Update accessReview (deprecated)

Namespace: microsoft.graph


APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.


This version of the access review API is deprecated and will stop returning data on May 19, 2023. Please use access reviews API.

In the Azure AD access reviews feature, update an existing accessReview object to change one or more of its properties.

This API is not intended to change the reviewers or decisions of a review. To change the reviewers, use the addReviewer or removeReviewer APIs. To stop an already-started one-time review, or an already-started instance of a recurring review, early, use the stop API. To apply the decisions to the target group or app access rights, use the apply API.


One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from least to most privileged)
Delegated (work or school account) AccessReview.ReadWrite.Membership, AccessReview.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application AccessReview.ReadWrite.Membership

HTTP request

PATCH /accessReviews/{reviewId}

Request headers

Name Type Description
Authorization string Bearer {token}. Required.

Request body

In the request body, supply a JSON representation of the parameters of an accessReview object.

The following table shows the properties that can be supplied when you update an accessReview.

Property Type Description
displayName String The access review name.
startDateTime DateTimeOffset The DateTime when the review is scheduled to be start. This must be a date in the future.
endDateTime DateTimeOffset The DateTime when the review is scheduled to end. This must be at least one day later than the start date.
description String The description, to show to the reviewers.


If successful, this method returns a 204 Accepted response code and an accessReview object in the response body.


This is an example of updating a one-time (not reoccurring) access review.


In the request body, supply a JSON representation of the new properties of the accessReview object.

PATCH https://graph.microsoft.com/beta/accessReviews/006111db-0810-4494-a6df-904d368bd81b
Content-type: application/json

    "displayName":"TestReview new name"

Note: The response object shown here might be shortened for readability.

HTTP/1.1 204 Accepted
Content-type: application/json

    "id": "006111db-0810-4494-a6df-904d368bd81b",
    "displayName": "TestReview new name",
    "startDateTime": "2017-02-10T00:35:53.214Z",
    "endDateTime": "2017-03-12T00:35:53.214Z",
    "status": "Initializing",
    "businessFlowTemplateId": "6e4f3d20-c5c3-407f-9695-8460952bcc68",
    "reviewerType": "delegated",
    "description": "Sample description"