assignmentReviewSettings resource type
Namespace: microsoft.graph
Important
APIs under the /beta
version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Used for the accessReviewSettings property of an access package assignment policy. Provides additional settings to select who must review access package assignments from this policy, and how often they must be reviewed.
Properties
This type has the following properties:
Property | Type | Description |
---|---|---|
accessReviewTimeoutBehavior | accessReviewTimeoutBehavior | The default decision to apply if the request isn't reviewed within the period specified in durationInDays. The possible values are: acceptAccessRecommendation , keepAccess , removeAccess , and unknownFutureValue . |
durationInDays | Int32 | The number of days within which reviewers should provide input. |
isAccessRecommendationEnabled | Boolean | Specifies whether to display recommendations to the reviewer. The default value is true |
isApprovalJustificationRequired | Boolean | Specifies whether the reviewer must provide justification for the approval. The default value is true . |
isEnabled | Boolean | If true, access reviews are required for assignments from this policy. |
recurrenceType | String | The interval for recurrence, such as monthly or quarterly . |
reviewerType | String | Who should be asked to do the review, either Self , Reviewers or Manager . |
reviewers | userSet collection | If the reviewerType is Reviewers , this collection specifies the users who will be reviewers, either by ID or as members of a group, using a collection of singleUser and groupMembers. |
startDateTime | DateTimeOffset | When the first review should start. |
accessReviewTimeoutBehavior values
Member | Description |
---|---|
acceptAccessRecommendation | The review decision to take recommendations from access review to accept/remove access to access package. The general rule for AR recommendations is if last user sign in more than 30 days, it's recommended to remove access to that user. |
keepAccess | The review decision is to keep current access. |
removeAccess | The review decision is to remove access to access package. |
unknownFutureValue | Evolvable enumeration sentinel value. Don't use. |
Relationships
None.
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.assignmentReviewSettings",
"isEnabled": "Boolean",
"recurrenceType": "String",
"reviewerType": "String",
"startDateTime": "String (timestamp)",
"durationInDays": "Integer",
"reviewers": [
{
"@odata.type": "microsoft.graph.singleUser"
}
],
"isAccessRecommendationEnabled": "Boolean",
"isApprovalJustificationRequired": "Boolean",
"accessReviewTimeoutBehavior": "String"
}