accessReviewInstanceDecisionItem: recordAllDecisions

Namespace: microsoft.graph


APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

As a reviewer of an access review, record a decision for an accessReviewInstanceDecisionItem that is assigned to you and that matches the principal or resource IDs specified. If no IDs are specified, the decisions will apply to every accessReviewInstanceDecisionItem for which you are the reviewer.


One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from least to most privileged)
Delegated (work or school account) AccessReview.Read.All, AccessReview.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application AccessReview.Read.All, AccessReview.ReadWrite.All

For delegated scenarios, the signed-in user must have one of the following Azure AD roles.

Write access reviews of a group or app Write access reviews of an Azure AD role
User Administrator
Identity Governance Administrator
Global Administrator
Identity Governance Administrator
Privileged Role Administrator
Global Administrator

HTTP request

POST /identityGovernance/accessReviews/decisions/filterByCurrentUser(on='reviewer')/recordAllDecisions

Request headers

Name Description
Authorization Bearer {token}. Required.
Content-Type application/json. Required.

Request body

In the request body, supply JSON representation of the parameters.

The following table shows the parameters that can be used with this action.

Parameter Type Description
decision String The decision to provide. The possible values are Approve, Deny, DontKnow.
justification String Justification to provide for the decision.
principalId String If provided, all decision items matching the principalId will have this decision recorded.
resourceId String If provided, all decision items matching the resourceId will have this decision recorded.


If successful, this action returns a 204 No Content response code.



Content-Type: application/json

  "decision": "Deny",
  "justification": "Alice switched teams and no longer works with this group",
  "principalId": "2043848d-e422-473c-8607-88a3319ff491",
  "resourceId": "733ef921-89e1-4d7e-aeff-83612223c37e"


Note: The response object shown here might be shortened for readability.

HTTP/1.1 204 No Content