Edit

accessReviewInstance: batchApplyCustomDataProvidedResourceDecisions

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Enables reviewers to set the applyResult and applyDescription on all accessReviewInstanceDecisionItem objects in batches by using customDataProvidedResourceId.

NOTE: The access review instance must be in an Applying state.

This API is available in the following national cloud deployments.

Global service US Government L4 US Government L5 (DOD) China operated by 21Vianet
✅ ✅ ✅ ✅

Permissions

Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.

Permission type Least privileged permission Higher privileged permissions
Delegated (work or school account) AccessReview.ReadWrite.All Not available.
Delegated (personal Microsoft account) Not supported. Not supported.
Application AccessReview.ReadWrite.All Not available.

Important

For delegated access using work or school accounts, the signed-in user must be assigned a supported Microsoft Entra role or a custom role that grants the permissions required for this operation. This operation supports the following built-in roles, which provide only the least privilege necessary:

  • To write access reviews of a group or app: User Administrator, Identity Governance Administrator
  • To write access reviews of a Microsoft Entra role: Identity Governance Administrator, Privileged Role Administrator

HTTP request

POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinitionId}/instances/{accessReviewInstanceId}/batchApplyCustomDataProvidedResourceDecisions

Request headers

Name Description
Authorization Bearer {token}. Required. Learn more about authentication and authorization.
Content-Type application/json. Required.
x-accessreviews-version vNext. Required.

Request body

In the request body, supply a JSON representation of the parameters.

The following table lists the parameters when you call this action.

Parameter Type Description
applyResult accessReviewInstanceDecisionItemApplyResult The applyResult for the entity being reviewed. The possible values are: new, appliedSuccessfully, appliedWithUnknownFailure, appliedSuccessfullyButObjectNotFound, applyNotSupported. Required.
applyDescription String If supplied, a description for the applyResult. Optional.
customDataProvidedResourceId String The applyResult will be set on all accessReviewInstanceDecisionItems whose custom data provided resource id matches the supplied customDataProvidedResourceId. Required.

Response

If successful, this action returns a 202 Accepted response code.

Examples

Request

The following example shows a request.

POST https://graph.microsoft.com/beta/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinitionId}/instances/{accessReviewInstanceId}/batchApplyCustomDataProvidedResourceDecisions
Content-Type: application/json

{
  "applyResult": "appliedSuccessfully",
  "applyDescription": "Access was removed from production application: GitHub-app.",
  "customDataProvidedResourceId": "5c728447-be5c-4565-b4d3-cb248b609891"
}

Response

The following example shows the response.

Note: The response object shown here might be shortened for readability.

HTTP/1.1 202 Accepted
  • Last updated on