref: '#/components/schemas/c1.api.automations.v1.GeneratePassword' grantEntitlements: $ref: '#/components/schemas/c1.api.automations.v1.GrantEntitlements' removeFromDelegation: $ref: '#/components/schemas/c1.api.automations.v1.RemoveFromDelegation' runAutomation: $ref: '#/components/schemas/c1.api.automations.v1.RunAutomation' sendEmail: $ref: '#/components/schemas/c1.api.automations.v1.SendEmail' sendSlackMessage: $ref: '#/components/schemas/c1.api.automations.v1.SendSlackMessage' setCredential: $ref: '#/components/schemas/c1.api.automations.v1.SetCredential' skipIfTrueCel: description: The skipIfTrueCel field. readOnly: false type: string stepDisplayName: description: The stepDisplayName field. readOnly: false type: string stepName: description: The stepName field. readOnly: false type: string storeCredential: $ref: '#/components/schemas/c1.api.automations.v1.StoreCredential' taskAction: $ref: '#/components/schemas/c1.api.automations.v1.TaskAction' unenrollFromAllAccessProfiles: $ref: >- #/components/schemas/c1.api.automations.v1.UnenrollFromAllAccessProfiles updateUser: $ref: '#/components/schemas/c1.api.automations.v1.UpdateUser' waitForDuration: $ref: '#/components/schemas/c1.api.automations.v1.WaitForDuration' webhook: $ref: '#/components/schemas/c1.api.automations.v1.Webhook' title: Automation Step type: object x-speakeasy-name-override: AutomationStep c1.api.automations.v1.DisabledReasonCircuitBreaker: description: |- DisabledReasonCircuitBreaker carries the trip context when an automation has been auto-disabled by its rate cap. Returned on the parent Automation when read; not directly settable. nullable: true properties: observedCount: description: Observed execution count in the period at trip time. format: uint32 readOnly: false type: integer period: description: Snapshot of the period at trip time. enum: - CIRCUIT_BREAKER_PERIOD_UNSPECIFIED - CIRCUIT_BREAKER_PERIOD_HOUR - CIRCUIT_BREAKER_PERIOD_DAY - CIRCUIT_BREAKER_PERIOD_WEEK - CIRCUIT_BREAKER_PERIOD_MONTH readOnly: false type: string x-speakeasy-unknown-values: allow threshold: description: Snapshot of the threshold at trip time. format: uint32 readOnly: false type: integer trippedAt: format: date-time readOnly: false type: string title: Disabled Reason Circuit Breaker type: object x-speakeasy-name-override: DisabledReasonCircuitBreaker c1.api.automations.v1.AutomationContext: description: The AutomationContext message. properties: context: additionalProperties: true readOnly: false type: object title: Automation Context type: object x-speakeasy-name-override: AutomationContext c1.api.automations.v1.AutomationTrigger: description: > Automation Triggers This message contains a oneof named kind. Only a single field of the following list may be set at a time: - userProfileChange - appUserCreated - appUserUpdated - usageBasedRevocation - userCreated - grantFound - grantDeleted - webhook - schedule - scheduleAppUser - accessConflict - scheduleNoUser properties: accessConflict: $ref: '#/components/schemas/c1.api.automations.v1.AccessConflictTrigger' appUserCreated: $ref: '#/components/schemas/c1.api.automations.v1.AppUserCreatedTrigger' appUserUpdated: $ref: '#/components/schemas/c1.api.automations.v1.AppUserUpdatedTrigger' grantDeleted: $ref: '#/components/schemas/c1.api.automations.v1.GrantDeletedTrigger' grantFound: $ref: '#/components/schemas/c1.api.automations.v1.GrantFoundTrigger' schedule: $ref: '#/components/schemas/c1.api.automations.v1.ScheduleTrigger' scheduleAppUser: $ref: '#/components/schemas/c1.api.automations.v1.ScheduleTriggerAppUser' scheduleNoUser: $ref: '#/components/schemas/c1.api.automations.v1.ScheduleTriggerNoUser' usageBasedRevocation: $ref: >- #/components/schemas/c1.api.automations.v1.UsageBasedRevocationTrigger userCreated: $ref: '#/components/schemas/c1.api.automations.v1.UserCreatedTrigger' userProfileChange: $ref: '#/components/schemas/c1.api.automations.v1.UserProfileChangeTrigger' webhook: $ref: '#/components/schemas/c1.api.automations.v1.WebhookAutomationTrigger' title: Automation Trigger type: object x-speakeasy-name-override: AutomationTrigger c1.api.automations.v1.AccountLifecycleAction: description: > The AccountLifecycleAction message. This message contains a oneof named account_identifier. Only a single field of the following list may be set at a time: - accountRef - accountInContext nullable: true properties: accountInContext: $ref: '#/components/schemas/c1.api.automations.v1.AccountInContext' accountRef: $ref: '#/components/schemas/c1.api.automations.v1.AccountRef' actionName: description: The actionName field. readOnly: false type: string connectorRef: $ref: '#/components/schemas/c1.api.app.v1.ConnectorRef' title: Account Lifecycle Action type: object x-speakeasy-name-override: AccountLifecycleAction c1.api.automations.v1.CallFunction: description: The CallFunction message. nullable: true properties: args: additionalProperties: type: string description: The args field. readOnly: false type: object functionId: description: The functionId field. readOnly: false type: string title: Call Function type: object x-speakeasy-name-override: CallFunction c1.api.automations.v1.ConnectorAction: description: > The ConnectorAction message. This message contains a oneof named connector_identifier. Only a single field of the following list may be set at a time: - connectorRef nullable: true properties: actionName: description: The actionName field. readOnly: false type: string argsTemplate: additionalProperties: true readOnly: false type: object connectorRef: $ref: '#/components/schemas/c1.api.app.v1.ConnectorRef' resourceTypeId: description: The resourceTypeId field. readOnly: false type: string title: Connector Action type: object x-speakeasy-name-override: ConnectorAction c1.api.automations.v1.ConnectorCreateAccount: description: > The ConnectorCreateAccount message. This message contains a oneof named create_account_arguments. Only a single field of the following list may be set at a time: - userIdCel - userProperties nullable: true properties: connectorRef: $ref: '#/components/schemas/c1.api.app.v1.ConnectorRef' passwordCel: description: >- CEL expression referencing a GeneratePassword step output (e.g. "genStep.password"). When set, the resolved password is encrypted for the connector and sent as CredentialOptions.EncryptedPassword. readOnly: false type: string userIdCel: description: >- The userIdCel field. This field is part of the `create_account_arguments` oneof. See the documentation for `c1.api.automations.v1.ConnectorCreateAccount` for more details. nullable: true readOnly: false type: string userProperties: $ref: '#/components/schemas/c1.api.automations.v1.UserProperties' title: Connector Create Account type: object x-speakeasy-name-override: ConnectorCreateAccount c1.api.automations.v1.CreateAccessReview: description: The CreateAccessReview message. nullable: true properties: accessReviewTemplateCel: description: The accessReviewTemplateCel field. readOnly: false type: string accessReviewTemplateId: description: The accessReviewTemplateId field. readOnly: false type: string campaignName: description: >- Optional campaign name. If not provided, the campaign name will be the access review template name. readOnly: false type: string useSubjectUser: description: >- If true, the step will use the subject user of the automation as the subject. readOnly: false type: boolean userIdsCel: description: The userIdsCel field. readOnly: false type: string userRefs: description: The userRefs field. items: $ref: '#/components/schemas/c1.api.user.v1.UserRef' nullable: true readOnly: false type: array title: Create Access Review type: object x-speakeasy-name-override: CreateAccessReview c1.api.automations.v1.CreateRevokeTasks: description: The CreateRevokeTasks message. nullable: true properties: appEntitlementRefs: description: The appEntitlementRefs field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' nullable: true readOnly: false type: array appEntitlementRefsCel: description: The appEntitlementRefsCel field. readOnly: false type: string excludedAppEntitlementRefs: description: The excludedAppEntitlementRefs field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' nullable: true readOnly: false type: array excludedAppEntitlementRefsCel: description: The excludedAppEntitlementRefsCel field. readOnly: false type: string revokeAll: description: The revokeAll field. readOnly: false type: boolean useSubjectUser: description: >- If true, the step will use the subject user of the automation as the subject. readOnly: false type: boolean userIdCel: description: The userIdCel field. readOnly: false type: string userRef: $ref: '#/components/schemas/c1.api.user.v1.UserRef' title: Create Revoke Tasks type: object x-speakeasy-name-override: CreateRevokeTasks c1.api.automations.v1.CreateRevokeTasksV2: description: > The CreateRevokeTasksV2 message. This message contains a oneof named user. Only a single field of the following list may be set at a time: - userIdCel - userRef - useSubjectUser This message contains a oneof named inclusion. Only a single field of the following list may be set at a time: - inclusionList - inclusionAll - inclusionCriteria - inclusionListCel This message contains a oneof named exclusion. Only a single field of the following list may be set at a time: - exclusionNone - exclusionList - exclusionCriteria - exclusionListCel nullable: true properties: exclusionCriteria: $ref: >- #/components/schemas/c1.api.automations.v1.EntitlementExclusionCriteria exclusionList: $ref: '#/components/schemas/c1.api.automations.v1.EntitlementExclusionList' exclusionListCel: $ref: >- #/components/schemas/c1.api.automations.v1.EntitlementExclusionListCel exclusionNone: $ref: '#/components/schemas/c1.api.automations.v1.EntitlementExclusionNone' inclusionAll: $ref: '#/components/schemas/c1.api.automations.v1.EntitlementInclusionAll' inclusionCriteria: $ref: >- #/components/schemas/c1.api.automations.v1.EntitlementInclusionCriteria inclusionList: $ref: '#/components/schemas/c1.api.automations.v1.EntitlementInclusionList' inclusionListCel: $ref: >- #/components/schemas/c1.api.automations.v1.EntitlementInclusionListCel useSubjectUser: description: >- The useSubjectUser field. This field is part of the `user` oneof. See the documentation for `c1.api.automations.v1.CreateRevokeTasksV2` for more details. nullable: true readOnly: false type: boolean userIdCel: description: >- The userIdCel field. This field is part of the `user` oneof. See the documentation for `c1.api.automations.v1.CreateRevokeTasksV2` for more details. nullable: true readOnly: false type: string userRef: $ref: '#/components/schemas/c1.api.user.v1.UserRef' title: Create Revoke Tasks V 2 type: object x-speakeasy-name-override: CreateRevokeTasksV2 c1.api.automations.v1.EvaluateExpressions: description: The EvaluateExpressions message. nullable: true properties: expressions: description: The expressions field. items: $ref: '#/components/schemas/c1.api.automations.v1.Expression' nullable: true readOnly: false type: array title: Evaluate Expressions type: object x-speakeasy-name-override: EvaluateExpressions c1.api.automations.v1.GeneratePassword: description: The GeneratePassword message. nullable: true properties: passwordPolicyId: deprecated: true description: 'Deprecated: password policy ID lookup is no longer used.' readOnly: false type: string policy: $ref: '#/components/schemas/c1.api.automations.v1.GeneratePasswordPolicy' title: Generate Password type: object x-speakeasy-name-override: GeneratePassword c1.api.automations.v1.GrantEntitlements: description: > The GrantEntitlements message. This message contains a oneof named inclusion. Only a single field of the following list may be set at a time: - inclusionList - inclusionCriteria - inclusionListCel This message contains a oneof named exclusion. Only a single field of the following list may be set at a time: - exclusionNone - exclusionList - exclusionCriteria - exclusionListCel nullable: true properties: exclusionCriteria: $ref: >- #/components/schemas/c1.api.automations.v1.GrantEntitlementExclusionCriteria exclusionList: $ref: >- #/components/schemas/c1.api.automations.v1.GrantEntitlementExclusionList exclusionListCel: $ref: >- #/components/schemas/c1.api.automations.v1.GrantEntitlementExclusionListCel exclusionNone: $ref: >- #/components/schemas/c1.api.automations.v1.GrantEntitlementExclusionNone inclusionCriteria: $ref: >- #/components/schemas/c1.api.automations.v1.GrantEntitlementInclusionCriteria inclusionList: $ref: >- #/components/schemas/c1.api.automations.v1.GrantEntitlementInclusionList inclusionListCel: $ref: >- #/components/schemas/c1.api.automations.v1.GrantEntitlementInclusionListCel useSubjectUser: description: >- If true, the step will use the subject user of the automation as the subject. readOnly: false type: boolean userIdCel: description: The userIdCel field. readOnly: false type: string userRef: $ref: '#/components/schemas/c1.api.user.v1.UserRef' title: Grant Entitlements type: object x-speakeasy-name-override: GrantEntitlements c1.api.automations.v1.RemoveFromDelegation: description: > RemoveFromDelegation: find all users that have the target user as their delegated user, and modify the delegation. This message contains a oneof named replacement_user. Only a single field of the following list may be set at a time: - replacementUserIdCel - replacementUserRef nullable: true properties: replacementUserIdCel: description: >- The user who will replace the target user's delegation This field is part of the `replacement_user` oneof. See the documentation for `c1.api.automations.v1.RemoveFromDelegation` for more details. nullable: true readOnly: false type: string replacementUserRef: $ref: '#/components/schemas/c1.api.user.v1.UserRef' useSubjectUser: description: >- If true, the step will use the subject user of the automation as the subject. readOnly: false type: boolean userIdCel: description: The userIdCel field. readOnly: false type: string userRef: $ref: '#/components/schemas/c1.api.user.v1.UserRef' title: Remove From Delegation type: object x-speakeasy-name-override: RemoveFromDelegation c1.api.automations.v1.RunAutomation: description: > RunAutomation: kick off the execution of an automation template. This message contains a oneof named automation_template. Only a single field of the following list may be set at a time: - automationTemplateRef - automationTemplateIdCel nullable: true properties: automationTemplateIdCel: description: >- The automationTemplateIdCel field. This field is part of the `automation_template` oneof. See the documentation for `c1.api.automations.v1.RunAutomation` for more details. nullable: true readOnly: false type: string automationTemplateRef: $ref: '#/components/schemas/c1.api.automations.v1.AutomationTemplateRef' context: $ref: '#/components/schemas/c1.api.automations.v1.AutomationContext' title: Run Automation type: object x-speakeasy-name-override: RunAutomation c1.api.automations.v1.SendEmail: description: The SendEmail message. nullable: true properties: body: description: The body field. readOnly: false type: string email: deprecated: true description: >- Deprecated: use email_cel instead. Static email field shipped behind FF 541 (SKU_MANUAL) with zero tenant enablement. CEL subsumes static: '"ops@example.com"' is valid CEL. readOnly: false type: string emailCel: description: >- CEL expression resolving to one or more email addresses (string or list). Evaluated against the workflow execution context (trigger + completed steps). Static emails work too: '"ops@example.com"' is valid CEL. Supports list for multiple recipients: '["a@x.com", "b@x.com"]'. Requires the tenant to have a TenantEmailProvider configured. readOnly: false type: string subject: description: The subject field. readOnly: false type: string title: description: The title field. readOnly: false type: string useSubjectUser: description: >- If true, the step will use the subject user of the automation as the subject. readOnly: false type: boolean userIdsCel: description: The userIdsCel field. readOnly: false type: string userRefs: description: The userRefs field. items: $ref: '#/components/schemas/c1.api.user.v1.UserRef' nullable: true readOnly: false type: array title: Send Email type: object x-speakeasy-name-override: SendEmail c1.api.automations.v1.SendSlackMessage: description: > SendSlackMessage posts to a channel or DMs one or more users. Delivery mode is inferred from which fields are populated: DM if any user field is set (use_subject_user, user_ids_cel, user_refs), otherwise channel. Priority for DM recipient resolution: use_subject_user > user_ids_cel > user_refs. This message contains a oneof named channel. Only a single field of the following list may be set at a time: - channelName - channelNameCel nullable: true properties: body: description: The body field. readOnly: false type: string channelName: description: >- The channelName field. This field is part of the `channel` oneof. See the documentation for `c1.api.automations.v1.SendSlackMessage` for more details. nullable: true readOnly: false type: string channelNameCel: description: >- The channelNameCel field. This field is part of the `channel` oneof. See the documentation for `c1.api.automations.v1.SendSlackMessage` for more details. nullable: true readOnly: false type: string useSubjectUser: description: The useSubjectUser field. readOnly: false type: boolean userIdsCel: description: The userIdsCel field. readOnly: false type: string userRefs: description: The userRefs field. items: $ref: '#/components/schemas/c1.api.user.v1.UserRef' nullable: true readOnly: false type: array title: Send Slack Message type: object x-speakeasy-name-override: SendSlackMessage c1.api.automations.v1.SetCredential: description: > SetCredential submits a RotateCredentials baton task to the target connector, re-encrypting the given password CEL expression with the connector's public JWK. This message contains a oneof named connector_identifier. Only a single field of the following list may be set at a time: - connectorRef nullable: true properties: accountIdCel: description: The accountIdCel field. readOnly: false type: string connectorRef: $ref: '#/components/schemas/c1.api.app.v1.ConnectorRef' passwordCel: description: The passwordCel field. readOnly: false type: string title: Set Credential type: object x-speakeasy-name-override: SetCredential c1.api.automations.v1.StoreCredential: description: |- StoreCredential stores a credential from GeneratePassword in a vault. Supports Paper Vault (SSO/email) and App Vault (entitlement-bound). nullable: true properties: appIdCel: description: CEL expression that resolves to app ID (App Vault only) readOnly: false type: string authType: description: Authentication type for the paper vault recipient (Paper Vault only) enum: - STORE_CREDENTIAL_AUTH_TYPE_UNSPECIFIED - STORE_CREDENTIAL_AUTH_TYPE_SSO_INTERNAL - STORE_CREDENTIAL_AUTH_TYPE_VERIFY_EMAIL readOnly: false type: string x-speakeasy-unknown-values: allow credentialCel: description: >- CEL expression that resolves to the encrypted credential from GeneratePassword readOnly: false type: string expiry: format: duration readOnly: false type: string labelCel: description: Optional display label for the vault readOnly: false type: string maxViews: description: >- Maximum number of views (0 = unlimited, default 1) (Paper Vault only) format: uint32 readOnly: false type: integer recipientCel: description: >- CEL expression resolving to the C1 user ID of the recipient (SSO_INTERNAL / App Vault) readOnly: false type: string recipientEmailCel: description: >- CEL expression resolving to a recipient email address (Paper Vault + VERIFY_EMAIL only) readOnly: false type: string ttl: format: duration readOnly: false type: string vaultType: description: >- Vault type selector (default: PAPER_VAULT for backward compatibility) enum: - STORE_CREDENTIAL_VAULT_TYPE_UNSPECIFIED - STORE_CREDENTIAL_VAULT_TYPE_PAPER_VAULT - STORE_CREDENTIAL_VAULT_TYPE_APP_VAULT readOnly: false type: string x-speakeasy-unknown-values: allow title: Store Credential type: object x-speakeasy-name-override: StoreCredential c1.api.automations.v1.TaskAction: description: > The TaskAction message. This message contains a oneof named action. Only a single field of the following list may be set at a time: - close - reassign nullable: true properties: close: $ref: '#/components/schemas/c1.api.automations.v1.CloseAction' reassign: $ref: '#/components/schemas/c1.api.automations.v1.ReassignAction' taskTypes: description: The taskTypes field. items: enum: - TASK_TYPE_UNSPECIFIED - TASK_TYPE_REQUEST - TASK_TYPE_REVOKE - TASK_TYPE_REVIEW type: string x-speakeasy-unknown-values: allow nullable: true readOnly: false type: array taskUserRelation: description: The taskUserRelation field. enum: - TASK_USER_RELATION_UNSPECIFIED - TASK_USER_RELATION_ASSIGNEE - TASK_USER_RELATION_SUBJECT readOnly: false type: string x-speakeasy-unknown-values: allow title: Task Action type: object x-speakeasy-name-override: TaskAction c1.api.automations.v1.UnenrollFromAllAccessProfiles: description: The UnenrollFromAllAccessProfiles message. nullable: true properties: catalogIds: description: >- Optional list of catalog IDs to unenroll from. If empty, unenroll from all catalogs. items: type: string nullable: true readOnly: false type: array catalogIdsCel: description: >- CEL expression to dynamically select catalog IDs. If provided, overrides catalog_ids. readOnly: false type: string useSubjectUser: description: >- If true, the step will use the subject user of the automation as the subject. readOnly: false type: boolean userIdsCel: description: The userIdsCel field. readOnly: false type: string userRefs: description: The userRefs field. items: $ref: '#/components/schemas/c1.api.user.v1.UserRef' nullable: true readOnly: false type: array title: Unenroll From All Access Profiles type: object x-speakeasy-name-override: UnenrollFromAllAccessProfiles c1.api.automations.v1.UpdateUser: description: > The UpdateUser message. This message contains a oneof named user. Only a single field of the following list may be set at a time: - userIdCel - userRef This message contains a oneof named user_status. Only a single field of the following list may be set at a time: - userStatusEnum - userStatusCel nullable: true properties: useSubjectUser: description: >- If true, the step will use the subject user of the automation as the subject. readOnly: false type: boolean userIdCel: description: >- The userIdCel field. This field is part of the `user` oneof. See the documentation for `c1.api.automations.v1.UpdateUser` for more details. nullable: true readOnly: false type: string userRef: $ref: '#/components/schemas/c1.api.user.v1.UserRef' userStatusCel: description: >- The userStatusCel field. This field is part of the `user_status` oneof. See the documentation for `c1.api.automations.v1.UpdateUser` for more details. nullable: true readOnly: false type: string userStatusEnum: description: >- The userStatusEnum field. This field is part of the `user_status` oneof. See the documentation for `c1.api.automations.v1.UpdateUser` for more details. enum: - UNKNOWN - ENABLED - DISABLED - DELETED nullable: true readOnly: false type: string x-speakeasy-unknown-values: allow title: Update User type: object x-speakeasy-name-override: UpdateUser c1.api.automations.v1.WaitForDuration: description: The WaitForDuration message. nullable: true properties: duration: format: duration readOnly: false type: string title: Wait For Duration type: object x-speakeasy-name-override: WaitForDuration c1.api.automations.v1.Webhook: description: > The Webhook message. This message contains a oneof named webhook_identifier. Only a single field of the following list may be set at a time: - webhookId - webhookIdCel nullable: true properties: payload: additionalProperties: true readOnly: false type: object webhookId: description: >- The webhookId field. This field is part of the `webhook_identifier` oneof. See the documentation for `c1.api.automations.v1.Webhook` for more details. nullable: true readOnly: false type: string webhookIdCel: description: >- The webhookIdCel field. This field is part of the `webhook_identifier` oneof. See the documentation for `c1.api.automations.v1.Webhook` for more details. nullable: true readOnly: false type: string title: Webhook type: object x-speakeasy-name-override: Webhook c1.api.automations.v1.AccessConflictTrigger: description: > The AccessConflictTrigger message. This message contains a oneof named conflict_monitor_selector. Only a single field of the following list may be set at a time: - conflictMonitorRefs - allConflictMonitors nullable: true properties: allConflictMonitors: description: >- The allConflictMonitors field. This field is part of the `conflict_monitor_selector` oneof. See the documentation for `c1.api.automations.v1.AccessConflictTrigger` for more details. nullable: true readOnly: false type: boolean conflictMonitorRefs: $ref: '#/components/schemas/c1.api.automations.v1.ConflictMonitorRefs' title: Access Conflict Trigger type: object x-speakeasy-name-override: AccessConflictTrigger c1.api.automations.v1.AppUserCreatedTrigger: description: > The AppUserCreatedTrigger message. This message contains a oneof named app_identifier. Only a single field of the following list may be set at a time: - appId - appIdCel nullable: true properties: appId: description: >- The appId field. This field is part of the `app_identifier` oneof. See the documentation for `c1.api.automations.v1.AppUserCreatedTrigger` for more details. nullable: true readOnly: false type: string appIdCel: description: >- The appIdCel field. This field is part of the `app_identifier` oneof. See the documentation for `c1.api.automations.v1.AppUserCreatedTrigger` for more details. nullable: true readOnly: false type: string condition: description: The condition field. readOnly: false type: string title: App User Created Trigger type: object x-speakeasy-name-override: AppUserCreatedTrigger c1.api.automations.v1.AppUserUpdatedTrigger: description: > The AppUserUpdatedTrigger message. This message contains a oneof named app_identifier. Only a single field of the following list may be set at a time: - appId - appIdCel nullable: true properties: appId: description: >- The appId field. This field is part of the `app_identifier` oneof. See the documentation for `c1.api.automations.v1.AppUserUpdatedTrigger` for more details. nullable: true readOnly: false type: string appIdCel: description: >- The appIdCel field. This field is part of the `app_identifier` oneof. See the documentation for `c1.api.automations.v1.AppUserUpdatedTrigger` for more details. nullable: true readOnly: false type: string condition: description: The condition field. readOnly: false type: string title: App User Updated Trigger type: object x-speakeasy-name-override: AppUserUpdatedTrigger c1.api.automations.v1.GrantDeletedTrigger: description: The GrantDeletedTrigger message. nullable: true properties: grantTriggerFilter: $ref: '#/components/schemas/c1.api.automations.v1.GrantTriggerFilter' title: Grant Deleted Trigger type: object x-speakeasy-name-override: GrantDeletedTrigger c1.api.automations.v1.GrantFoundTrigger: description: The GrantFoundTrigger message. nullable: true properties: grantTriggerFilter: $ref: '#/components/schemas/c1.api.automations.v1.GrantTriggerFilter' title: Grant Found Trigger type: object x-speakeasy-name-override: GrantFoundTrigger c1.api.automations.v1.ScheduleTrigger: description: The ScheduleTrigger message. nullable: true properties: advanced: description: The advanced field. readOnly: false type: boolean condition: description: The condition field. readOnly: false type: string cronSpec: description: The cronSpec field. readOnly: false type: string skipIfTrueCel: deprecated: true description: The skipIfTrueCel field. readOnly: false type: string start: format: date-time readOnly: false type: string timezone: description: The timezone field. readOnly: false type: string title: Schedule Trigger type: object x-speakeasy-name-override: ScheduleTrigger c1.api.automations.v1.ScheduleTriggerAppUser: description: The ScheduleTriggerAppUser message. nullable: true properties: appId: description: The appId field. readOnly: false type: string condition: description: The condition field. readOnly: false type: string cronSpec: description: The cronSpec field. readOnly: false type: string start: format: date-time readOnly: false type: string timezone: description: The timezone field. readOnly: false type: string title: Schedule Trigger App User type: object x-speakeasy-name-override: ScheduleTriggerAppUser c1.api.automations.v1.ScheduleTriggerNoUser: description: >- ScheduleTriggerNoUser fires on a cron schedule with no subject user (e.g. reports, syncs, orchestration). Minimum cron interval is enforced at 1 hour in validation. nullable: true properties: advanced: description: The advanced field. readOnly: false type: boolean cronSpec: description: The cronSpec field. readOnly: false type: string start: format: date-time readOnly: false type: string timezone: description: The timezone field. readOnly: false type: string title: Schedule Trigger No User type: object x-speakeasy-name-override: ScheduleTriggerNoUser c1.api.automations.v1.UsageBasedRevocationTrigger: description: > The UsageBasedRevocationTrigger message. This message contains a oneof named cold_start_schedule. Only a single field of the following list may be set at a time: - runImmediately - runDelayed nullable: true properties: appId: description: The appId field. readOnly: false type: string enabledAt: format: date-time readOnly: false type: string excludedGroupRefs: description: The excludedGroupRefs field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' nullable: true readOnly: false type: array excludedUserRefs: description: The excludedUserRefs field. items: $ref: '#/components/schemas/c1.api.user.v1.UserRef' nullable: true readOnly: false type: array includeUsersWithNoActivity: description: The includeUsersWithNoActivity field. readOnly: false type: boolean runDelayed: $ref: '#/components/schemas/c1.api.automations.v1.RunDelayed' runImmediately: $ref: '#/components/schemas/c1.api.automations.v1.RunImmediately' targetedAppUserTypes: description: The targetedAppUserTypes field. items: enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT type: string x-speakeasy-unknown-values: allow nullable: true readOnly: false type: array targetedEntitlementRefs: description: The targetedEntitlementRefs field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' nullable: true readOnly: false type: array unusedForDays: description: The unusedForDays field. format: uint32 readOnly: false type: integer title: Usage Based Revocation Trigger type: object x-speakeasy-name-override: UsageBasedRevocationTrigger c1.api.automations.v1.UserCreatedTrigger: description: The UserCreatedTrigger message. nullable: true properties: condition: description: The condition field. readOnly: false type: string title: User Created Trigger type: object x-speakeasy-name-override: UserCreatedTrigger c1.api.automations.v1.UserProfileChangeTrigger: description: The UserProfileChangeTrigger message. nullable: true properties: condition: description: The condition field. readOnly: false type: string title: User Profile Change Trigger type: object x-speakeasy-name-override: UserProfileChangeTrigger c1.api.automations.v1.WebhookAutomationTrigger: description: > The WebhookAutomationTrigger message. This message contains a oneof named auth_config. Only a single field of the following list may be set at a time: - jwt - hmac - capabilityUrl nullable: true properties: capabilityUrl: $ref: >- #/components/schemas/c1.api.automations.v1.WebhookListenerAuthCapabilityURL hmac: $ref: '#/components/schemas/c1.api.automations.v1.WebhookListenerAuthHMAC' jwt: $ref: '#/components/schemas/c1.api.automations.v1.WebhookListenerAuthJWT' listenerId: description: Optional existing listener ID (hidden field from frontend) readOnly: false type: string title: Webhook Automation Trigger type: object x-speakeasy-name-override: WebhookAutomationTrigger c1.api.automations.v1.AccountInContext: description: The AccountInContext message. nullable: true title: Account In Context type: object x-speakeasy-name-override: AccountInContext c1.api.automations.v1.AccountRef: description: The AccountRef message. nullable: true properties: accountIdCel: description: The accountIdCel field. readOnly: false type: string title: Account Ref type: object x-speakeasy-name-override: AccountRef c1.api.app.v1.ConnectorRef: description: The ConnectorRef message. nullable: true properties: appId: description: The appId field. readOnly: false type: string id: description: The id field. readOnly: false type: string title: Connector Ref type: object x-speakeasy-name-override: ConnectorRef c1.api.automations.v1.UserProperties: description: The UserProperties message. nullable: true properties: displayNameCel: description: The displayNameCel field. readOnly: false type: string emailCel: description: The emailCel field. readOnly: false type: string profileAttributeCel: description: The profileAttributeCel field. readOnly: false type: string usernameCel: description: The usernameCel field. readOnly: false type: string title: User Properties type: object x-speakeasy-name-override: UserProperties c1.api.user.v1.UserRef: description: A reference to a user. properties: id: description: The id of the user. readOnly: false type: string title: User Ref type: object x-speakeasy-name-override: UserRef c1.api.app.v1.AppEntitlementRef: description: The AppEntitlementRef message. properties: appId: description: The appId field. readOnly: false type: string id: description: The id field. readOnly: false type: string title: App Entitlement Ref type: object x-speakeasy-name-override: AppEntitlementRef c1.api.automations.v1.EntitlementExclusionCriteria: description: The EntitlementExclusionCriteria message. nullable: true properties: excludedAppIds: description: The excludedAppIds field. items: type: string nullable: true readOnly: false type: array excludedComplianceFrameworkIds: description: The excludedComplianceFrameworkIds field. items: type: string nullable: true readOnly: false type: array excludedResourceTypeIds: description: The excludedResourceTypeIds field. items: type: string nullable: true readOnly: false type: array excludedRiskLevelIds: description: The excludedRiskLevelIds field. items: type: string nullable: true readOnly: false type: array title: Entitlement Exclusion Criteria type: object x-speakeasy-name-override: EntitlementExclusionCriteria c1.api.automations.v1.EntitlementExclusionList: description: The EntitlementExclusionList message. nullable: true properties: excludedAppEntitlementRefs: description: The excludedAppEntitlementRefs field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' nullable: true readOnly: false type: array title: Entitlement Exclusion List type: object x-speakeasy-name-override: EntitlementExclusionList c1.api.automations.v1.EntitlementExclusionListCel: description: The EntitlementExclusionListCel message. nullable: true properties: excludedAppEntitlementRefsCel: description: The excludedAppEntitlementRefsCel field. readOnly: false type: string title: Entitlement Exclusion List Cel type: object x-speakeasy-name-override: EntitlementExclusionListCel c1.api.automations.v1.EntitlementExclusionNone: description: The EntitlementExclusionNone message. nullable: true title: Entitlement Exclusion None type: object x-speakeasy-name-override: EntitlementExclusionNone c1.api.automations.v1.EntitlementInclusionAll: description: The EntitlementInclusionAll message. nullable: true title: Entitlement Inclusion All type: object x-speakeasy-name-override: EntitlementInclusionAll c1.api.automations.v1.EntitlementInclusionCriteria: description: The EntitlementInclusionCriteria message. nullable: true properties: appIds: description: The appIds field. items: type: string nullable: true readOnly: false type: array complianceFrameworkIds: description: The complianceFrameworkIds field. items: type: string nullable: true readOnly: false type: array resourceTypeIds: description: The resourceTypeIds field. items: type: string nullable: true readOnly: false type: array riskLevelIds: description: The riskLevelIds field. items: type: string nullable: true readOnly: false type: array title: Entitlement Inclusion Criteria type: object x-speakeasy-name-override: EntitlementInclusionCriteria c1.api.automations.v1.EntitlementInclusionList: description: The EntitlementInclusionList message. nullable: true properties: appEntitlementRefs: description: The appEntitlementRefs field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' nullable: true readOnly: false type: array title: Entitlement Inclusion List type: object x-speakeasy-name-override: EntitlementInclusionList c1.api.automations.v1.EntitlementInclusionListCel: description: The EntitlementInclusionListCel message. nullable: true properties: appEntitlementRefsCel: description: The appEntitlementRefsCel field. readOnly: false type: string title: Entitlement Inclusion List Cel type: object x-speakeasy-name-override: EntitlementInclusionListCel c1.api.automations.v1.Expression: description: The Expression message. properties: expressionCel: description: The expressionCel field. readOnly: false type: string isSecret: description: The isSecret field. readOnly: false type: boolean key: description: The key field. readOnly: false type: string title: Expression type: object x-speakeasy-name-override: Expression c1.api.automations.v1.GeneratePasswordPolicy: description: > GeneratePasswordPolicy defines inline password generation rules. This message contains a oneof named character_rules. Only a single field of the following list may be set at a time: - noRestrictions - customCharacters - excludedCharacters properties: customCharacters: description: >- The customCharacters field. This field is part of the `character_rules` oneof. See the documentation for `c1.api.automations.v1.GeneratePasswordPolicy` for more details. nullable: true readOnly: false type: string excludedCharacters: description: >- The excludedCharacters field. This field is part of the `character_rules` oneof. See the documentation for `c1.api.automations.v1.GeneratePasswordPolicy` for more details. nullable: true readOnly: false type: string maxCharacterCount: description: The maxCharacterCount field. format: int32 readOnly: false type: integer minCharacterCount: description: The minCharacterCount field. format: int32 readOnly: false type: integer noRestrictions: description: >- The noRestrictions field. This field is part of the `character_rules` oneof. See the documentation for `c1.api.automations.v1.GeneratePasswordPolicy` for more details. nullable: true readOnly: false type: boolean requireLowercase: description: The requireLowercase field. readOnly: false type: boolean requireNumbers: description: The requireNumbers field. readOnly: false type: boolean requireSpecialCharacters: description: The requireSpecialCharacters field. readOnly: false type: boolean requireUppercase: description: The requireUppercase field. readOnly: false type: boolean title: Generate Password Policy type: object x-speakeasy-name-override: GeneratePasswordPolicy c1.api.automations.v1.GrantEntitlementExclusionCriteria: description: The GrantEntitlementExclusionCriteria message. nullable: true properties: excludedAppIds: description: The excludedAppIds field. items: type: string nullable: true readOnly: false type: array excludedComplianceFrameworkIds: description: The excludedComplianceFrameworkIds field. items: type: string nullable: true readOnly: false type: array excludedRiskLevelIds: description: The excludedRiskLevelIds field. items: type: string nullable: true readOnly: false type: array title: Grant Entitlement Exclusion Criteria type: object x-speakeasy-name-override: GrantEntitlementExclusionCriteria c1.api.automations.v1.GrantEntitlementExclusionList: description: The GrantEntitlementExclusionList message. nullable: true properties: excludedAppEntitlementRefs: description: The excludedAppEntitlementRefs field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' nullable: true readOnly: false type: array title: Grant Entitlement Exclusion List type: object x-speakeasy-name-override: GrantEntitlementExclusionList c1.api.automations.v1.GrantEntitlementExclusionListCel: description: The GrantEntitlementExclusionListCel message. nullable: true properties: excludedAppEntitlementRefsCel: description: The excludedAppEntitlementRefsCel field. readOnly: false type: string title: Grant Entitlement Exclusion List Cel type: object x-speakeasy-name-override: GrantEntitlementExclusionListCel c1.api.automations.v1.GrantEntitlementExclusionNone: description: The GrantEntitlementExclusionNone message. nullable: true title: Grant Entitlement Exclusion None type: object x-speakeasy-name-override: GrantEntitlementExclusionNone c1.api.automations.v1.GrantEntitlementInclusionCriteria: description: The GrantEntitlementInclusionCriteria message. nullable: true properties: appIds: description: The appIds field. items: type: string nullable: true readOnly: false type: array complianceFrameworkIds: description: The complianceFrameworkIds field. items: type: string nullable: true readOnly: false type: array riskLevelIds: description: The riskLevelIds field. items: type: string nullable: true readOnly: false type: array title: Grant Entitlement Inclusion Criteria type: object x-speakeasy-name-override: GrantEntitlementInclusionCriteria c1.api.automations.v1.GrantEntitlementInclusionList: description: The GrantEntitlementInclusionList message. nullable: true properties: appEntitlementRefs: description: The appEntitlementRefs field. items: $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef' nullable: true readOnly: false type: array title: Grant Entitlement Inclusion List type: object x-speakeasy-name-override: GrantEntitlementInclusionList c1.api.automations.v1.GrantEntitlementInclusionListCel: description: The GrantEntitlementInclusionListCel message. nullable: true properties: appEntitlementRefsCel: description: The appEntitlementRefsCel field. readOnly: false type: string title: Grant Entitlement Inclusion List Cel type: object x-speakeasy-name-override: GrantEntitlementInclusionListCel c1.api.automations.v1.CloseAction: description: > The CloseAction message. This message contains a oneof named user_identifier. Only a single field of the following list may be set at a time: - userIdCel - userRef nullable: true properties: useSubjectUser: description: >- If true, the step will use the subject user of the automation as the subject. readOnly: false type: boolean userIdCel: description: >- The userIdCel field. This field is part of the `user_identifier` oneof. See the documentation for `c1.api.automations.v1.CloseAction` for more details. nullable: true readOnly: false type: string userRef: $ref: '#/components/schemas/c1.api.user.v1.UserRef' title: Close Action type: object x-speakeasy-name-override: CloseAction c1.api.automations.v1.ReassignAction: description: > The ReassignAction message. This message contains a oneof named assignee_user_identifier. Only a single field of the following list may be set at a time: - assigneeUserIdCel - assigneeUserRef This message contains a oneof named subject_user_identifier. Only a single field of the following list may be set at a time: - subjectUserIdCel - subjectUserRef nullable: true properties: assigneeUserIdCel: description: >- The assigneeUserIdCel field. This field is part of the `assignee_user_identifier` oneof. See the documentation for `c1.api.automations.v1.ReassignAction` for more details. nullable: true readOnly: false type: string assigneeUserRef: $ref: '#/components/schemas/c1.api.user.v1.UserRef' subjectUserIdCel: description: >- The subjectUserIdCel field. This field is part of the `subject_user_identifier` oneof. See the documentation for `c1.api.automations.v1.ReassignAction` for more details. nullable: true readOnly: false type: string subjectUserRef: $ref: '#/components/schemas/c1.api.user.v1.UserRef' useSubjectUser: description: >- If true, the step will use the subject user of the automation as the subject. readOnly: false type: boolean title: Reassign Action type: object x-speakeasy-name-override: ReassignAction c1.api.automations.v1.ConflictMonitorRefs: description: The ConflictMonitorRefs message. nullable: true properties: conflictMonitorRefs: description: The conflictMonitorRefs field. items: $ref: '#/components/schemas/c1.api.accessconflict.v1.ConflictMonitorRef' nullable: true readOnly: false type: array title: Conflict Monitor Refs type: object x-speakeasy-name-override: ConflictMonitorRefs c1.api.automations.v1.GrantTriggerFilter: description: > The GrantTriggerFilter message. This message contains a oneof named entitlement_inclusion. Only a single field of the following list may be set at a time: - inclusionList - inclusionAll - inclusionCriteria - inclusionListCel properties: accountFilter: $ref: >- #/components/schemas/c1.api.automations.v1.GrantTriggerFilter.AccountFilter grantFilter: $ref: >- #/components/schemas/c1.api.automations.v1.GrantTriggerFilter.GrantFilter inclusionAll: $ref: '#/components/schemas/c1.api.automations.v1.EntitlementInclusionAll' inclusionCriteria: $ref: >- #/components/schemas/c1.api.automations.v1.EntitlementInclusionCriteria inclusionList: $ref: '#/components/schemas/c1.api.automations.v1.EntitlementInclusionList' inclusionListCel: $ref: >- #/components/schemas/c1.api.automations.v1.EntitlementInclusionListCel title: Grant Trigger Filter type: object x-speakeasy-name-override: GrantTriggerFilter c1.api.automations.v1.RunDelayed: description: The RunDelayed message. nullable: true properties: coldStartDelayDays: description: The coldStartDelayDays field. format: uint32 readOnly: false type: integer required: - coldStartDelayDays title: Run Delayed type: object x-speakeasy-name-override: RunDelayed c1.api.automations.v1.RunImmediately: description: No fields needed; this just indicates the trigger should run immediately nullable: true title: Run Immediately type: object x-speakeasy-name-override: RunImmediately c1.api.automations.v1.WebhookListenerAuthCapabilityURL: description: >- Capability URL authentication: the URL itself contains an unguessable token that acts as the credential. This is simpler to integrate but less secure than JWT or HMAC because the token can leak via server logs, referrer headers, and URL sharing. See https://www.w3.org/TR/capability-urls/ for background. nullable: true title: Webhook Listener Auth Capability Url type: object x-speakeasy-name-override: WebhookListenerAuthCapabilityURL c1.api.automations.v1.WebhookListenerAuthHMAC: description: The WebhookListenerAuthHMAC message. nullable: true title: Webhook Listener Auth Hmac type: object x-speakeasy-name-override: WebhookListenerAuthHMAC c1.api.automations.v1.WebhookListenerAuthJWT: description: The WebhookListenerAuthJWT message. nullable: true properties: jwksUrl: description: The jwksUrl field. readOnly: false type: string title: Webhook Listener Auth Jwt type: object x-speakeasy-name-override: WebhookListenerAuthJWT c1.api.accessconflict.v1.ConflictMonitorRef: description: The ConflictMonitorRef message. properties: id: description: The id field. readOnly: false type: string title: Conflict Monitor Ref type: object x-speakeasy-name-override: ConflictMonitorRef c1.api.automations.v1.GrantTriggerFilter.AccountFilter: description: The AccountFilter message. properties: accountType: description: The accountType field. enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT readOnly: false type: string x-speakeasy-unknown-values: allow title: Account Filter type: object x-speakeasy-name-override: AccountFilter c1.api.automations.v1.GrantTriggerFilter.GrantFilter: description: The GrantFilter message. properties: grantFilterType: description: The grantFilterType field. enum: - GRANT_FILTER_TYPE_UNSPECIFIED - GRANT_FILTER_TYPE_PERMANENT - GRANT_FILTER_TYPE_TEMPORARY readOnly: false type: string x-speakeasy-unknown-values: allow grantJustificationType: description: The grantJustificationType field. enum: - GRANT_JUSTIFICATION_TYPE_UNSPECIFIED - GRANT_JUSTIFICATION_TYPE_ALL - GRANT_JUSTIFICATION_TYPE_CONDUCTOR_ONE - GRANT_JUSTIFICATION_TYPE_DIRECT readOnly: false type: string x-speakeasy-unknown-values: allow grantSourceFilter: description: The grantSourceFilter field. enum: - GRANT_SOURCE_FILTER_UNSPECIFIED - GRANT_SOURCE_FILTER_DIRECT - GRANT_SOURCE_FILTER_INHERITED readOnly: false type: string x-speakeasy-unknown-values: allow title: Grant Filter type: object x-speakeasy-name-override: GrantFilter securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````