accessReviewInstanceDecisionItem resource type

Namespace: microsoft.graph

Represents a Microsoft Entra access review decision on an instance of a review. This decision is the determination of an identity's access to a resource for a given accessReviewInstance. accessReviewInstanceDecisionItem is an open type and allows other properties to be passed in.

Each decision item is system-generated based off of the parent accessReviewInstance.

Inherits from entity.

Methods

Method Return type Description
List instance decisions (from an access review instance) accessReviewInstanceDecisionItem collection Get a list of the accessReviewInstanceDecisionItem objects and their properties.
List stage decisions (from a stage of an access review instance) accessReviewInstanceDecisionItem collection Get a list of the accessReviewInstanceDecisionItem objects for a stage of an acecss review instance.
Get accessReviewInstanceDecisionItem Read the properties and relationships of an accessReviewInstanceDecisionItem object.
Update accessReviewInstanceDecisionItem Update the properties of an accessReviewInstanceDecisionItem object.
Filter by current user accessReviewInstanceDecisionItem collection Returns the decision items for which the calling user is the reviewer.

Properties

Property Type Description
accessReviewId String The identifier of the accessReviewInstance parent. Supports $select. Read-only.
appliedBy userIdentity The identifier of the user who applied the decision. Read-only.
appliedDateTime DateTimeOffset The timestamp when the approval decision was applied.00000000-0000-0000-0000-000000000000 if the assigned reviewer hasn't applied the decision or it was automatically applied. The DatetimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Supports $select. Read-only.
applyResult String The result of applying the decision. Possible values: New, AppliedSuccessfully, AppliedWithUnknownFailure, AppliedSuccessfullyButObjectNotFound and ApplyNotSupported. Supports $select, $orderby, and $filter (eq only). Read-only.
decision String Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).
id String The identifier of the decision. Inherited from entity. Supports $select. Read-only.
justification String Justification left by the reviewer when they made the decision.
principal identity Every decision item in an access review represents a principal's access to a resource. This property represents details of the principal. For example, if a decision item represents access of User "Bob" to Group "Sales" - The principal is "Bob" and the resource is "Sales". Principals can be of two types - userIdentity and servicePrincipalIdentity. Supports $select. Read-only.
principalLink String A link to the principal object. For example, https://graph.microsoft.com/v1.0/users/a6c7aecb-cbfd-4763-87ef-e91b4bd509d9. Read-only.
recommendation String A system-generated recommendation for the approval decision based off last interactive sign-in to tenant. The value is Approve if the sign-in is fewer than 30 days after the start of review, Deny if the sign-in is greater than 30 days after, or NoInfoAvailable. Possible values: Approve, Deny, or NoInfoAvailable. Supports $select, $orderby, and $filter (eq only). Read-only.
resource accessReviewInstanceDecisionItemResource Every decision item in an access review represents a principal's access to a resource. This property represents details of the resource. For example, if a decision item represents access of User "Bob" to Group "Sales" - The principal is Bob and the resource is "Sales". Resources can be of multiple types. See accessReviewInstanceDecisionItemResource. Read-only.
resourceLink String A link to the resource. For example, https://graph.microsoft.com/v1.0/servicePrincipals/c86300f3-8695-4320-9f6e-32a2555f5ff8. Supports $select. Read-only.
reviewedBy userIdentity The identifier of the reviewer.00000000-0000-0000-0000-000000000000 if the assigned reviewer hasn't reviewed. Supports $select. Read-only.
reviewedDateTime DateTimeOffset The timestamp when the review decision occurred. Supports $select. Read-only.

Relationships

Relationship Type Description
insights governanceInsight collection Insights are recommendations to reviewers on whether to approve or deny a decision. There can be multiple insights associated with an accessReviewInstanceDecisionItem.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.accessReviewInstanceDecisionItem",
  "accessReviewId": "String",
  "appliedBy": {
    "@odata.type": "microsoft.graph.userIdentity"
  },
  "appliedDateTime": "String (timestamp)",
  "applyResult": "String",
  "decision": "String",
  "id": "String (identifier)",
  "justification": "String",
  "principal": {
    "@odata.type": "microsoft.graph.identity"
  },
  "principalLink": "String",
  "reviewedBy": {
    "@odata.type": "microsoft.graph.userIdentity"
  },
  "reviewedDateTime": "String (timestamp)",
  "recommendation": "String",
  "resource": {
    "@odata.type": "microsoft.graph.accessReviewInstanceDecisionItemResource"
  },
  "resourceLink": "String"
}