Edit

Share via

accessReviewDecision resource type (deprecated)

  • Article

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Caution

This version of the access review API is deprecated and will stop returning data on May 19, 2023. Please use access reviews API.

In the Microsoft Entra access reviews feature, the accessReviewDecision represents a Microsoft Entra access review decision of a particular entity's access. Within an access review, or an instance of a recurring access review, there's one accessReviewDecision per reviewed user. For example, if a group has two guests and one nonguest as members, and an access review of guests is performed for that group, then there are two access review decision objects. If a reviewer changes their decision, or another reviewer overrides them, then the accessReviewDecision is updated.

Methods

None. Objects of this type are automatically created by the feature when an access review initializes, and can't be deleted. They can be retrieved from an access review using the decisions and mydecisions relationships.

Properties

This table illustrates the base properties of objects of this type.

Property Type Description
id String The ID of the decision within the access review.
accessReviewId String The feature-generated ID of the access review.
reviewedBy userIdentity The identity of the reviewer. If the recommendation was used as the review, the userPrincipalName is empty.
reviewedDate DateTimeOffset The date and time the most recent review for this access right was supplied.
reviewResult String The result of the review, one of NotReviewed, Deny, DontKnow or Approve.
justification String The reviewer's business justification, if supplied.
appliedBy userIdentity When the review completes, if the results were manually applied, the user identity of the user who applied the decision. If the review was autoapplied, the userPrincipalName is empty.
appliedDateTime DateTimeOffset The date and time when the review decision was applied.
applyResult String The outcome of applying the decision, one of: NotApplied, Success, Failed, NotFound, NotSupported.
accessRecommendation String The feature- generated recommendation shown to the reviewer, one of: Approve, Deny, NotAvailable.

In addition, more properties can be present depending on the object type of the object possessing the access that was decided upon. For example, if the access review decision is a particular user's group membership or application access, the user who is potentially going to have their access be removed is identified through these properties:

Property Type Description
userId String The ID of user whose access was reviewed.
userDisplayName String The display name of the user whose access was reviewed.
userPrincipalName String The user principal name of the user whose access was reviewed.

Relationships

None. Objects of this type can be retrieved from an access review using the decisions and mydecisions relationships of the accessReview object.

Related content

Method Return Type Description
List accessReview decisions accessReviewDecision collection Get the decisions of an accessReview.
List my accessReview decisions accessReviewDecision collection As a reviewer, get my decisions of an accessReview.

JSON representation

The following JSON representation shows the resource type.

{
"id": "string (identifier)",
"accessReviewId": "string (identifier)",
"reviewedBy": "microsoft.graph.userIdentity",
"reviewedDate": "string (timestamp)",
"reviewResult": "string",
"justification": "string",
"appliedBy": "microsoft.graph.userIdentity",
"appliedDateTime": "string (timestamp)",
"applyResult": "string",
"accessRecommendation": "string",
"userId": "string",
"userDisplayName": "string",
"userPrincipalName": "string"
}