governance-production-requests-admin-v2-reference-noEnums-oneOfInheritance.yaml

openapi: 3.0.3
info:
  title: Access Requests - V2
  description: Allows customers to easily access the Okta API
  termsOfService: https://developer.okta.com/terms/
  contact:
    name: Okta Developer Team
    url: https://developer.okta.com/
    email: devex-public@okta.com
  license:
    name: Apache-2.0
    url: https://www.apache.org/licenses/LICENSE-2.0.html
  version: 3.2.0
  x-logo:
    url: logo.svg
    backgroundColor: transparent
    altText: Okta Developer
servers:
  - url: https://{yourOktaDomain}
    variables:
      yourOktaDomain:
        default: subdomain.okta.com
        description: The domain of your organization. This can be a provided subdomain of an official okta domain (okta.com, oktapreview.com, etc) or one of your configured custom domains.
tags:
  - name: Request Conditions
    description: |
      Request conditions define what resources and access levels requesters can request from their resource catalog.

      Each request condition defines the following:

      - Who can request access
      - What resource and access level they can request
      - How long the access should be granted for
      - What request sequence to use for approval
      - A priority to control what condition should take precedence when a requester matches against multiple request conditions

      See [Access request conditions](https://help.okta.com/oie/en-us/content/topics/identity-governance/access-requests/rcar-conditions.htm) for more information on Access request conditions and Identity Governance.
    x-okta-lifecycle:
      lifecycle: GA
  - name: Request Sequences
    description: |-
      The Request Sequences API allows you to retrieve request sequence data necessary for managing request conditions. Request sequences are created in the Okta Access Requets app and define a series of steps (questions, approval tasks, and custom tasks) that must be completed for a requester to gain access to the resource.

      When you create a request condition, you must reference a request sequence. You can reuse request sequences with many request conditions.

      See [Configure an approval sequence](https://help.okta.com/okta_help.htm?type=oie&id=csh-rcar-approval-sequences) in the product documentation.

      > **Note:** Each org has a maximum of 250 request sequences.
    x-okta-lifecycle:
      lifecycle: GA
  - name: Request Settings
    description: |
      Request settings are useful for managing your org's access requests.

      Request settings can be read and updated at the org and resource level.

      The information provided by request settings may be used to determine if another operation, such as creating a request condition, is valid for a particular organization and resource.

      See [Access requests - Get started](https://help.okta.com/oie/en-us/content/topics/identity-governance/access-requests/ar-get-started.htm) for information on setting up access requests for your organization.
    x-okta-lifecycle:
      lifecycle: GA
  - name: Requests
    description: |
      Okta Access Requests automate the process of requesting access to resources managed by access request conditions.

      Access request conditions define the resource to access, who can request access, length of access, and the approval sequence. For more information, see [Access request conditions](https://help.okta.com/okta_help.htm?type=oie&id=csh-rcar-conditions). See also the following APIs: [Request Conditions](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Conditions/#tag/Request-Conditions) and [Request Sequences](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Sequences/#tag/Request-Sequences).

      Manage the access request process directly with the Requests API.

      > **Notes:**
      > * Each org has a maximum of 10,000 open or pending requests.
      > * Each org has a maximum of 50,000 resolved requests that are accessible within an app.

      See [Access Requests](https://help.okta.com/oie/en-us/content/topics/identity-governance/access-requests/ar-overview.htm) for more information on Access Requests and Identity Governance.
    x-okta-lifecycle:
      lifecycle: GA
  - name: Catalogs
    description: |
      A catalog entry represents a requestable resource for [Access Requests](https://help.okta.com/okta_help.htm?type=oie&id=ext-ar). Each requestable app or collection has a top-level entry in the catalog. These are known as parent catalog entries. Associated requestable entitlements and groups also have an entry in the catalog, known as child entries. For example, a top-level entry for Figma might have two child entries, one for requesting read-only access to Figma and one for requesting edit access.

       The `parent` property in the catalog entry object shows the relationship between child and parent. The child entry's `parent` property references their respective parent entry identifier. The parent entry's `parent` property has no value. See the [CATALOG-ENTRY](https://developer.okta.com/docs/api/iga/#CATALOG-ENTRY) diagram in the [Relationships](https://developer.okta.com/docs/api/iga/#relationships) model.

      Use the Catalogs API to request for catalog entries as a principal with admin privileges. You can search for a list of catalog entries based on the entry parent-child relationship using the `filter` query parameter.
    x-okta-lifecycle:
      lifecycle: GA
  - name: Tasks
    description: |
      <x-lifecycle class="beta"></x-lifecycle>

      The Tasks API allows you to manage tasks from access requests made through access request conditions in your Okta Identity Governance (OIG) org.
    x-okta-lifecycle:
      lifecycle: BETA
externalDocs:
  description: Find more info here
  url: https://developer.okta.com/docs/reference/core-okta-api/#design-principles
paths:
  /governance/api/v2/resources/{resourceId}/request-conditions:
    get:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Conditions
      operationId: listResourceRequestConditionsV2
      summary: List all resource request conditions
      description: |
        Lists request conditions for a resource specified by `resourceId`
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.read
      responses:
        '200':
          $ref: '#/components/responses/resource-request-conditions-get-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
    post:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Conditions
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
      operationId: createResourceRequestConditionV2
      summary: Create a request condition
      description: |
        Creates a request condition to govern how a resource can be requested.

        Specify the following to create a request condition:

        - What resource can be requested? (`resourceId` in path)
        - What access scope can be requested? (`accessScopeSettings` in request body)
        - Who can request access? (`requesterSettings` in request body)
        - What is the approval process? (`approvalSequenceId` in request body)

        Any `requesterSettings` or `accessScopeSettings` parameters in the request body are validated against the resource's current request settings.
        After a request condition is created successfully, its `status` is set to `INACTIVE`.

        > **Note:** You can define a maximum of 100 conditions for each resource (app).
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.manage
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/request-condition-creatable'
            examples:
              AppEveryone:
                $ref: '#/components/examples/request-condition-creatable-00-app-everyone'
              AppGroupRequesters:
                $ref: '#/components/examples/request-condition-creatable-01-app-group-requesters'
              AppGroupRequestersFixedDuration:
                $ref: '#/components/examples/request-condition-creatable-02-app-group-requesters-fixed-duration'
              AppEveryoneFixedDuration:
                $ref: '#/components/examples/request-condition-creatable-03-app-everyone-fixed-duration'
              AppGroupRequestersRequesterDuration:
                $ref: '#/components/examples/request-condition-creatable-04-app-group-requesters-requester-duration'
              AppEveryoneRequesterDuration:
                $ref: '#/components/examples/request-condition-creatable-05-app-everyone-requester-duration'
              GroupAccessEveryone:
                $ref: '#/components/examples/request-condition-creatable-06-group-access-scope-everyone'
              GroupAccessGroupRequesters:
                $ref: '#/components/examples/request-condition-creatable-07-group-access-scope-group-requesters'
              GroupAccessGroupRequestersFixedDuration:
                $ref: '#/components/examples/request-condition-creatable-08-group-access-scope-group-requesters-fixed-duration'
              GroupAccessEveryoneFixedDuration:
                $ref: '#/components/examples/request-condition-creatable-09-group-access-scope-everyone-fixed-duration'
              GroupAccessGroupRequestersRequesterDuration:
                $ref: '#/components/examples/request-condition-creatable-10-group-access-scope-group-requesters-requester-duration'
              GroupAccessEveryoneRequesterDuration:
                $ref: '#/components/examples/request-condition-creatable-11-group-access-scope-everyone-requester-duration'
              EntitlementBundleAccessEveryone:
                $ref: '#/components/examples/request-condition-creatable-12-entitlement-bundle-access-scope-everyone'
              EntitlementBundleAccessGroupRequesters:
                $ref: '#/components/examples/request-condition-creatable-13-entitlement-bundle-access-scope-group-requesters'
              EntitlementBundleAccessGroupRequestersFixedDuration:
                $ref: '#/components/examples/request-condition-creatable-14-entitlement-bundle-access-scope-group-requesters-fixed-duration'
              EntitlementBundleAccessEveryoneFixedDuration:
                $ref: '#/components/examples/request-condition-creatable-15-entitlement-bundle-access-scope-everyone-fixed-duration'
              EntitlementBundleAccessGroupRequestersRequesterDuration:
                $ref: '#/components/examples/request-condition-creatable-16-entitlement-bundle-access-scope-group-requesters-requester-duration'
              EntitlementBundleAccessEveryoneRequesterDuration:
                $ref: '#/components/examples/request-condition-creatable-17-entitlement-bundle-access-scope-everyone-requester-duration'
              TeamRequesters:
                $ref: '#/components/examples/request-condition-creatable-18-team-requesters'
              TeamRequestersFixedDuration:
                $ref: '#/components/examples/request-condition-creatable-19-team-requesters-fixed-duration'
              TeamRequestersRequesterDuration:
                $ref: '#/components/examples/request-condition-creatable-20-team-requesters-requester-duration'
      responses:
        '201':
          $ref: '#/components/responses/request-condition-create-success'
        '400':
          $ref: '#/components/responses/request-condition-create-bad-request'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/resources/{resourceId}/request-conditions/{requestConditionId}:
    get:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Conditions
      operationId: getResourceRequestConditionV2
      summary: Retrieve a resource request condition
      description: Retrieves a resource request condition
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
        - $ref: '#/components/parameters/request-condition-id'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.read
      responses:
        '200':
          $ref: '#/components/responses/resource-request-condition-get-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
    delete:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Conditions
      operationId: deleteResourceRequestConditionV2
      summary: Delete a request condition
      description: Deletes a request condition
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
        - $ref: '#/components/parameters/request-condition-id'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.manage
      responses:
        '204':
          $ref: '#/components/responses/request-condition-delete-success-response'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
    patch:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Conditions
      operationId: updateResourceRequestConditionV2
      summary: Update the request condition
      description: |
        Updates the request condition

        Conditions can be updated while their status is ACTIVE, INACTIVE or INVALID.

        An update will be rejected if it would lead to the condition entering an INVALID status.

        While an update request body may not contain `status`, a successful update request condition operation will always result in the condition entering ACTIVE or INACTIVE status.

        Any `requesterSettings`, `accessScopeSettings` in the update request body will be validated against the resource's current request settings.
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
        - $ref: '#/components/parameters/request-condition-id'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.manage
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/request-condition-patchable'
            examples:
              UpdateAllModifiableProperties:
                $ref: '#/components/examples/request-condition-creatable-00-app-everyone'
      responses:
        '200':
          $ref: '#/components/responses/request-condition-patch-success-response'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/resources/{resourceId}/request-conditions/{requestConditionId}/activate:
    post:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Conditions
      operationId: activateResourceRequestConditionV2
      summary: Activate the request condition
      description: |
        Activates the request condition

        Conditions can be activated while their status is INACTIVE.

        Activating a condition allows it to provide catalog entries to endusers.
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
        - $ref: '#/components/parameters/request-condition-id'
      security:
        - OAuth2:
            - okta.accessRequests.condition.manage
      responses:
        '200':
          $ref: '#/components/responses/request-condition-activate-success-response'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '409':
          $ref: '#/components/responses/request-condition-activate-conflict-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/resources/{resourceId}/request-conditions/{requestConditionId}/deactivate:
    post:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Conditions
      operationId: deactivateResourceRequestConditionV2
      summary: Deactivate the request condition
      description: |
        Deactivates the request condition

        Conditions can be deactivated while their status is ACTIVE.

        Deactivating a condition prevents the condition from providing catalog entries to endusers.
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
        - $ref: '#/components/parameters/request-condition-id'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.manage
      responses:
        '200':
          $ref: '#/components/responses/request-condition-deactivate-success-response'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '409':
          $ref: '#/components/responses/request-condition-deactivate-conflict-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/resources/{resourceId}/request-settings:
    get:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Settings
      operationId: getRequestSettingsV2
      summary: Retrieve the resource request settings
      description: |-
        Retrieves the request settings for a resource

        Resource request settings are useful for determining what kind of request conditions
        can be created or updated for a resource.

        For example:

        - `validAccessScopeSettings` indicates what `accessScopeSettings` may be passed in a `Create request condition` or `Update request condition` operation.
        - `validRequesterSettings` indicates what `requesterSettings` may be passed in a `Create request condition` or `Update request condition` operation.
        - `validAccessDurationSettings` indicates the maximum duration the user will have access to the resources.
        - `validRiskSettings` indicates what `riskSettings` may be passed. Currently, it can be at the resource request settings.
        - `validRequestOnBehalfOfSettings` indicates the available request on behalf of settings for the resource. 
        - `requestOnBehalfOfSettings` if they exist, they indicate the settings specified for request on behalf of.
        - `riskSettings` if they exist, they indicate the risk settings specified for the resource.

        See response examples for various possible request setting scenarios.
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.read
      responses:
        '200':
          $ref: '#/components/responses/request-settings-get-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
    patch:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Settings
      operationId: updateResourceRequestSettingsV2
      summary: Update the resource request settings
      description: |
        Updates the resource request settings
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.manage
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/resource-request-settings-patchable'
            examples:
              EnableRequestOnBehalfOfSettings:
                $ref: '#/components/examples/resource-request-setting-patchable-robo-00-everyone-example'
              UpdateRequestOnBehalfOfSettings:
                $ref: '#/components/examples/resource-request-setting-patchable-robo-01-direct-report-example'
              DisableRequestOnBehalfOfSettings:
                $ref: '#/components/examples/resource-request-setting-patchable-robo-02-disable-example'
              RemoveRiskSettings:
                $ref: '#/components/examples/resource-request-setting-patchable-risk-settings-00-request-submission-allowed-with-no-overrides-example'
              UpdateRiskSettingsWithRequestSubmissionRestricted:
                $ref: '#/components/examples/resource-request-setting-patchable-risk-settings-01-request-submission-restricted-example'
              UpdateRiskSettingsWithRequestSubmissionAllowed:
                $ref: '#/components/examples/resource-request-setting-patchable-risk-settings-02-request-submission-allowed-with-overrides-example'
              UpdateRiskSettingsWithRequestSubmissionAllowedWithAds:
                $ref: '#/components/examples/resource-request-setting-patchable-risk-settings-03-request-submission-allowed-with-ads-example'
              UpdateRiskSettingsWithRequestSubmissionAllowedRemoveAds:
                $ref: '#/components/examples/resource-request-setting-patchable-risk-settings-04-request-submission-allowed-remove-ads-example'
              UpdateRiskSettingsWithRobo:
                $ref: '#/components/examples/resource-request-setting-patchable-risk-settings-05-robo-example'
      responses:
        '200':
          $ref: '#/components/responses/resource-request-settings-patch-success'
        '400':
          $ref: '#/components/responses/resource-request-settings-patch-bad-request-response'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/request-settings:
    get:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Settings
      operationId: getOrgRequestSettingsV2
      summary: Retrieve the org request settings
      description: |
        Retrieves the request settings for the org.

        Org request settings indicate:
        - If the Access Requests app has been provisioned
        - If a customer has triggered Access Requests app provisioning in their org
        - The request experiences that are supported
        - If the provisioning for the Access Requests app was triggered a while ago
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.read
      responses:
        '200':
          $ref: '#/components/responses/org-request-settings-get-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
    patch:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Settings
      operationId: updateOrgRequestSettingsV2
      summary: Update the org request settings
      description: |
        Updates the request settings for the org
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.manage
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/org-request-settings-patchable'
            examples:
              PatchExample:
                $ref: '#/components/examples/org-request-settings-patchable-example'
              NotificationsPatchExample:
                $ref: '#/components/examples/org-request-settings-notifications-patchable-example'
              SlackActionsPatchExample:
                $ref: '#/components/examples/org-request-settings-slack-actions-patchable-example'
      responses:
        '200':
          $ref: '#/components/responses/org-request-settings-patch-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/resources/{resourceId}/request-sequences:
    get:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Sequences
      operationId: listResourceRequestSequencesV2
      summary: List all resource request sequences
      description: Lists access request sequences for a resource in your org
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.read
      responses:
        '200':
          $ref: '#/components/responses/request-sequences-get-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/resources/{resourceId}/request-sequences/{sequenceId}:
    get:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Sequences
      parameters:
        - $ref: '#/components/parameters/resource-id-orn-or-okta'
        - $ref: '#/components/parameters/sequence-id-parameter'
      operationId: getResourceRequestSequenceV2
      summary: Retrieve a resource request sequence
      description: Retrieves a access request sequence referenced by the specified resource
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.read
      responses:
        '200':
          $ref: '#/components/responses/request-sequence-get-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/request-sequences/{sequenceId}:
    delete:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Request Sequences
      operationId: deleteRequestSequenceV2
      summary: Delete a request sequence
      description: Deletes the access request sequence given its `id`
      parameters:
        - $ref: '#/components/parameters/sequence-id-parameter'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.condition.manage
      responses:
        '204':
          $ref: '#/components/responses/request-sequence-delete-success-response'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/requests:
    get:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Requests
      operationId: listAllRequestsV2
      summary: List all requests
      description: |
        Lists the requests made by users in your org. Use this operation to retrieve all access requests managed by access request conditions.

        Use the `filter` parameter to narrow down the results. This SCIM query string supports the following attributes:
        - `status`: The status of the request. Possible values: `SUBMITTED`, `REJECTED`, `PENDING`, `APPROVED`, `DENIED`, `CANCELED`, `EXPIRED`
        - `lastUpdated`: The last updated time of the request
        - `requestedFor`: The Okta user ID for whom the request is made
        - `resourceId`: The Okta resource ID for which the request is made
        - `resourceType`: The type of resource for which the request is made. Possible values: `APPLICATION`
        - `accessScopeId`: The ID of the resource access scope for which the request is made
        - `accessScopeType`: The type of the resource access scope for which the request is made. Possible values: `ENTITLEMENT_BUNDLE`, `GROUP`, `APPLICATION`

        Pagination parameters are accepted, and standard link headers are in the response.
      parameters:
        - $ref: '#/components/parameters/request-list-filter'
        - $ref: '#/components/parameters/request-list-after'
        - $ref: '#/components/parameters/limit'
        - $ref: '#/components/parameters/request-list-order-by'
      security:
        - OAuth2:
            - okta.accessRequests.request.read
      responses:
        '200':
          $ref: '#/components/responses/requests-list-success'
        '400':
          $ref: '#/components/responses/requests-list-bad-request'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
    post:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      operationId: createRequestV2
      tags:
        - Requests
      summary: Create a request
      description: |
        Creates a resource access request for a given user.

        Use this operation to create access requests managed by access request conditions.

        If `requestedBy` and `requestedFor` aren't the same, then you must also enable the [`requestOnBehalfOfSettings`](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Settings/#tag/Request-Settings/operation/updateResourceRequestSettingsV2!path=requestOnBehalfOfSettings&t=request) parameter in the access request settings. See [Update the resource request settings](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Settings/#tag/Request-Settings/operation/updateResourceRequestSettingsV2).

        Include the following information in the payload:

        - The Okta user ID for the user who requires access. Add the user ID in the `requestedFor.externalId` parameter.
        - The catalog entry ID of the resource required by the user. Add the catalog ID in the `requested.entryId` parameter.
        - If the request conditions include requester input fields, add field information in the `requesterFieldValues` array. See [Retrieve the request fields](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Catalogs/#tag/Catalogs/operation/getCatalogEntryRequestFieldsV2).
        - Optional: The user ID of the person submitting the request. By default, this value is the admin user ID requesting this operation and doesn't need to be provided. However, to add a different Okta user ID for the request, include the `requestedBy.externalId` parameter in the request body.
      requestBody:
        required: true
        description: The writable attributes of a request
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/request-creatable'
            examples:
              AdminWhenCatalogEntryInboxApprovalNoRequesterInput:
                $ref: '#/components/examples/admin-request-00-create-catalog-inbox-noinput'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.request.manage
      responses:
        '202':
          $ref: '#/components/responses/request-create-success-response'
        '400':
          $ref: '#/components/responses/request-create-bad-request-response'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/request-create-forbidden-response'
        '409':
          $ref: '#/components/responses/request-create-conflict-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/requests/{requestId}:
    get:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Requests
      operationId: getRequestV2
      summary: Retrieve a request
      description: |
        Retrieves the full representation of a specific request

        You can use this endpoint to retrieve access requests managed by access request conditions.

        More information is returned than the abbreviated representation in a List requests operation.
      parameters:
        - $ref: '#/components/parameters/rcar-request-id-parameter'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.request.read
      responses:
        '200':
          $ref: '#/components/responses/request-get-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/requests/{requestId}/messages:
    post:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Requests
      operationId: createRequestMessageV2
      summary: Create a request message
      description: |
        Creates a message to add context to the Access requests using request conditions and sequences. The message appears in the **Requester** section of the Access Requests console, and the message is authored by the admin user ID calling the endpoint.
      parameters:
        - $ref: '#/components/parameters/rcar-request-id-parameter'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.request.manage
      requestBody:
        required: true
        description: The writable attributes of a request message
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/request-message-creatable'
            examples:
              ViewersAll:
                $ref: '#/components/examples/request-message-00-create-message-audience-all'
              ReferenceToAnotherSystem:
                $ref: '#/components/examples/request-message-01-create-message-referencing-another-system'
              MaxMessageLimit:
                $ref: '#/components/examples/request-message-02-create-message-max-message-limit'
      responses:
        '201':
          description: A successful create request message response
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/catalogs/default/entries:
    get:
      x-okta-lifecycle:
        lifecycle: EA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Catalogs
      operationId: listAllDefaultEntriesV2
      parameters:
        - $ref: '#/components/parameters/rcar-entries-list-filter-v2'
        - $ref: '#/components/parameters/rcar-entries-list-after'
        - $ref: '#/components/parameters/rcar-entries-list-match'
        - $ref: '#/components/parameters/rcar-entries-list-limit'
      summary: List all entries for the default access request catalog
      description: |-
        Lists entries for the default access request catalog based on a required `filter` query parameter.

        The following are request examples with a filter expression. In each example, the filter expression includes the mandatory `parent` property.

        1. Lists at most 20 parent (top-level) entries
            ```
            /governance/api/v2/catalogs/default/entries?filter=not(parent%20pr)&limit=20
            ```
        1. Lists the next 20 results of parent entries after a specific cursor
            ```
            /governance/api/v2/catalogs/default/entries?filter=not(parent%20pr)&limit=20&after=cen33e47frfMB93gQ8g6
            ```
        1. Lists at most 8 parent entries with a fuzzy match for "figma"
            ```
            /governance/api/v2/catalogs/default/entries?filter=not(parent%20pr)&match=figma&limit=8
            ```
        1. Lists at most 8 child entries with a specific parent
            ```
            /governance/api/v2/catalogs/default/entries?filter=parent%20eq%20%22cen385AlcdqGaY8HE0g2%22&limit=8
            ```
        1. Lists at most 8 child entries that have "edit" in the name and have a specific parent
            ```
            /governance/api/v2/catalogs/default/entries?filter=parent%20eq%20%22cen385AlcdqGaY8HE0g2%22&match=edit&limit=8
            ```
      security:
        - OAuth2:
            - okta.accessRequests.catalog.read
      responses:
        '200':
          $ref: '#/components/responses/catalog-entries-list-success-v2'
        '400':
          $ref: '#/components/responses/rcar-entries-list-bad-request'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/catalogs/default/entries/{entryId}:
    get:
      x-okta-lifecycle:
        lifecycle: EA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Catalogs
      operationId: getCatalogEntryV2
      parameters:
        - $ref: '#/components/parameters/catalog-entry-id'
      summary: Retrieve a catalog entry
      description: Retrieves a catalog entry
      security:
        - OAuth2:
            - okta.accessRequests.catalog.read
      responses:
        '200':
          $ref: '#/components/responses/rcar-entry-get-success'
        '400':
          $ref: '#/components/responses/list-bad-request'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/catalogs/default/user/{userId}/entries:
    get:
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Catalogs
      operationId: listAllDefaultUserEntriesV2
      parameters:
        - $ref: '#/components/parameters/user-id'
        - $ref: '#/components/parameters/rcar-entries-list-filter-v2'
        - $ref: '#/components/parameters/rcar-entries-list-after'
        - $ref: '#/components/parameters/rcar-entries-list-match'
        - $ref: '#/components/parameters/rcar-entries-list-limit'
      summary: List all access request catalog entries for a user
      description: |-
        Lists access request catalog entries for a user based on a filter (the `filter` query parameter is required)

        The following are request examples with query parameters:

        1. Lists at most 20 parent (top-level) entries
            ```
            /governance/api/v2/catalogs/default/user/{userId}/entries?filter=not(parent%20pr)&limit=20
            ```
        1. Lists the next 20 results of parent entries after a specific cursor
            ```
            /governance/api/v2/catalogs/default/user/{userId}/entries?filter=not(parent%20pr)&limit=20&after=cen33e47frfMB93gQ8g6
            ```
        1. Lists at most 8 parent entries with a string match for "figma"
            ```
            /governance/api/v2/catalogs/default/user/{userId}/entries?filter=not(parent%20pr)&match=figma&limit=8
            ```
        1. Lists at most 8 child entries with a specific parent
            ```
            /governance/api/v2/catalogs/default/user/{userId}/entries?filter=parent%20eq%20%22cen385AlcdqGaY8HE0g2%22&limit=8
            ```
        1. Lists at most 8 child entries that have "edit" in the name and have a specific parent
            ```
            /governance/api/v2/catalogs/default/user/{userId}/entries?filter=parent%20eq%20%22cen385AlcdqGaY8HE0g2%22&match=edit&limit=8
            ```
      security:
        - OAuth2:
            - okta.accessRequests.catalog.read
      responses:
        '200':
          $ref: '#/components/responses/catalog-entries-list-success-v2'
        '400':
          $ref: '#/components/responses/rcar-entries-list-bad-request'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/catalogs/default/entries/{entryId}/users/{userId}/request-fields:
    get:
      x-okta-lifecycle:
        lifecycle: GA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      operationId: getCatalogEntryRequestFieldsV2
      parameters:
        - $ref: '#/components/parameters/catalog-entry-id'
        - $ref: '#/components/parameters/user-id'
      tags:
        - Catalogs
      summary: Retrieve the request fields
      description: |
        Retrieves request fields for a catalog entry:

        * Request fields are determined by evaluating the entry's associated request conditions for the requester.
        * The highest priority matching condition determines the approval sequence that's used for the requester.
        * If that approval sequence has requester fields, then they are returned as request fields.
        * If the request can lead to any separation of duty conflicts, then the risk assessment (`metadata.riskAssessment`) is present. The risk assessment indicates whether the request submission is allowed or restricted, and includes rules that lead to the possible conflicts. If the request submission is allowed, then the request fields are determined by the associated approval sequence.
      security:
        - OAuth2:
            - okta.accessRequests.request.read
      responses:
        '200':
          $ref: '#/components/responses/request-fields-get-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
  /governance/api/v2/tasks:
    get:
      x-okta-lifecycle:
        lifecycle: BETA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Tasks
      operationId: listAllTasksV2
      summary: List all tasks
      description: |
        Lists all tasks from requests made by users in your org. Use this operation to retrieve all tasks from all access requests managed by access request conditions.

        [Pagination](https://developer.okta.com/docs/api/#pagination) parameters are supported, and standard [link headers](https://developer.okta.com/docs/api/#link-header) are returned in the response.
      parameters:
        - $ref: '#/components/parameters/task-list-filter'
        - $ref: '#/components/parameters/limit'
        - $ref: '#/components/parameters/task-list-after'
        - $ref: '#/components/parameters/task-list-order-by'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.tasks.read
      responses:
        '200':
          $ref: '#/components/responses/tasks-list-success'
        '400':
          $ref: '#/components/responses/tasks-list-bad-request'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/tasks/{taskId}:
    get:
      x-okta-lifecycle:
        lifecycle: BETA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Tasks
      operationId: getTaskV2
      summary: Retrieve a task
      description: |
        Retrieves all the details of a specific task.

        Use this operation to retrieve a task from access requests managed by access request conditions. More information is returned than the shortened task details in the [List all tasks](/iga/openapi/governance-production-requests-admin-v2-reference/tasks/listalltasksv2) operation.
      parameters:
        - $ref: '#/components/parameters/task-id-parameter'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.tasks.read
      responses:
        '200':
          $ref: '#/components/responses/task-get-success'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '403':
          $ref: '#/components/responses/authorization-error-response'
        '404':
          $ref: '#/components/responses/resource-not-found-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
    patch:
      x-okta-lifecycle:
        lifecycle: BETA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Tasks
      operationId: updateTaskV2
      summary: Update a task
      description: |
        Updates a task by performing actions such as assigning the task to a new set of task assignees.

        When task assignment is made via this endpoint, the task will be unassigned from any previous task assignees and assigned to the new set of task assignees.
      parameters:
        - $ref: '#/components/parameters/task-id-parameter'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.tasks.manage
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                assignees:
                  type: array
                  minItems: 1
                  items:
                    $ref: '#/components/schemas/task-assignees'
      responses:
        '200':
          $ref: '#/components/responses/task-update-success'
        '400':
          $ref: '#/components/responses/task-update-failed'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
  /governance/api/v2/tasks/{taskId}/resolve:
    post:
      x-okta-lifecycle:
        lifecycle: BETA
      x-okta-iam-admin-roles:
        - ACCESS_REQUESTS_ADMIN
      tags:
        - Tasks
      operationId: resolveTaskV2
      summary: Resolve a task
      description: |
        Resolves a task for an assignee by providing the value of the task resolution
      parameters:
        - $ref: '#/components/parameters/task-id-parameter'
      security:
        - ApiKey:
            - admin
        - OAuth2:
            - okta.accessRequests.tasks.manage
      requestBody:
        required: false
        content:
          application/json:
            schema:
              type: object
              properties:
                value:
                  type: string
                  description: |
                    The value of the task resolution. Required for `APPROVAL` and `QUESTION` type tasks.
                      * For `APPROVAL` type tasks, the only supported values are `APPROVED` or `DENIED`.
                      * For `QUESTION` type tasks, the value is the answer to the question, and can be any string.
                      * For custom `TODO` type tasks, a value string isn't required.
            examples:
              ApproveTaskResolution:
                summary: Approve the task
                description: Only applicable for `APPROVAL` type tasks
                value:
                  value: APPROVED
              DenyTaskResolution:
                summary: Deny the task
                description: Only applicable for `APPROVAL` type tasks
                value:
                  value: DENIED
              QuestionTaskResolution:
                summary: Answer the question
                description: Only applicable for `QUESTION` type tasks
                value:
                  value: Answer to the question
              CustomTaskResolution:
                summary: Mark custom task complete
                description: Request body not required for custom `TODO` type tasks
                value: {}
      responses:
        '200':
          $ref: '#/components/responses/task-resolve-success'
        '400':
          $ref: '#/components/responses/task-resolve-failed'
        '401':
          $ref: '#/components/responses/authentication-error-response'
        '429':
          $ref: '#/components/responses/rate-limit-exceeded-response'
        '500':
          $ref: '#/components/responses/unexpected-error-response'
components:
  securitySchemes:
    OAuth2:
      type: oauth2
      description: 'Pass the `access_token` as the value of the Authorization header: `Authorization: Bearer {access_token}`. See [Make a request](https://developer.okta.com/docs/guides/implement-oauth-for-okta-serviceapp/main/#make-a-request).'
      flows:
        authorizationCode:
          authorizationUrl: /oauth2/v1/authorize
          tokenUrl: /oauth2/v1/token
          scopes:
            okta.governance.accessCertifications.manage: Allows the app to create and manage Access Certification Campaigns
            okta.governance.accessCertifications.read: Allows the app to read information about Access Certification Campaigns and Reviews in your Okta org
            okta.governance.accessRequests.manage: Allows the app to create and manage V1 Access Requests, Request Types, and Teams
            okta.governance.accessRequests.read: Allows the app to read information about V1 Access Requests, Request Types, and Teams in your Okta org
            okta.governance.entitlements.read: Allows the app to read information about Entitlements, Entitlement bundles, and Grants
            okta.governance.entitlements.manage: Allows the app to create and manage Entitlements, Entitlement bundles, and Grants
            okta.accessRequests.catalog.read: Allows the app to read information about Access Request Catalogs in your Okta org
            okta.accessRequests.condition.manage: Allows the app to create and manage Conditions for the Access Request Resource Catalog
            okta.accessRequests.condition.read: Allows the app to read information about Conditions for the Access Request Resource Catalog
            okta.accessRequests.request.manage: Allows the app to create and manage V2 Access Requests through the Access Request Resource Catalog
            okta.accessRequests.request.read: Allows the app to read information about V2 Access Requests created through the Access Requests Resource Catalog
            okta.governance.collections.manage: Allows the app to create and manage collections
            okta.governance.collections.read: Allows the app to read information about collections in your Okta org
            okta.governance.operations.read: Allows the app to read information about asynchronous operations in your Okta org
            okta.governance.riskRule.manage: Allows the app to create and manage rules
            okta.governance.riskRule.read: Allows the app to read information about rules in your Okta org
            okta.governance.resourceOwner.manage: Allows the app to create and manage resource owners
            okta.governance.resourceOwner.read: Allows the app to read information about resource owners in your Okta org
            okta.governance.labels.manage: Allows the user to create and manage labels
            okta.governance.labels.read: Allows the user to read information about labels in your Okta org
            okta.governance.securityAccessReviews.admin.manage: Allows the admin app to create and manage security access reviews
            okta.governance.securityAccessReviews.admin.read: Allows the admin app to read information about security access reviews
            okta.governance.securityAccessReviews.endUser.manage: Allows the end-user app to create and manage security access reviews
            okta.governance.securityAccessReviews.endUser.read: Allows the end-user app to read information about security access reviews
            okta.governance.principalSettings.manage: Allows the app to create and manage governance settings for any user in your Okta org
            okta.governance.principalSettings.read: Allows the app to read information about governance settings for any user in your Okta org
            okta.governance.settings.manage: Allows the app to create and manage governance settings for your Okta org
            okta.governance.settings.read: Allows the app to read information about governance settings for your Okta org
            okta.governance.delegates.read: Allows the app to read information about delegates in your Okta org
            okta.governance.reviewer.read: Allows the end user to read information about access certification reviews assigned to them
            okta.governance.reviewer.manage: Allows the end user to manage access certification reviews assigned to them
            okta.accessRequests.tasks.manage: Allows the user to manage tasks for access requests in your Okta org
            okta.accessRequests.tasks.read: Allows the user to read information about tasks for access requests in your Okta org
    ApiKey:
      type: apiKey
      name: Authorization
      in: header
      description: 'Pass the API token as the Authorization header value prefixed with SSWS: `Authorization: SSWS {API Token}`.'
  schemas:
    scim-filter:
      type: string
      format: scim-filter
    writable-standard-properties-request-condition:
      type: object
      properties:
        name:
          type: string
          nullable: false
          description: Writable unique key on create. Modifiable on update.
          maxLength: 255
          minLength: 1
        description:
          type: string
          nullable: false
          description: Human readable description
          maxLength: 2000
          minLength: 1
    created-by:
      description: The `id` of the Okta user who created the resource
      type: string
      x-okta-ignore-redocly-rules-for-sdk: true
      readOnly: true
      minLength: 1
      maxLength: 20
      format: okta-user-id
    created:
      description: The ISO 8601 formatted date and time when the resource was created
      type: string
      x-okta-ignore-redocly-rules-for-sdk: true
      format: date-time
      readOnly: true
    last-updated:
      description: The ISO 8601 formatted date and time when the object was last updated
      type: string
      format: date-time
      readOnly: true
    last-updated-by:
      description: The `id` of the Okta user who last updated the object
      type: string
      x-okta-ignore-redocly-rules-for-sdk: true
      readOnly: true
      minLength: 1
      maxLength: 20
      format: okta-user-id
    link:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      description: A link to a related RESTful resource
      required:
        - href
      properties:
        name:
          type: string
          description: Link name
        rel:
          type: string
          description: Link relation
        href:
          type: string
          minLength: 1
          description: Link URI
        type:
          type: string
          description: The media type of the link. If omitted, it's implicitly `application/json`.
        method:
          type: string
          deprecated: true
        templated:
          type: boolean
          description: Indicates whether the link object's `href` property is a URI template
        hints:
          type: object
          description: Link hints
          additionalProperties:
            type: array
            items:
              type: string
        title:
          type: string
          description: Link title or label
    read-only-standard-properties:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      required:
        - id
        - createdBy
        - created
        - lastUpdated
        - lastUpdatedBy
      properties:
        id:
          description: Unique identifier for the object
          type: string
          minLength: 1
        createdBy:
          $ref: '#/components/schemas/created-by'
        created:
          $ref: '#/components/schemas/created'
        lastUpdated:
          $ref: '#/components/schemas/last-updated'
        lastUpdatedBy:
          $ref: '#/components/schemas/last-updated-by'
        _links:
          type: object
          description: Links to related resources
          additionalProperties:
            $ref: '#/components/schemas/link'
    request-condition-id:
      type: string
      maxLength: 20
      minLength: 20
      format: request-condition-id
      pattern: rco[0-9a-zA-Z]+
      description: The ID of the request condition
      example: rcord7d69lUIn7u5D1d5
    request-condition-status:
      type: string
      description: status indicating if this condition is active or not. Default status is INACTIVE
      x-okta-known-values:
        - ACTIVE
        - INACTIVE
        - INVALID
        - DELETED
    priority:
      type: integer
      description: The priority of the condition. The smaller the number, the higher the priority. The highest priority is 0. A new condition will default to the lowest priority.
      minimum: 0
    request-condition-links:
      type: object
      description: Links available on a single request condition representation.
      required:
        - self
      properties:
        self:
          $ref: '#/components/schemas/link'
    request-condition-read-only:
      type: object
      description: |
        Read only properties that are common to sparse and full condition representations.
      properties:
        id:
          $ref: '#/components/schemas/request-condition-id'
        status:
          $ref: '#/components/schemas/request-condition-status'
        priority:
          $ref: '#/components/schemas/priority'
        _links:
          $ref: '#/components/schemas/request-condition-links'
      required:
        - id
        - status
        - priority
        - _links
    requester-settings-type:
      type: string
      x-okta-known-values:
        - EVERYONE
        - GROUPS
        - TEAMS
    RequesterSettings:
      type: object
      description: |
        Sparse representaion of requester settings which define who may submit an access request for the related resource and access scopes.
      properties:
        type:
          $ref: '#/components/schemas/requester-settings-type'
    access-scope-settings-type:
      type: string
      x-okta-known-values:
        - RESOURCE_DEFAULT
        - ENTITLEMENT_BUNDLES
        - GROUPS
    AccessScopeSettings:
      type: object
      properties:
        type:
          $ref: '#/components/schemas/access-scope-settings-type'
    access-duration-duration:
      type: string
      format: duration
      example: PT24H
      description: |-
        The duration set by the admin for access durations. Use the [ISO 8601](https://tc39.es/proposal-temporal/docs/duration.html) duration notation for duration values.
        You can configure up to 365 days (`P365D`) or 52 weeks (`P52W`) as the maximum access duration of a request.
    access-duration-settings-admin-fixed-duration:
      type: object
      description: Settings when the access duration is specified by the admin
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - ADMIN_FIXED_DURATION
        duration:
          $ref: '#/components/schemas/access-duration-duration'
      required:
        - type
        - duration
    access-duration-max-duration:
      type: string
      format: duration
      example: PT24H
      description: |-
        The maximum duration set by the requester for access durations. Use the [ISO 8601](https://tc39.es/proposal-temporal/docs/duration.html) duration notation for duration values.
        You can configure up to 365 days (`P365D`) or 52 weeks (`P52W`) as the maximum access duration of a request.
    access-duration-settings-requester-specified-duration:
      type: object
      description: Setting to specify the maximum duration that an end user can request access for when making a request
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - REQUESTER_SPECIFIED_DURATION
        maximumDuration:
          $ref: '#/components/schemas/access-duration-max-duration'
      required:
        - type
        - maximumDuration
    access-duration-settings-full:
      type: object
      description: |-
        Settings that control who may specify the access duration allowed by this request condition or risk settings, as well as what duration may be requested.

        > **Note:** The resource request settings affect which access duration settings are valid. See the `validAccessDurationSettings` property.
      discriminator:
        propertyName: type
        mapping:
          ADMIN_FIXED_DURATION: '#/components/schemas/access-duration-settings-admin-fixed-duration'
          REQUESTER_SPECIFIED_DURATION: '#/components/schemas/access-duration-settings-requester-specified-duration'
      oneOf:
        - $ref: '#/components/schemas/access-duration-settings-admin-fixed-duration'
        - $ref: '#/components/schemas/access-duration-settings-requester-specified-duration'
    approval-sequence-id-read-only:
      type: string
      description: If an approval sequence was deleted, then conditions referencing it will become invalid and the approvalSequenceId will not be present.
      minLength: 24
      maxLength: 24
    request-condition-sparse:
      type: object
      description: |
        A condition delineates the criteria governing access requests, specifying the requester's identity, the permitted access scope, and the manner in which access can be requested.
      allOf:
        - $ref: '#/components/schemas/writable-standard-properties-request-condition'
        - $ref: '#/components/schemas/read-only-standard-properties'
        - $ref: '#/components/schemas/request-condition-read-only'
      properties:
        requesterSettings:
          $ref: '#/components/schemas/RequesterSettings'
        accessScopeSettings:
          $ref: '#/components/schemas/AccessScopeSettings'
        accessDurationSettings:
          $ref: '#/components/schemas/access-duration-settings-full'
        approvalSequenceId:
          $ref: '#/components/schemas/approval-sequence-id-read-only'
      required:
        - id
        - name
        - lastUpdated
        - lastUpdatedBy
        - requesterSettings
        - accessScopeSettings
        - status
        - priority
        - _links
    request-conditions-links:
      type: object
      description: Links available in request condition list response
      required:
        - self
      properties:
        self:
          $ref: '#/components/schemas/link'
        next:
          $ref: '#/components/schemas/link'
    request-conditions-list:
      type: object
      required:
        - data
        - _links
      properties:
        data:
          description: All request conditions
          type: array
          items:
            $ref: '#/components/schemas/request-condition-sparse'
        _links:
          $ref: '#/components/schemas/request-conditions-links'
    error-cause:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      description: A specific cause of an error
      required:
        - errorSummary
      properties:
        errorSummary:
          type: string
          description: A more specific summary for the error that contains the error cause
        reason:
          type: string
          description: An enumerated value to represent the reason why the error occurred. This enumeration allows codes to adapt to different conditions in which an error code can occur.
        location:
          type: string
          description: A value that represents the key where the error cause occurred. This is used with `locationType` to give a holistic view of where the error cause occurred. For example, if `locationType` is `body`, `location` is `username`, and the `reason` was `UNIQUE_CONSTRAINT`, you can derive that the username was already taken.
        locationType:
          type: string
          description: A value that represents where the error cause occurred. For example, in the body or header of the request. This value isn't required for cases where the request is correct, but there was another reason why the error occurred (server-side state conflict, rate limit violation, and so on).
        domain:
          type: string
          description: A value that represents the domain of the service in which the error occurs. This value is used to isolate the error cause reason.
    error:
      type: object
      description: An Error object
      required:
        - errorCode
        - errorId
        - errorSummary
      properties:
        errorCode:
          type: string
          description: An error code unique to the error
        errorId:
          type: string
          description: An error identifier useful for troubleshooting an error with support
        errorSummary:
          type: string
          description: An error code description detailing the error
        errorLink:
          type: string
          description: An indicator of where to look to troubleshoot the error
        errorCauses:
          type: array
          description: An optional array of string values that explain possible reasons for the error
          items:
            $ref: '#/components/schemas/error-cause'
    EveryoneRequesterSettings:
      type: object
      description: A requester settings indicating that access request can be submitted by anyone.
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - EVERYONE
      required:
        - type
    group-id:
      type: string
      format: okta-group-id
      description: |
        Okta group ID.

        > **Note:** See [List all groups](https://developer.okta.com/docs/api/openapi/okta-management/management/group/listgroups) for more information on how to retrieve group IDs.
      pattern: 00g[0-9a-zA-Z]+
      maxLength: 20
      minLength: 20
    groups-array-full:
      type: array
      description: |
        A request condition may have a zero item array if it is in an INVALID state.
        Otherwise, there will be at least one item.
      items:
        type: object
        properties:
          id:
            $ref: '#/components/schemas/group-id'
        required:
          - id
        minItems: 0
        maxItems: 100
    GroupsRequesterSettings:
      type: object
      description: A requester settings indicating that access request can be submitted by specific groups.
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - GROUPS
        groups:
          description: groups whos members can file an access request
          $ref: '#/components/schemas/groups-array-full'
      required:
        - type
        - groups
    team-id:
      type: string
      maxLength: 24
      minLength: 24
      pattern: ^[a-fA-F\d]{24}$
      format: team-id
      description: |
        Unique identifier for the access request team
    teams-array-full:
      type: array
      description: |
        A request condition may have a zero item array if it is in an INVALID state.
        Otherwise, there will be at least one item.
      items:
        type: object
        properties:
          id:
            $ref: '#/components/schemas/team-id'
        required:
          - id
        minItems: 0
        maxItems: 100
    TeamsRequesterSettings:
      type: object
      description: A requester settings indicating that access request can be submitted by specific teams.
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - TEAMS
        teams:
          description: teams whos members can file an access request
          $ref: '#/components/schemas/teams-array-full'
      required:
        - type
        - teams
    requester-settings-full_RequesterSettings:
      type: object
      description: |
        Requester settings define who may submit an access request for the related resource and access scopes.
      discriminator:
        propertyName: type
        mapping:
          EVERYONE: '#/components/schemas/EveryoneRequesterSettings'
          GROUPS: '#/components/schemas/GroupsRequesterSettings'
          TEAMS: '#/components/schemas/TeamsRequesterSettings'
      oneOf:
        - $ref: '#/components/schemas/EveryoneRequesterSettings'
        - $ref: '#/components/schemas/GroupsRequesterSettings'
        - $ref: '#/components/schemas/TeamsRequesterSettings'
    ResourceDefaultAccessScopeSettings:
      type: object
      description: |
        Default Access scope settings associated with the condition's resource.
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - RESOURCE_DEFAULT
      required:
        - type
    entitlement-bundle-id:
      type: string
      maxLength: 20
      minLength: 20
      format: entitlement-bundle-id
      pattern: enb[0-9a-zA-Z]+
      description: |
        The entitlement bundle `id`
    entitlement-bundles-array-full:
      type: array
      description: |
        A request condition may have a zero item array if it is in an INVALID state.
        Otherwise, there will be at least one item.
      items:
        type: object
        description: Entitlement bundle id and entitlement bundle name that is made requestable
        properties:
          id:
            $ref: '#/components/schemas/entitlement-bundle-id'
        required:
          - id
      minItems: 0
      maxItems: 100
    EntitlementBundleAccessScopeSettings:
      type: object
      description: Settings when the resource uses entitlement bundles for access scoping.
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - ENTITLEMENT_BUNDLES
        entitlementBundles:
          $ref: '#/components/schemas/entitlement-bundles-array-full'
      required:
        - type
        - entitlementBundles
    GroupAccessScopeSettings:
      type: object
      description: Settings when the resource uses groups for access scoping.
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - GROUPS
        groups:
          $ref: '#/components/schemas/groups-array-full'
      required:
        - type
        - groups
    access-scope-settings-full_AccessScopeSettings:
      type: object
      description: |
        Settings specifying if groups or entitlements may be used for requesting finer grained access
      discriminator:
        propertyName: type
        mapping:
          RESOURCE_DEFAULT: '#/components/schemas/ResourceDefaultAccessScopeSettings'
          ENTITLEMENT_BUNDLES: '#/components/schemas/EntitlementBundleAccessScopeSettings'
          GROUPS: '#/components/schemas/GroupAccessScopeSettings'
      oneOf:
        - $ref: '#/components/schemas/ResourceDefaultAccessScopeSettings'
        - $ref: '#/components/schemas/EntitlementBundleAccessScopeSettings'
        - $ref: '#/components/schemas/GroupAccessScopeSettings'
    request-condition-full:
      type: object
      description: |
        A condition delineates the criteria governing access requests, specifying the requester's identity, the permitted access scope, and the manner in which access can be requested.
      allOf:
        - $ref: '#/components/schemas/writable-standard-properties-request-condition'
        - $ref: '#/components/schemas/read-only-standard-properties'
        - $ref: '#/components/schemas/request-condition-read-only'
      properties:
        requesterSettings:
          $ref: '#/components/schemas/requester-settings-full_RequesterSettings'
        accessScopeSettings:
          $ref: '#/components/schemas/access-scope-settings-full_AccessScopeSettings'
        accessDurationSettings:
          $ref: '#/components/schemas/access-duration-settings-full'
        approvalSequenceId:
          $ref: '#/components/schemas/approval-sequence-id-read-only'
      required:
        - id
        - name
        - lastUpdated
        - lastUpdatedBy
        - requesterSettings
        - accessScopeSettings
        - status
        - priority
        - _links
    groups-array-creatable:
      type: array
      description: |-
        List of requestable groups

        > **Note:** Both standard Okta groups and AD-sourced groups are supported in Access Requests.
        > Standard Okta groups have the `okta:user_group` value, whereas AD-sourced groups have the `okta:windows_security_principal` value in their `objectClass` property.
      items:
        type: object
        properties:
          id:
            $ref: '#/components/schemas/group-id'
        required:
          - id
      minItems: 1
    requester-settings-creatable_GroupsRequesterSettings:
      type: object
      description: A requester settings indicating that access request can be submitted by specific groups.
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - GROUPS
        groups:
          description: Groups whose members can file an access request
          $ref: '#/components/schemas/groups-array-creatable'
      required:
        - type
        - groups
    teams-array-creatable:
      type: array
      items:
        type: object
        properties:
          id:
            $ref: '#/components/schemas/team-id'
        required:
          - id
        minItems: 1
    requester-settings-creatable_TeamsRequesterSettings:
      type: object
      description: A requester settings indicating that access request can be submitted by specific teams.
      additionalProperties: false
      properties:
        type:
          type: string
          enum:
            - TEAMS
        teams:
          description: Teams whose members can file an access request
          $ref: '#/components/schemas/teams-array-creatable'
      required:
        - type
        - teams
    requester-settings-creatable_RequesterSettings:
      type: object
      description: |
        Requester settings define who may submit an access request for the related resource and access scopes.
      discriminator:
        propertyName: type
        mapping:
          EVERYONE: '#/components/schemas/EveryoneRequesterSettings'
          GROUPS: '#/components/schemas/requester-settings-creatable_GroupsRequesterSettings'
          TEAMS: '#/components/schemas/requester-settings-creatable_TeamsRequesterSettings'
      oneOf:
        - $ref: '#/components/schemas/EveryoneRequesterSettings'
        - $ref: '#/components/schemas/requester-settings-creatable_GroupsRequesterSettings'
        - $ref: '#/components/schemas/requester-settings-creatable_TeamsRequesterSettings'
    access-scope-settings-creatable_ResourceDefaultAccessScopeSettings:
      type: object
      additionalProperties: false
      description: |
        Default access scope settings associated with the requesting resource
      properties:
        type:
          type: string
          description: Request for resource access
          enum:
            - RESOURCE_DEFAULT
      required:
        - type
    entitlement-bundles-array-creatable:
      type: array
      description: Entitlement bundles that are made requestable
      items:
        type: object
        description: Entitlement bundle ID that is made requestable
        properties:
          id:
            type: string
            description: Entitlement bundle ID
        required:
          - id
      minItems: 1
    access-scope-settings-creatable_EntitlementBundleAccessScopeSettings:
      type: object
      description: Access scope settings that resource permissions are entitlement bundles.
      additionalProperties: false
      properties:
        type:
          type: string
          description: Request for access to entitlement bundles
          enum:
            - ENTITLEMENT_BUNDLES
        entitlementBundles:
          $ref: '#/components/schemas/entitlement-bundles-array-creatable'
      required:
        - type
        - entitlementBundles
    access-scope-settings-creatable_GroupAccessScopeSettings:
      type: object
      description: Access scope settings that resource permissions are groups.
      additionalProperties: false
      properties:
        type:
          type: string
          description: Request for access to groups
          enum:
            - GROUPS
        groups:
          $ref: '#/components/schemas/groups-array-creatable'
      required:
        - type
        - groups
    access-scope-settings-creatable_AccessScopeSettings:
      type: object
      description: Settings for the access request scope (such as groups, entitlement bundles, or default resources)
      discriminator:
        propertyName: type
        mapping:
          RESOURCE_DEFAULT: '#/components/schemas/access-scope-settings-creatable_ResourceDefaultAccessScopeSettings'
          ENTITLEMENT_BUNDLES: '#/components/schemas/access-scope-settings-creatable_EntitlementBundleAccessScopeSettings'
          GROUPS: '#/components/schemas/access-scope-settings-creatable_GroupAccessScopeSettings'
      oneOf:
        - $ref: '#/components/schemas/access-scope-settings-creatable_ResourceDefaultAccessScopeSettings'
        - $ref: '#/components/schemas/access-scope-settings-creatable_EntitlementBundleAccessScopeSettings'
        - $ref: '#/components/schemas/access-scope-settings-creatable_GroupAccessScopeSettings'
    access-duration-settings-creatable:
      type: object
      description: |
        Settings that control who may specify the access duration allowed by this request condition or risk settings, as well as what duration may be requested.

        **Note:** The resource request settings affect what access duration settings are valid. See the `validAccessDurationSettings` property.
      discriminator:
        propertyName: type
        mapping:
          ADMIN_FIXED_DURATION: '#/components/schemas/access-duration-settings-admin-fixed-duration'
          REQUESTER_SPECIFIED_DURATION: '#/components/schemas/access-duration-settings-requester-specified-duration'
      oneOf:
        - $ref: '#/components/schemas/access-duration-settings-admin-fixed-duration'
        - $ref: '#/components/schemas/access-duration-settings-requester-specified-duration'
    approval-sequence-id:
      type: string
      description: Unique identifier for the approval sequence
      minLength: 24
      maxLength: 24
    request-condition-creatable:
      type: object
      description: |
        A condition defines who can request which resource (with what resource permissions) and what is the approval process if requested.
      allOf:
        - $ref: '#/components/schemas/writable-standard-properties-request-condition'
      properties:
        requesterSettings:
          $ref: '#/components/schemas/requester-settings-creatable_RequesterSettings'
        accessScopeSettings:
          $ref: '#/components/schemas/access-scope-settings-creatable_AccessScopeSettings'
        accessDurationSettings:
          $ref: '#/components/schemas/access-duration-settings-creatable'
        approvalSequenceId:
          $ref: '#/components/schemas/approval-sequence-id'
        priority:
          $ref: '#/components/schemas/priority'
      required:
        - name
        - requesterSettings
        - approvalSequenceId
        - accessScopeSettings
    access-duration-settings-patchable:
      type: object
      nullable: true
      description: |-
        Settings that control who may specify the access duration allowed by this request condition, as well as what duration may be requested.

        > **Note:** The resource request settings affect which access duration settings are valid. See the `validAccessDurationSettings` property.
      discriminator:
        propertyName: type
        mapping:
          ADMIN_FIXED_DURATION: '#/components/schemas/access-duration-settings-admin-fixed-duration'
          REQUESTER_SPECIFIED_DURATION: '#/components/schemas/access-duration-settings-requester-specified-duration'
      oneOf:
        - $ref: '#/components/schemas/access-duration-settings-admin-fixed-duration'
        - $ref: '#/components/schemas/access-duration-settings-requester-specified-duration'
    request-condition-patchable:
      type: object
      description: |
        A condition defines who can request which resource (with what resource permissions) and what is the approval process if requested.
      allOf:
        - $ref: '#/components/schemas/writable-standard-properties-request-condition'
      properties:
        requesterSettings:
          $ref: '#/components/schemas/requester-settings-creatable_RequesterSettings'
        accessScopeSettings:
          $ref: '#/components/schemas/access-scope-settings-creatable_AccessScopeSettings'
        accessDurationSettings:
          $ref: '#/components/schemas/access-duration-settings-patchable'
        approvalSequenceId:
          $ref: '#/components/schemas/approval-sequence-id'
        priority:
          $ref: '#/components/schemas/priority'
    request-condition-service-status-enum:
      type: string
      description: status describes the request condition service status for the current org.
      x-okta-known-values:
        - READY
        - LIVE
    request-condition-service-status:
      type: object
      description: An object describes the status of request condition service.
      properties:
        status:
          $ref: '#/components/schemas/request-condition-service-status-enum'
      required:
        - status
    valid-access-detail:
      type: object
      properties:
        type:
          $ref: '#/components/schemas/access-scope-settings-type'
    valid-access-details:
      type: array
      description: Access scope settings that are eligible to be added to a request condition for the specified resource
      items:
        $ref: '#/components/schemas/valid-access-detail'
      minItems: 0
      maxItems: 3
    valid-requester-setting:
      type: object
      properties:
        type:
          $ref: '#/components/schemas/requester-settings-type'
    valid-requester-settings-details:
      type: array
      description: Request scope settings that are eligible to be added to a request condition for the specified resource
      items:
        $ref: '#/components/schemas/valid-requester-setting'
      minItems: 0
      maxItems: 3
    access-duration-type:
      type: string
      description: Identifies by whom the time settings were specified
      x-okta-known-values:
        - ADMIN_FIXED_DURATION
        - REQUESTER_SPECIFIED_DURATION
    valid-access-duration-type:
      type: object
      properties:
        type:
          $ref: '#/components/schemas/access-duration-type'
    valid-access-duration-settings-details:
      type: object
      description: Admin specified access duration settings added to a request condition or risk settings for the specified resource
      properties:
        supportedTypes:
          type: array
          description: Access duration settings that are eligible to be added to a request condition or risk settings for the specified resource.
          items:
            $ref: '#/components/schemas/valid-access-duration-type'
          minItems: 0
          maxItems: 2
        required:
          type: boolean
          description: Whether `accessDurationSetting` must be included in the request conditions or risk settings for the specified resource.
        maximumDays:
          type: number
          minimum: 1
          maximum: 365
          description: |
            The maximum number of days allowed from the `accessDurationSettings.duration` day expression for a request condition or risk settings, such as `P30D`.
            For example, if `accessDurationSettings.duration` is `P365D`, then the maximum number of days for this request is `365`.
        maximumHours:
          type: number
          minimum: 1
          maximum: 72
          description: |
            The minimum and maximum values allowed in `accessDurationSettings.duration` expression for a request condition or risk settings,
            when that expression contains hour units. For example: `P5H` is valid, and `P73H` is not.
        maximumWeeks:
          type: number
          minimum: 1
          maximum: 52
          description: |
            The maximum number of weeks allowed from the `accessDurationSettings.duration` week expression for request condition or risk settings, such as `P3W`.
            For example, if `accessDurationSettings.duration` is `P52W`, then the maximum number of weeks is `52`.
    request-on-behalf-of-type:
      type: string
      x-okta-known-values:
        - DIRECT_REPORT
    request-on-behalf-of-settings-details:
      type: object
      description: Specifies if and for whom a requester may request the resource for.
      required:
        - allowed
      properties:
        allowed:
          type: boolean
          description: Indicates that users who can request this resource could also request for another requester of the same resource
        onlyFor:
          type: array
          description: Which requesters the resource requester can request on behalf of. If onlyFor is not specified then any requester may request a resource on the behalf of any other user
          items:
            $ref: '#/components/schemas/request-on-behalf-of-type'
          minItems: 1
    valid-risk-settings-type:
      type: object
      properties:
        type:
          type: string
          enum:
            - DEFAULT_SETTING
    valid-risk-settings-details:
      type: object
      description: Risk settings that are eligible for the specified resource
      required:
        - supportedTypes
      properties:
        supportedTypes:
          type: array
          description: Risk settings that are eligible for the specified resource
          items:
            $ref: '#/components/schemas/valid-risk-settings-type'
    risk-settings-error:
      type: string
      description: |
        Error that has occurred with the risk settings. Currently, there is only error when an associated approval sequence was deleted.
      x-okta-known-values:
        - INVALID_SEQUENCE
    risk-settings-default-allowed-with-no-overrides-details:
      type: object
      description: Risk settings where request submission is allowed with no overrides.
      required:
        - requestSubmissionType
      properties:
        requestSubmissionType:
          type: string
          enum:
            - ALLOWED_WITH_NO_OVERRIDES
        error:
          type: array
          items:
            $ref: '#/components/schemas/risk-settings-error'
    risk-settings-default-allowed-with-overrides-details:
      type: object
      description: Risk settings where request submission is allowed with specified approval sequence and optional access duration settings
      required:
        - requestSubmissionType
        - approvalSequenceId
      properties:
        requestSubmissionType:
          type: string
          enum:
            - ALLOWED_WITH_OVERRIDES
        approvalSequenceId:
          $ref: '#/components/schemas/approval-sequence-id'
        accessDurationSettings:
          $ref: '#/components/schemas/access-duration-settings-full'
        error:
          type: array
          items:
            $ref: '#/components/schemas/risk-settings-error'
    risk-settings-default-restricted-details:
      type: object
      description: Risk settings where request submission is restricted. Access duration settings can only be present when there is an error.
      required:
        - requestSubmissionType
      properties:
        requestSubmissionType:
          type: string
          enum:
            - RESTRICTED
        accessDurationSettings:
          $ref: '#/components/schemas/access-duration-settings-full'
        error:
          type: array
          items:
            $ref: '#/components/schemas/risk-settings-error'
    risk-settings-default-details:
      type: object
      description: |
        Default risk settings that are valid for an access request when a risk has been detected for the resource and requesting user.
        Request submission indicates whether users are allowed or restricted to submit a request when there is any risk conflict. 
        An approval sequence must be selected with optional access duration settings here for `ALLOWED_WITH_OVERRIDES`, while the 
        settings from the matching request condition would apply for `ALLOWED_WITH_NO_OVERRIDES`. For `RESTRICTED`, access duration
        settings can only be present when there is an error.
      discriminator:
        propertyName: requestSubmissionType
        mapping:
          ALLOWED_WITH_NO_OVERRIDES: '#/components/schemas/risk-settings-default-allowed-with-no-overrides-details'
          ALLOWED_WITH_OVERRIDES: '#/components/schemas/risk-settings-default-allowed-with-overrides-details'
          RESTRICTED: '#/components/schemas/risk-settings-default-restricted-details'
      oneOf:
        - $ref: '#/components/schemas/risk-settings-default-allowed-with-no-overrides-details'
        - $ref: '#/components/schemas/risk-settings-default-allowed-with-overrides-details'
        - $ref: '#/components/schemas/risk-settings-default-restricted-details'
    risk-settings-details:
      type: object
      description: Risk settings that are valid for an access request when a risk has been detected for the resource and requesting user
      required:
        - defaultSetting
      properties:
        defaultSetting:
          $ref: '#/components/schemas/risk-settings-default-details'
    request-on-behalf-of-settings-type:
      type: string
      description: Resource that can request access on behalf of others
      x-okta-known-values:
        - EVERYONE
        - DIRECT_REPORT
    valid-request-on-behalf-of-setting:
      type: object
      properties:
        type:
          $ref: '#/components/schemas/request-on-behalf-of-settings-type'
    valid-request-on-behalf-of-settings-details:
      type: array
      description: Request on behalf of settings that are eligible to be added to a request condition for the specified resource
      items:
        $ref: '#/components/schemas/valid-request-on-behalf-of-setting'
      minItems: 0
      maxItems: 2
    request-settings:
      type: object
      description: |
        Request settings specify what conditions are valid for the given resource
      properties:
        validAccessScopeSettings:
          $ref: '#/components/schemas/valid-access-details'
        validRequesterSettings:
          $ref: '#/components/schemas/valid-requester-settings-details'
        validAccessDurationSettings:
          $ref: '#/components/schemas/valid-access-duration-settings-details'
        requestOnBehalfOfSettings:
          $ref: '#/components/schemas/request-on-behalf-of-settings-details'
        validRiskSettings:
          $ref: '#/components/schemas/valid-risk-settings-details'
        riskSettings:
          $ref: '#/components/schemas/risk-settings-details'
        validRequestOnBehalfOfSettings:
          $ref: '#/components/schemas/valid-request-on-behalf-of-settings-details'
      required:
        - validAccessScopeSettings
        - validRequesterSettings
        - validAccessDurationSettings
    request-on-behalf-of-settings-patchable:
      type: object
      nullable: true
      description: Specifies if and for whom a requester may request the resource for.
      required:
        - allowed
      properties:
        allowed:
          type: boolean
          description: Indicates that users who can request this resource could also request for another requester of the same resource. This property can only be `true`. If request on behalf of should not be allowed then `requestOnBehalfOfSettings` should be nullified.
        onlyFor:
          nullable: true
          type: array
          description: Which requesters the resource requester can request on behalf of. If onlyFor is not specified then any requester may request a resource on the behalf of any other user
          items:
            $ref: '#/components/schemas/request-on-behalf-of-type'
          minItems: 1
    risk-settings-default-allowed-with-no-overrides-patchable:
      type: object
      description: Risk settings where request submission is allowed with no overrides
      required:
        - requestSubmissionType
      properties:
        requestSubmissionType:
          type: string
          enum:
            - ALLOWED_WITH_NO_OVERRIDES
    risk-settings-default-allowed-with-overrides-patchable:
      type: object
      description: Risk settings where request submission is allowed with specified approval sequence and optional access duration settings
      required:
        - requestSubmissionType
        - approvalSequenceId
      properties:
        requestSubmissionType:
          type: string
          enum:
            - ALLOWED_WITH_OVERRIDES
        approvalSequenceId:
          $ref: '#/components/schemas/approval-sequence-id'
        accessDurationSettings:
          $ref: '#/components/schemas/access-duration-settings-patchable'
    risk-settings-default-restricted-patchable:
      type: object
      description: Risk settings where request submission is restricted
      required:
        - requestSubmissionType
      properties:
        requestSubmissionType:
          type: string
          enum:
            - RESTRICTED
    risk-settings-default-patchable:
      type: object
      description: |
        Default risk settings that are valid for an access request when a risk has been detected for the resource and requesting user.
        Request submission indicates whether users are allowed or restricted to submit a request when there is any risk conflict. 
        An approval sequence must be selected with optional access duration settings here for `ALLOWED_WITH_OVERRIDES`, while the 
        settings from the matching request condition would apply for `ALLOWED_WITH_NO_OVERRIDES`. For `RESTRICTED` and 
        `ALLOWED_WITH_NO_OVERRIDES`, access duration settings can only be present when there is an error.
      discriminator:
        propertyName: requestSubmissionType
        mapping:
          ALLOWED_WITH_NO_OVERRIDES: '#/components/schemas/risk-settings-default-allowed-with-no-overrides-patchable'
          ALLOWED_WITH_OVERRIDES: '#/components/schemas/risk-settings-default-allowed-with-overrides-patchable'
          RESTRICTED: '#/components/schemas/risk-settings-default-restricted-patchable'
      oneOf:
        - $ref: '#/components/schemas/risk-settings-default-allowed-with-no-overrides-patchable'
        - $ref: '#/components/schemas/risk-settings-default-allowed-with-overrides-patchable'
        - $ref: '#/components/schemas/risk-settings-default-restricted-patchable'
    risk-settings-patchable:
      type: object
      description: Risk settings that are valid for an access request when a risk has been detected for the resource and requesting user
      required:
        - defaultSetting
      properties:
        defaultSetting:
          $ref: '#/components/schemas/risk-settings-default-patchable'
    resource-request-settings-patchable:
      type: object
      description: |
        Resource request settings that specify various configurations and permissions at the resource level.
      properties:
        requestOnBehalfOfSettings:
          $ref: '#/components/schemas/request-on-behalf-of-settings-patchable'
        riskSettings:
          $ref: '#/components/schemas/risk-settings-patchable'
    subprocessors-acknowledged:
      type: boolean
      description: Indicates that Access Requests provisioning was triggered by the customer (such as in [Govern Okta admin roles](https://help.okta.com/okta_help.htm?type=oie&id=csh-governance-admin-roles))
    provisioning-status:
      type: string
      description: The Access Requests provisioning status in the org
      x-okta-known-values:
        - NOT_PROVISIONED
        - PROVISIONING_FAILED
        - PROVISIONED
    request-experience:
      type: string
      description: The request experience supported in the org
      x-enumDescriptions:
        ADMIN_ROLES: Govern Okta admin roles request experience
        CATALOG: Access Request with conditions request experience
      x-okta-known-values:
        - ADMIN_ROLES
        - CATALOG
    integration-id:
      type: string
      maxLength: 20
      minLength: 20
      format: integration-id
      pattern: goi[0-9a-zA-Z]+
      description: The integration ID
    slack-notification-settings:
      type: object
      description: Slack notification settings for the org
      properties:
        enabled:
          type: boolean
          description: Indicates that notifications are enabled for this Slack integration
    SlackIntegrationSettings:
      type: object
      description: Slack integration settings for the org
      additionalProperties: false
      properties:
        type:
          type: string
          description: The type of integration
          enum:
            - SLACK
        integrationId:
          $ref: '#/components/schemas/integration-id'
        notifications:
          $ref: '#/components/schemas/slack-notification-settings'
        canInitiateRequest:
          type: boolean
          description: Indicates whether requests can be initiated from this Slack integration
        canApproveRequest:
          type: boolean
          description: Indicates whether requests can be approved from this Slack integration
      required:
        - type
        - integrationId
    IntegrationSettings:
      type: object
      description: <x-lifecycle class="beta"></x-lifecycle><br> Access Requests integration settings for the org
      discriminator:
        propertyName: type
        mapping:
          SLACK: '#/components/schemas/SlackIntegrationSettings'
      oneOf:
        - $ref: '#/components/schemas/SlackIntegrationSettings'
    request-integrations:
      type: object
      description: <x-lifecycle class="beta"></x-lifecycle><br> Access Requests integration settings for the org
      properties:
        settings:
          type: array
          description: Integration settings
          items:
            $ref: '#/components/schemas/IntegrationSettings'
    org-request-settings:
      type: object
      description: Request settings for the org
      required:
        - subprocessorsAcknowledged
        - provisioningStatus
        - requestExperiences
        - longTimePastProvisioned
      properties:
        subprocessorsAcknowledged:
          $ref: '#/components/schemas/subprocessors-acknowledged'
        provisioningStatus:
          $ref: '#/components/schemas/provisioning-status'
        requestExperiences:
          type: array
          description: The supported request experiences in the org
          items:
            $ref: '#/components/schemas/request-experience'
          minItems: 0
        longTimePastProvisioned:
          type: boolean
          description: Indicates that Access Request provisioning was triggered more than 10 minutes ago
        integrations:
          $ref: '#/components/schemas/request-integrations'
    org-request-settings-patchable:
      type: object
      description: Request settings for the org for patch
      properties:
        subprocessorsAcknowledged:
          $ref: '#/components/schemas/subprocessors-acknowledged'
        integrations:
          $ref: '#/components/schemas/request-integrations'
    compatible-resource-types:
      type: string
      description: A resource type the sequence is compatible with.
      x-okta-known-values:
        - APP
        - GROUP
    request-sequence:
      type: object
      description: A sequence that decides what actions must be taken on a request
      properties:
        id:
          type: string
          description: Unique idenfitifer of the request sequence
        name:
          type: string
          description: Name of the request sequence
        description:
          type: string
          description: Description of the request sequence
        compatibleResourceTypes:
          type: array
          items:
            $ref: '#/components/schemas/compatible-resource-types'
        link:
          type: string
          description: Link to edit the request sequence
      required:
        - id
        - name
        - description
        - link
    request-sequences-list:
      type: object
      properties:
        data:
          type: array
          description: All resource request sequences
          items:
            $ref: '#/components/schemas/request-sequence'
        _links:
          type: object
          description: Links to related resources and actions
          properties:
            self:
              $ref: '#/components/schemas/link'
            newSequence:
              $ref: '#/components/schemas/link'
          required:
            - self
    sequence-id:
      type: string
      description: The sequence ID
      maxLength: 24
      minLength: 24
      pattern: ^[a-fA-F\d]{24}$
      format: sequence-id
      example: 673b6e662088ea0006d10ff3
    rcar-request-id:
      type: string
      format: rcar-request-id
      maxLength: 20
      minLength: 20
      pattern: req[0-9a-zA-Z]+
      example: reqp1pmpjhVdGEcVK1d5
    order-by:
      type: string
      format: order-by
      description: A property of items within the collection, optionally followed by a `%20asc` or `%20desc` suffix.
    request-status:
      type: string
      description: The status of the request
      x-okta-known-values:
        - SUBMITTED
        - REJECTED
        - PENDING
        - APPROVED
        - DENIED
        - CANCELED
        - EXPIRED
    request-resolved-date-time:
      type: string
      format: date-time
      nullable: true
      description: The date the request was resolved. The property may transition from having a value to null if the request is reopened.
    request-grant-status:
      type: string
      description: The grant status of the request
      x-okta-known-values:
        - PENDING
        - GRANTED
        - FAILED
        - MANUAL_REQUIRED
    request-granted-date-time:
      type: string
      format: date-time
      nullable: true
      description: The date the approved access was granted. Only set if request.status is APPROVED.
    request-revocation-status:
      type: string
      description: The revocation status of the request
      x-okta-known-values:
        - PENDING
        - REVOKED
        - FAILED
    request-revoked-date-time:
      type: string
      format: date-time
      nullable: true
      description: The date the granted access was revoked. Only set if request.grantStatus is GRANTED and request.revocationStatus is REVOKED.
    client-credential-principal:
      type: object
      description: A representation of a principal
      required:
        - externalId
        - type
      properties:
        externalId:
          type: string
          description: The principal ID
          maxLength: 20
          minLength: 20
          pattern: (00u|pca)[0-9a-zA-Z]+
        type:
          type: string
          description: The type of principal
          enum:
            - OKTA_USER
            - UNKNOWN
          x-enumDescriptions:
            OKTA_USER: The principal is an Okta user. `externalId` has the format `00u*`.
            UNKNOWN: The principal isn't a known Okta user. `externalId` has the format `pca*`. This option is for requests not made by a known Okta user, such as requests from a service using client credentials authentication.
    user-id:
      type: string
      x-okta-ignore-redocly-rules-for-sdk: true
      format: okta-user-id
      description: The Okta user `id`
      maxLength: 20
      minLength: 20
      pattern: 00u[0-9a-zA-Z]+
      example: 00ub0oNGTSWTBKOLGLNR
    principal-type:
      type: string
      description: The type of principal
      x-okta-known-values:
        - OKTA_USER
    target-principal:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      description: A representation of a principal
      required:
        - externalId
        - type
      properties:
        externalId:
          $ref: '#/components/schemas/user-id'
        type:
          $ref: '#/components/schemas/principal-type'
    catalog-entry-id:
      type: string
      maxLength: 20
      minLength: 20
      description: Unique identifier of the resource catalog entry
      example: cenp2rjyxK1Js2Fc41d5
    resource-id:
      type: string
      maxLength: 20
      minLength: 20
      description: the requested resource ID
    resource-type:
      type: string
      description: The requested resource type
      x-okta-known-values:
        - APPLICATION
        - REQUEST_TYPE
    access-scope-id:
      type: string
      description: ID of the access scope
      minLength: 20
      maxLength: 20
    access-scope-type:
      type: string
      description: The access scope type
      x-okta-known-values:
        - ENTITLEMENT_BUNDLE
        - GROUP
        - APPLICATION
        - REQUEST_TYPE
    requested:
      type: object
      description: A representation of the resource in request
      properties:
        entryId:
          $ref: '#/components/schemas/catalog-entry-id'
        resourceId:
          $ref: '#/components/schemas/resource-id'
        resourceType:
          $ref: '#/components/schemas/resource-type'
        accessScopeId:
          $ref: '#/components/schemas/access-scope-id'
        accessScopeType:
          $ref: '#/components/schemas/access-scope-type'
    request-links:
      type: object
      description: Links available on a single request representation
      required:
        - self
      properties:
        catalogEntry:
          $ref: '#/components/schemas/link'
        approvalCondition:
          $ref: '#/components/schemas/link'
        approvalSequence:
          $ref: '#/components/schemas/link'
        self:
          $ref: '#/components/schemas/link'
    request-minimal-read-only-fields:
      type: object
      description: Properties contained by default in sparse representation
      properties:
        status:
          $ref: '#/components/schemas/request-status'
        resolved:
          $ref: '#/components/schemas/request-resolved-date-time'
        grantStatus:
          $ref: '#/components/schemas/request-grant-status'
        granted:
          $ref: '#/components/schemas/request-granted-date-time'
        revocationStatus:
          $ref: '#/components/schemas/request-revocation-status'
        revoked:
          $ref: '#/components/schemas/request-revoked-date-time'
        requestedBy:
          $ref: '#/components/schemas/client-credential-principal'
        requestedFor:
          $ref: '#/components/schemas/target-principal'
        requested:
          $ref: '#/components/schemas/requested'
        _links:
          $ref: '#/components/schemas/request-links'
    request-sparse:
      type: object
      description: Sparse representation of a Request resource
      allOf:
        - $ref: '#/components/schemas/read-only-standard-properties'
        - $ref: '#/components/schemas/request-minimal-read-only-fields'
      required:
        - id
        - created
        - createdBy
        - lastUpdated
        - lastUpdatedBy
        - status
        - requestedBy
        - requestedFor
        - requested
        - _links
    request-list-links:
      type: object
      description: Links available in request list response
      required:
        - self
      properties:
        self:
          $ref: '#/components/schemas/link'
        next:
          $ref: '#/components/schemas/link'
    request-list:
      type: object
      properties:
        data:
          description: All requests on the current page
          type: array
          items:
            $ref: '#/components/schemas/request-sparse'
        _links:
          $ref: '#/components/schemas/request-list-links'
    request-resource-catalog-entry-creatable:
      type: object
      description: A representation of a requestable resource
      required:
        - type
        - entryId
      properties:
        type:
          type: string
          enum:
            - CATALOG_ENTRY
        entryId:
          $ref: '#/components/schemas/catalog-entry-id'
    request-resource-creatable:
      description: |
        A representation of a resource that can be requested for access. 

        **Note:** The resources available for the request are subject to their permission settings. For example, the Okta Admin App 
        can only be requested by Super Admin users. 
      discriminator:
        propertyName: type
        mapping:
          CATALOG_ENTRY: '#/components/schemas/request-resource-catalog-entry-creatable'
      oneOf:
        - $ref: '#/components/schemas/request-resource-catalog-entry-creatable'
    request-field-type:
      type: string
      description: Type of value for the requester field.
      x-okta-known-values:
        - TEXT
        - SELECT
        - MULTISELECT
        - ISO_DATE
        - DURATION
        - OKTA_USER_ID
    field-option-value:
      type: string
      description: The value of a select option
      maxLength: 280
      minLength: 1
    request-field-value:
      type: object
      required:
        - id
      properties:
        id:
          type: string
          description: |
            The ID of a `requesterField`.

            For `OKTA` request approval, this is typically the ID of an input field defined in an approval sequence.

            For `EXTERNAL` request approval, this is the ID of an input field relevant to the external approval system.

            The following are reserved identifiers:
            - `ACCESS_DURATION`: An identifier used to specify the duration of the access being requested. (**Note:**
              This identifier is to be grandfathered. The new name will be `OKTA_ACCESS_DURATION`.)
            - `OKTA_REQUESTED_FOR`: An identifier used to specify who the resource is being requested for
            - `OKTA_ACCESS_DURATION`: An identifier used to specify the duration of the requested access. If a request 
              field is included in this ID, the field value must be a `DURATION` expression in ISO format. The maximum 
              length of this value is 5 characters. For example, `P1D` represents a duration of one day.
            - Any identifiers with `OKTA_` prefix are reserved for future use.
        label:
          type: string
          description: A human-readable description of `requesterField`. It's used for display purposes and is optional
        type:
          $ref: '#/components/schemas/request-field-type'
        value:
          type: string
          minLength: 1
          maxLength: 1000
          description: |
            The value of `requesterField`, which depends on the type of the field:
            - `TEXT`: A multi-line string
            - `SELECT`: An option predefined by the approval system
            - `ISO_DATE`: An ISO formatted date string. for example, `2022-05-05T14:15:22Z`
            - `DURATION`: An ISO format duration expression with a maximum length of 5 characters. For example, 
              `P1D` indicates a duration of one day.
            - `OKTA_USER_ID`: Okta User ID

            If the field type is one of the previously listed, this property is required.
        values:
          type: array
          items:
            $ref: '#/components/schemas/field-option-value'
          description: |
            The values of `requesterField` with the type `MULTISELECT`.

            If the field type is `MULTISELECT`, this property is required.
    request-field-values:
      type: array
      description: |
        The requester input fields required by the approval system.

        **Note:** The fields required are determined by the approval system.

        For the Okta approval system, the required fields are defined in the approval sequence. Ensure that the requester
        input fields match up with this definition to avoid request approval flow failure.

        For external approval systems, the requester input fields are for recording purposes only and do not affect the approval
        process.
      items:
        $ref: '#/components/schemas/request-field-value'
    request-creatable:
      type: object
      description: Properties which are mutable in mutation operations
      required:
        - requested
        - requestedFor
      properties:
        requested:
          $ref: '#/components/schemas/request-resource-creatable'
        requestedBy:
          $ref: '#/components/schemas/target-principal'
        requestedFor:
          $ref: '#/components/schemas/target-principal'
        requesterFieldValues:
          $ref: '#/components/schemas/request-field-values'
    request-duration:
      description: |
        How long the requester retains access after their request is approved and fulfilled.

        Specified in [ISO 8601 duration format](https://en.wikipedia.org/wiki/ISO_8601#Durations).

        #### Known limitation

        Only single time unit ISO 8601 duration formats (D, H, M) are supported for units (days, hours, minutes).

        ##### Supported

        | Unit       | Example |
        | ---------- | ------- |
        | D, days    | P40D    |
        | H, hours   | PT65H   |
        | M, minutes | PT90M   |

        > **Note:** Mixes of units, as well as month/year/week designations, aren't supported. For example, `P40DT65H`, `P40M`, `P1W`, and `P1Y` aren't supported.
      type: string
      example: P40D
      format: iso-duration
      nullable: true
      default: null
    request-revocation-scheduled-date-time:
      type: string
      format: date-time
      nullable: true
      description: The date the granted access is scheduled for recovation. Only set if request.accessDuration exists, and request.grantStatus is GRANTED.
    request-submission-type:
      type: string
      description: Whether a request submission is allowed or restricted in the risk settings
      x-okta-known-values:
        - ALLOWED_WITH_NO_OVERRIDES
        - ALLOWED_WITH_OVERRIDES
        - RESTRICTED
    risk-rule:
      type: object
      required:
        - name
      properties:
        name:
          type: string
          description: The name of a resource rule causing a conflict
          maxLength: 255
          minLength: 1
        description:
          type: string
          description: The human readable description
          maxLength: 1000
          minLength: 1
        resourceName:
          type: string
          description: Human readable name of the resource
    risk-rules:
      type: array
      items:
        $ref: '#/components/schemas/risk-rule'
      minItems: 0
      maxItems: 5
    risk-assessment:
      type: object
      description: A risk assessment that indicates whether request submission is allowed or restricted. It contains the risk rules that lead to possible conflicts for the requested resource.
      required:
        - requestSubmissionType
        - riskRules
      properties:
        requestSubmissionType:
          $ref: '#/components/schemas/request-submission-type'
        riskRules:
          $ref: '#/components/schemas/risk-rules'
    request-submission-full:
      type: object
      description: Full representation of a request submission
      allOf:
        - $ref: '#/components/schemas/read-only-standard-properties'
        - type: object
          properties:
            status:
              type: string
              enum:
                - SUBMITTED
              description: The status of the request
            resolved:
              $ref: '#/components/schemas/request-resolved-date-time'
            grantStatus:
              $ref: '#/components/schemas/request-grant-status'
            granted:
              $ref: '#/components/schemas/request-granted-date-time'
            revocationStatus:
              $ref: '#/components/schemas/request-revocation-status'
            revoked:
              $ref: '#/components/schemas/request-revoked-date-time'
            requestedBy:
              $ref: '#/components/schemas/client-credential-principal'
            requestedFor:
              $ref: '#/components/schemas/target-principal'
            requested:
              $ref: '#/components/schemas/requested'
            _links:
              $ref: '#/components/schemas/request-links'
            accessDuration:
              $ref: '#/components/schemas/request-duration'
            revocationScheduled:
              $ref: '#/components/schemas/request-revocation-scheduled-date-time'
            requesterFieldValues:
              $ref: '#/components/schemas/request-field-values'
            riskAssessment:
              $ref: '#/components/schemas/risk-assessment'
      required:
        - id
        - created
        - createdBy
        - lastUpdated
        - lastUpdatedBy
        - status
        - requestedBy
        - requestedFor
        - requested
        - _links
    approval-provider-type:
      type: string
      description: The approval system type
      x-okta-known-values:
        - OKTA
        - EXTERNAL
    approval-provider-name:
      type: string
      description: A human readable name of the request approval system, for example, Okta Access Requests or ServiceNow
      minLength: 1
      maxLength: 100
    approval-provider-description:
      type: string
      description: A description of the request approval system
      maxLength: 1000
    approval-external-request-id:
      type: string
      description: The external request `id` from a request approval system, for example, ServiceNow or JIRA
      minLength: 1
      maxLength: 200
    request-permalink-id:
      type: integer
      description: The immutable, persistent identifier that always resolves to the request
    request-approval-status:
      type: string
      description: The approver's decision.
      x-okta-known-values:
        - APPROVED
        - DENIED
    approval-decision-date:
      type: string
      format: date-time
      description: The date the approval decision is made.
    approval-decision-enum:
      type: string
      x-okta-known-values:
        - APPROVE
        - DENY
        - CANCEL
    request-approval-decision:
      type: object
      description: A completed access request approval decision
      required:
        - deciderId
        - decision
        - decided
      properties:
        deciderId:
          $ref: '#/components/schemas/user-id'
        deciderName:
          type: string
          description: Okta username of the decider
          maxLength: 100
        decision:
          $ref: '#/components/schemas/approval-decision-enum'
        decided:
          $ref: '#/components/schemas/approval-decision-date'
        originalDeciderId:
          $ref: '#/components/schemas/user-id'
        originalDeciderFullName:
          type: string
          description: Full name of the original decider
          maxLength: 100
        originalDeciderEmail:
          type: string
          description: Email of the original decider
          format: email
        deciderDelegated:
          type: boolean
          description: Indicates if the decision was made by a delegated decider
        deciderEscalated:
          type: boolean
          description: Indicates if the decision was made by an escalated decider
    request-approval:
      type: object
      description: A completed access request approval
      required:
        - type
        - providerName
      properties:
        type:
          $ref: '#/components/schemas/approval-provider-type'
        providerName:
          $ref: '#/components/schemas/approval-provider-name'
        providerDescription:
          $ref: '#/components/schemas/approval-provider-description'
        externalRequestId:
          $ref: '#/components/schemas/approval-external-request-id'
        permalinkId:
          $ref: '#/components/schemas/request-permalink-id'
        status:
          $ref: '#/components/schemas/request-approval-status'
        decided:
          $ref: '#/components/schemas/approval-decision-date'
        decisions:
          type: array
          description: The approval decisions
          minItems: 0
          maxItems: 10
          items:
            $ref: '#/components/schemas/request-approval-decision'
    request-full:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      description: Full representation of a Request.
      allOf:
        - $ref: '#/components/schemas/read-only-standard-properties'
        - $ref: '#/components/schemas/request-minimal-read-only-fields'
        - type: object
          properties:
            accessDuration:
              $ref: '#/components/schemas/request-duration'
            revocationScheduled:
              $ref: '#/components/schemas/request-revocation-scheduled-date-time'
            requesterFieldValues:
              $ref: '#/components/schemas/request-field-values'
            requestApproval:
              $ref: '#/components/schemas/request-approval'
            riskAssessment:
              $ref: '#/components/schemas/risk-assessment'
      required:
        - id
        - created
        - createdBy
        - lastUpdated
        - lastUpdatedBy
        - status
        - requestedBy
        - requestedFor
        - requested
        - _links
    request-status-patchable:
      type: string
      description: |-
        Specify the status of the request.

        Only `CANCELED` is supported. You can't cancel a request if any of its tasks have been resolved.
      x-okta-known-values:
        - CANCELED
    request-update:
      type: object
      properties:
        status:
          $ref: '#/components/schemas/request-status-patchable'
    request-message-message:
      type: string
      description: Message that will be created for the request. Newline can be specified by characters "\n". Message will be visible for all users who can view the request.
      minLength: 1
      maxLength: 5000
      nullable: false
    request-message-mutable:
      type: object
      required:
        - message
      properties:
        message:
          $ref: '#/components/schemas/request-message-message'
    request-message-creatable:
      type: object
      description: The properties expected in a request message create request
      allOf:
        - $ref: '#/components/schemas/request-message-mutable'
    request-resolution-terminal-state:
      type: string
      description: The terminal state for the access request in the request provider
      x-okta-known-values:
        - APPROVED
        - DENIED
        - CANCELED
        - EXPIRED
    user-email:
      type: string
      description: E-mail of the user
      format: email
    user-name:
      type: string
      description: Name of the user
    request-decision-creatable:
      type: object
      description: A completed access request approval decision
      required:
        - userId
        - decision
        - decided
        - userEmail
        - userName
      properties:
        userId:
          $ref: '#/components/schemas/user-id'
        userEmail:
          $ref: '#/components/schemas/user-email'
        userName:
          $ref: '#/components/schemas/user-name'
        decision:
          $ref: '#/components/schemas/approval-decision-enum'
        decided:
          $ref: '#/components/schemas/approval-decision-date'
        originalDeciderId:
          $ref: '#/components/schemas/user-id'
        originalDeciderFullName:
          $ref: '#/components/schemas/user-name'
        originalDeciderEmail:
          $ref: '#/components/schemas/user-email'
        deciderDelegated:
          type: boolean
          description: Indicates if the decision was made by a delegated decider
        deciderEscalated:
          type: boolean
          description: Indicates if the decision was made by an escalated decider
    request-resolution-creatable:
      type: object
      description: The properties expected in a request resolution create request
      properties:
        terminalState:
          $ref: '#/components/schemas/request-resolution-terminal-state'
        decisions:
          type: array
          minItems: 0
          maxItems: 10
          items:
            $ref: '#/components/schemas/request-decision-creatable'
    rcar-entry-requestable:
      type: boolean
      nullable: false
      description: Is the resource requestable
    rcar-entry-counts:
      type: object
      description: Entry count metadata
      properties:
        resourceCounts:
          type: object
          description: Collection resource counts
          properties:
            applications:
              type: integer
              description: Number of app resources in a collection
              minimum: 0
              example: 3
    rcar-entry-links:
      type: object
      description: |-
        Links available for a resource catalog entry.
        * `createRequest`: returns the link to create the request only if the entry is requestable
        * `parent`: returns the parent entry only if a parent exists
        * `submittedRequest`: returns the submitted request only if the authenticated user has a submitted request for the entry and it's not available for approval
        * `pendingRequest`: returns the pending request only if the authenticated user has a submitted request for the entry and the request is available for approval
        * `relatedEntity`: returns the resource that's requested
      required:
        - self
      properties:
        self:
          $ref: '#/components/schemas/link'
        logo:
          type: array
          description: Links to the catalog entry logo resources
          minItems: 0
          maxItems: 3
          items:
            $ref: '#/components/schemas/link'
        parent:
          $ref: '#/components/schemas/link'
        createRequest:
          $ref: '#/components/schemas/link'
        submittedRequest:
          $ref: '#/components/schemas/link'
        pendingRequest:
          $ref: '#/components/schemas/link'
        relatedEntity:
          $ref: '#/components/schemas/link'
    rcar-entry:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      description: Full representaion of a access request catalog entry
      properties:
        id:
          description: Unique identifier for the entry
          type: string
          minLength: 1
        name:
          type: string
          nullable: false
          description: Name of the entry
          maxLength: 255
          minLength: 1
        description:
          type: string
          description: Description of the entry
          maxLength: 2000
        label:
          type: string
          description: Label of the entry. Currently either `Application` or `Resource Collection`
        parent:
          type: string
          nullable: false
          description: Parent of the entry
        requestable:
          $ref: '#/components/schemas/rcar-entry-requestable'
        counts:
          $ref: '#/components/schemas/rcar-entry-counts'
        _links:
          $ref: '#/components/schemas/rcar-entry-links'
      required:
        - id
        - name
        - requestable
        - _links
    rcar-entries-links:
      type: object
      description: |-
        Links available for the list of catalog entries.
        * `atspoke`: returned only for top level entries and if request types is supported
        * `match`: returned only if match is supported
      required:
        - self
      properties:
        self:
          $ref: '#/components/schemas/link'
        next:
          $ref: '#/components/schemas/link'
        atspoke:
          $ref: '#/components/schemas/link'
        match:
          $ref: '#/components/schemas/link'
    rcar-entries-list-v2:
      type: object
      properties:
        data:
          description: Catalog entries list
          type: array
          items:
            $ref: '#/components/schemas/rcar-entry'
        _links:
          $ref: '#/components/schemas/rcar-entries-links'
    rcar-entry-get:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      allOf:
        - $ref: '#/components/schemas/rcar-entry'
    field-required:
      type: boolean
      description: Whether a value to this field is required to advance the request
      example: true
      default: true
    request-field:
      type: object
      description: Fields to be filled out for a request
      required:
        - id
        - type
        - required
      properties:
        id:
          type: string
          description: |
            A `read-only` field ID.

            Useful for specifying requesterFieldValues when adding a request.
        type:
          $ref: '#/components/schemas/request-field-type'
        choices:
          type: array
          description: Valid choices when type is SELECT or MULTISELECT.
          items:
            $ref: '#/components/schemas/field-option-value'
        required:
          $ref: '#/components/schemas/field-required'
        label:
          type: string
          description: label of the requester field
        value:
          type: string
          description: An admin configured value for this field. Only applies to DURATION fields.
        maximumValue:
          type: string
          description: The maximum value allowed for this field. Only applies to DURATION fields.
        readOnly:
          type: boolean
          description: Indicates this field is immutable.
    catalog-entry-request-fields:
      type: object
      properties:
        data:
          type: array
          description: List of request fields
          items:
            $ref: '#/components/schemas/request-field'
        metadata:
          type: object
          description: Additional information about the request fields
          properties:
            riskAssessment:
              $ref: '#/components/schemas/risk-assessment'
    requesters-member:
      type: object
      required:
        - type
        - externalId
      properties:
        type:
          type: string
          example: OKTA_USER
        externalId:
          type: string
          example: 00ub0oNGTSWTBKOLGLNR
    requesters-add-patch:
      type: object
      required:
        - op
        - path
        - value
      properties:
        op:
          type: string
          enum:
            - add
          description: Operation to add a new member to the existing requester set
        path:
          type: string
          pattern: ^/members/-$
          description: JSON Pointer path that specifies adding to the members array
        value:
          description: The member to add to the requester set
          $ref: '#/components/schemas/requesters-member'
    requesters-member-list:
      type: array
      items:
        $ref: '#/components/schemas/requesters-member'
    requesters-replace-patch:
      type: object
      required:
        - op
        - path
        - value
      properties:
        op:
          type: string
          enum:
            - replace
          description: Operation to replace all existing members with a new set
        path:
          type: string
          pattern: ^/members$
          description: JSON Pointer path that specifies replacing the entire members array
        value:
          description: The complete list of members to replace the existing requester set
          $ref: '#/components/schemas/requesters-member-list'
    requesters-members-patch-operation:
      type: object
      oneOf:
        - $ref: '#/components/schemas/requesters-replace-patch'
        - $ref: '#/components/schemas/requesters-add-patch'
      required:
        - op
        - path
        - value
      properties:
        op:
          type: string
          enum:
            - add
            - replace
          description: The operation to perform on the requesters set
        path:
          type: string
          description: JSON Pointer path to the target location
      discriminator:
        propertyName: op
        mapping:
          add: '#/components/schemas/requesters-add-patch'
          replace: '#/components/schemas/requesters-replace-patch'
    requesters-members-patch-operations:
      type: array
      items:
        $ref: '#/components/schemas/requesters-members-patch-operation'
    requesters-full:
      type: object
      required:
        - id
        - members
      properties:
        id:
          type: string
          example: 6773596f7190a40006a1f9af
        members:
          type: array
          items:
            $ref: '#/components/schemas/requesters-member'
    task-id:
      type: string
      format: task-id
      description: The unique identifier for the task
      maxLength: 24
      minLength: 24
      pattern: ^[0-9a-f]{24}$
      example: 68b0a1576dd8db837f5ee55d
    okta-id:
      description: The Okta ID
      type: string
      maxLength: 20
      minLength: 20
    task-assignees:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      required:
        - externalId
        - type
      description: A task assignee that performs actions on the task.
      properties:
        externalId:
          $ref: '#/components/schemas/okta-id'
        type:
          $ref: '#/components/schemas/principal-type'
    task-status:
      type: string
      description: The status of the task
      x-okta-known-values:
        - OPEN
        - COMPLETED
        - ASSIGNING
        - LOCKED
    task-request-id:
      type: string
      maxLength: 20
      minLength: 20
      description: The request ID associated with the task
    task-created-at:
      description: The ISO 8601 formatted date and time when the object was created
      type: string
      format: date-time
      readOnly: true
    task-updated-at:
      description: The ISO 8601 formatted date and time when the object was last updated
      type: string
      format: date-time
      readOnly: true
    task-type:
      type: string
      description: The type of the task
      x-okta-known-values:
        - QUESTION
        - APPROVAL
        - TODO
    task-sparse:
      type: object
      description: Sparse representation of a Task resource
      properties:
        id:
          $ref: '#/components/schemas/task-id'
        assignees:
          type: array
          description: List of task assignees that perform actions on the task
          items:
            $ref: '#/components/schemas/task-assignees'
        status:
          $ref: '#/components/schemas/task-status'
        label:
          type: string
          nullable: false
          description: Human readable label for the task
          minLength: 1
        requestId:
          $ref: '#/components/schemas/task-request-id'
        createdAt:
          $ref: '#/components/schemas/task-created-at'
        updatedAt:
          $ref: '#/components/schemas/task-updated-at'
        type:
          $ref: '#/components/schemas/task-type'
        value:
          type: string
          nullable: true
          description: The value of the task completion that's determined by the assignee
      required:
        - id
        - assignees
        - label
        - requestId
        - createdAt
        - updatedAt
        - status
        - type
    task-list-links:
      type: object
      description: Links available in task list response
      required:
        - self
      properties:
        self:
          $ref: '#/components/schemas/link'
        next:
          $ref: '#/components/schemas/link'
    task-list:
      type: object
      properties:
        data:
          description: All tasks on the current page
          type: array
          items:
            $ref: '#/components/schemas/task-sparse'
        _links:
          $ref: '#/components/schemas/task-list-links'
    task-is-escalated:
      type: boolean
      description: Indicates whether a task is escalated to another user. See [Escalate Tasks](https://help.okta.com/okta_help.htm?type=oie&id=csh-escl-task) in the product documentation.
    task-is-delegated:
      type: boolean
      description: Indicates whether a task is delegated to another user. See [Governance delegates](https://help.okta.com/okta_help.htm?type=oie&id=csh-governance-delegates) in the product documentation.
    task-completed-by:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      required:
        - externalId
        - type
      description: The assignee who fulfilled the task
      properties:
        externalId:
          $ref: '#/components/schemas/okta-id'
        type:
          $ref: '#/components/schemas/principal-type'
    task-full:
      type: object
      x-okta-ignore-redocly-rules-for-sdk: true
      description: Full representation of a task.
      allOf:
        - $ref: '#/components/schemas/task-sparse'
        - type: object
          properties:
            isEscalated:
              $ref: '#/components/schemas/task-is-escalated'
            isDelegated:
              $ref: '#/components/schemas/task-is-delegated'
            originalAssigneeId:
              type: string
              nullable: true
              description: ID of the original assignee before delegation or escalation
              minLength: 20
              format: okta-user-id
            completedBy:
              $ref: '#/components/schemas/task-completed-by'
      required:
        - id
        - assignees
        - label
        - requestId
        - createdAt
        - updatedAt
        - status
        - type
  parameters:
    conditions-list-filter:
      name: filter
      description: |
        Apply various filters by using supported condition filtering properties.

        **Note:** Query parameter percent encoding is required. See [Percent-encoding](https://developer.mozilla.org/en-US/docs/Glossary/Percent-encoding)
      in: query
      required: false
      schema:
        $ref: '#/components/schemas/scim-filter'
      x-scim-filter:
        approvalSequenceId:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/approval-sequence-id'
      examples:
        FilterBySequence:
          summary: Filter conditions that reference the specified sequence id
          value: approvalSequenceId eq "61eb0f06c462d20007f051ac"
    request-condition-id:
      name: requestConditionId
      description: Unique identifier for the request condition
      in: path
      required: true
      schema:
        $ref: '#/components/schemas/request-condition-id'
    resource-id-orn-or-okta:
      name: resourceId
      description: Unique identifier for the resource in Okta instance ID format or [ORN format](https://developer.okta.com/docs/api/openapi/okta-management/guides/roles/#okta-resource-name-orn)
      in: path
      required: true
      schema:
        type: string
    sequence-id-parameter:
      name: sequenceId
      description: The `id` of the sequence
      in: path
      required: true
      schema:
        $ref: '#/components/schemas/sequence-id'
    request-list-filter:
      name: filter
      description: |
        Apply various filters by using supported request filtering properties.

        **Note:** Query parameter percent encoding is required. See [Percent-encoding](https://developer.mozilla.org/en-US/docs/Glossary/Percent-encoding)
      in: query
      required: false
      schema:
        $ref: '#/components/schemas/scim-filter'
      x-scim-filter:
        status:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/request-status'
        grantStatus:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/request-grant-status'
        lastUpdated:
          operators:
            - gt
          schema:
            $ref: '#/components/schemas/last-updated'
        requestedFor:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/user-id'
        resourceId:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/resource-id'
        resourceType:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/resource-type'
        accessScopeId:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/access-scope-id'
        accessScopeType:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/access-scope-type'
      examples:
        FilterByStatus:
          summary: Filter by status
          value: status eq "APPROVED"
        FilterByLastUpdated:
          summary: Filter by lastUpdated
          value: lastUpdated gt "2022-05-24T14:15:22Z"
        FilterByResourceId:
          summary: Filter by resourceId
          value: resourceId eq "0oafxqCAJWWGELFTYASJ"
        FilterByResourceType:
          summary: Filter by resourceType
          value: resourceType eq "APPLICATION"
        FilterByAccessScopeId:
          summary: Filter by accessScopeId
          value: accessScopeId eq "0oafxqCAJWWGELFTYASJ"
        FilterByAccessScopeType:
          summary: Filter by accessScopeType
          value: accessScopeType eq "APPLICATION"
        FilterByRequestedFor:
          summary: Filter by requestedFor
          value: requestedFor eq "00ub0oNGTSWTBKOLGLNR"
        FilterByStatus-ResourceId:
          summary: Filter by status, resourceId
          value: status eq "RESOLVED" AND resourceId eq "0oafxqCAJWWGELFTYASJ"
    request-list-after:
      name: after
      description: The after cursor provided by a prior request.
      in: query
      required: false
      schema:
        $ref: '#/components/schemas/rcar-request-id'
    limit:
      name: limit
      description: The maximum number of records returned in a response
      in: query
      required: false
      schema:
        type: integer
        default: 20
        maximum: 200
        minimum: 1
    request-list-order-by:
      name: orderBy
      description: |
        Apply an ordering of requests by specifying a supported request property name with `%20asc` or `%20desc` suffix.

        **Note:** Query parameter percent encoding is required. See [Percent-encoding](https://developer.mozilla.org/en-US/docs/Glossary/Percent-encoding)
      in: query
      required: false
      schema:
        $ref: '#/components/schemas/order-by'
      x-order-by:
        attributes:
          - created
          - lastUpdated
      examples:
        OrderByCreated:
          summary: Order by created
          value: created desc
        OrderByLastUpdated:
          summary: Order by lastUpdated
          value: lastUpdated desc
    rcar-request-id-parameter:
      name: requestId
      description: Unique identifier for the Resource-Centric Access Requests (RCAR) request
      in: path
      required: true
      schema:
        $ref: '#/components/schemas/rcar-request-id'
    rcar-entries-list-filter-v2:
      name: filter
      description: |
        A required [filter](https://developer.okta.com/docs/api/#filter) expression that returns entries based on the [`parent`](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Catalogs/#tag/Catalogs/operation/listAllDefaultEntriesV2!c=200&path=data/parent&t=response) property:
        * This filter expression only supports the `parent` property and the `eq` and `pr` [operators](https://developer.okta.com/docs/api/#operators).
        * If you want the query to return child entries, then you must specify the `parent` ID with the `eq` operator.

        > **Notes:**
        > * If you don't use the `parent` property in the filter expression, undesireable results are returned.
        > * Query parameter percent encoding is required. See [Special characters]( https://developer.okta.com/docs/api/#special-characters ).
      in: query
      required: true
      schema:
        type: string
        format: scim-filter
        example: not(parent pr)
      x-scim-filter:
        parent:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/catalog-entry-id'
    rcar-entries-list-after:
      name: after
      description: |-
        The [pagination](https://developer.okta.com/docs/api/#pagination) cursor that points to the last record of the previous response.

        The maximum number of entries returned in a response is determined by the [`limit`](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Catalogs/#tag/Catalogs/operation/listAllDefaultEntriesV2!in=query&path=limit&t=request) query parameter.
        If there are more entries to return, the `_links.next.href` link contains the `after` cursor for the next page of results.
      in: query
      required: false
      schema:
        $ref: '#/components/schemas/catalog-entry-id'
    rcar-entries-list-match:
      name: match
      description: Return catalog entries that match a substring value in the [`name`](https://developer.okta.com/docs/api/iga/openapi/governance.requests.enduser.v2/tag/My-Catalogs/#tag/My-Catalogs/operation/listMyDefaultEntriesV2!c=200&path=data/name&t=response) or [`description`](https://developer.okta.com/docs/api/iga/openapi/governance.requests.enduser.v2/tag/My-Catalogs/#tag/My-Catalogs/operation/listMyDefaultEntriesV2!c=200&path=data/description&t=response) properties. At least three characters are required for fuzzy search.
      in: query
      required: false
      schema:
        type: string
        minLength: 3
        maxLength: 50
        example: figma
    rcar-entries-list-limit:
      name: limit
      description: The maximum number of records returned in a response
      in: query
      required: false
      schema:
        type: integer
        maximum: 200
        minimum: 1
        example: 20
    catalog-entry-id:
      name: entryId
      description: Unique identifier for the catalog entry
      in: path
      required: true
      schema:
        $ref: '#/components/schemas/catalog-entry-id'
    user-id:
      name: userId
      description: Unique identifier for the user
      in: path
      required: true
      schema:
        type: string
        maxLength: 20
        minLength: 20
        example: 00ucvnr9rbONeZdRp1d7
    requesters-id:
      name: requesterSetId
      description: The unique `id` that represents a list of requesters for access requests
      in: path
      required: true
      schema:
        type: string
        maxLength: 50
        minLength: 20
        example: 6773596f7190a40006a1f9af
    task-list-filter:
      name: filter
      description: |
        A [filter](https://developer.okta.com/docs/api/#filter) expression that filters a collection of tasks in the response.
        The filter expression supports the following properties and [operators](https://developer.okta.com/docs/api/#operators):

        - `status`: The status of the task. Possible values: `OPEN`, `COMPLETED`, `ASSIGNING`, and `LOCKED`. Supports the `eq` operator.
        - `type`: The type of the task. Possible values: `QUESTION`, `APPROVAL`, and `TODO`. Supports the `eq` operator.
        - `assigneeId`: The Okta user ID of the task assignee. Supports the `eq` operator.
        - `requestId`: The ID of the request for the task. Supports the `eq` operator.
        - `createdAt`: The task created time. Supports the `gt`, `ge`, `le`, and `lt` operators.
        - `updatedAt`: The latest task updated time. Supports the `gt`, `ge`, `le`, and `lt` operators.

        > **Note**: Query parameter percent encoding is required. See [Percent-encoding](https://developer.mozilla.org/en-US/docs/Glossary/Percent-encoding).
      in: query
      required: false
      schema:
        $ref: '#/components/schemas/scim-filter'
      x-scim-filter:
        status:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/task-status'
        type:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/task-type'
        assigneeId:
          operators:
            - eq
          schema:
            type: string
            maxLength: 20
            minLength: 20
            description: the Okta ID of the task assignee
        requestId:
          operators:
            - eq
          schema:
            $ref: '#/components/schemas/task-request-id'
        createdAt:
          operators:
            - gt
            - ge
            - le
            - lt
          schema:
            $ref: '#/components/schemas/task-created-at'
        updatedAt:
          operators:
            - gt
            - ge
            - le
            - lt
          schema:
            $ref: '#/components/schemas/task-updated-at'
      examples:
        FilterByStatus:
          summary: Filter by status
          value: status eq "OPEN"
        FilterByType:
          summary: Filter by type
          value: type eq "QUESTION"
        FilterByAssigneeId:
          summary: Filter by assigneeId
          value: assigneeId eq "0oafxqCAJWWGELFTYASJ"
        FilterByRequestId:
          summary: Filter by requestId
          value: requestId eq "0oafxqCAJWWGELFTYASJ"
        FilterByCreatedAt:
          summary: Filter by createdAt
          value: createdAt gt "2022-05-24T14:15:22Z"
        FilterByUpdatedAt:
          summary: Filter by updatedAt
          value: updatedAt gt "2022-05-24T14:15:22Z"
    task-list-after:
      name: after
      description: |
        Specifies the pagination cursor for the next page of results. Treat this as an opaque value obtained through the standard link headers. See [pagination](https://developer.okta.com/docs/api/#pagination).
      in: query
      required: false
      schema:
        $ref: '#/components/schemas/task-id'
    task-list-order-by:
      name: orderBy
      description: |
        Specifies a property to sort the results. The following properties are supported:
        - `createdAt`
        - `updatedAt`

        Append `desc` or `asc` to indicate the sorting direction.
        > **Note:** Query parameter percent encoding is required. See [Percent-encoding](https://developer.mozilla.org/en-US/docs/Glossary/Percent-encoding).
      in: query
      required: false
      schema:
        $ref: '#/components/schemas/order-by'
      x-order-by:
        attributes:
          - createdAt
          - updatedAt
      examples:
        OrderByCreated:
          summary: Order by created
          value: createdAt desc
        OrderByLastUpdated:
          summary: Order by updatedAt
          value: updatedAt desc
    task-id-parameter:
      name: taskId
      description: The `id` of the task
      in: path
      required: true
      schema:
        $ref: '#/components/schemas/task-id'
  headers:
    link:
      required: false
      description: |-
        A link to `self` and `next`.
        > **Note:** `next` is only present if there's another page of results.
      schema:
        type: string
    rate-limit-limit:
      required: true
      description: The rate-limit ceiling for the current request
      schema:
        type: integer
        minimum: 1
        example: 60
    rate-limit-remaining:
      required: true
      description: The number of requests left for the current rate-limit window
      schema:
        type: integer
        minimum: 0
        example: 60
    rate-limit-reset:
      required: true
      description: The time when the rate limit resets, specified in UTC epoch time (in seconds)
      schema:
        type: integer
        minimum: 0
        example: 1609459200
  examples:
    request-conditions-list-success:
      summary: List basic request conditions
      description: Basic request conditions
      value:
        data:
          - id: rcob0oNGTSWTBKOLGLNR
            name: Default access
            description: This is a condition for requesting default access to a resource, access duration settings is not defined here
            priority: 0
            status: ACTIVE
            requesterSettings:
              type: EVERYONE
            accessScopeSettings:
              type: RESOURCE_DEFAULT
            approvalSequenceId: 61eb0f06c462d20007f051ac
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLGLNR
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/request-conditions/0rcb0oNGTSWTBKOLGLNR
          - id: rcob0oNGTSWTBKOLPGRN
            name: Group resource access
            description: This is a condition for requesting access to a Group in a resource
            priority: 0
            status: ACTIVE
            requesterSettings:
              type: GROUPS
            accessScopeSettings:
              type: GROUPS
            accessDurationSettings:
              type: ADMIN_FIXED_DURATION
              duration: P2W
            approvalSequenceId: 61eb0f06c462d20007f051ac
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLBTSA
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLBTSA
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/request-conditions/0rcb0oNGTSWTBKOLPGRN
          - id: rcob0oNGTSWTBKOLPGRT
            name: Requester specified access
            description: This is a condition for requesting time bound access set by Requester for a resource
            priority: 0
            status: ACTIVE
            requesterSettings:
              type: EVERYONE
            accessScopeSettings:
              type: RESOURCE_DEFAULT
            accessDurationSettings:
              type: REQUESTER_SPECIFIED_DURATION
              maximumDuration: P2W
            approvalSequenceId: 61eb0f06c462d20007f051ac
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLBTSA
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLBTSA
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/request-conditions/rcob0oNGTSWTBKOLPGRT
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/request-conditions
    request-conditions-list-invalid-success:
      summary: List invalid request conditions
      description: Request conditions that are returned from a get call where some of the conditions are invalid
      value:
        data:
          - id: rcob0oNGTSWTBKOLGLNR
            name: Default resource access
            description: This is a condition for requesting default resource access
            priority: 0
            status: ACTIVE
            requesterSettings:
              type: EVERYONE
            accessScopeSettings:
              type: RESOURCE_DEFAULT
            approvalSequenceId: 61eb0f06c462d20007f051ac
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLGLNR
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/request-conditions/0rcb0oNGTSWTBKOLGLNR
          - id: rcob0oNGTSWTBKOLPGRN
            name: Group resource access
            description: This is a condition for requesting access to a Group in the resource
            priority: 0
            status: INVALID
            requesterSettings:
              type: GROUPS
            accessScopeSettings:
              type: GROUPS
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLBTSA
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLBTSA
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/request-conditions/0rcb0oNGTSWTBKOLPGRN
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/request-conditions
    request-condition-get-full-success:
      summary: When everyone can request resource default access
      description: Full representation of a request condition
      value:
        id: rcob0oNGTSWTBKOLGLNR
        name: Default resource access
        description: This is a condition for requesting default resource access
        approvalSequenceId: 61eb0f06c462d20007f051ac
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P2W
        priority: 0
        status: ACTIVE
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2019-08-24T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/request-conditions/0rcb0oNGTSWTBKOLGLNR
    request-condition-get-invalid-sequence-full-success:
      summary: When request condition is INVALID because of the approval sequence
      description: When request condition is INVALID, then the approvalSequenceId will not be present
      value:
        id: rcob0oNGTSWTBKOLGLNS
        name: Default resource access
        description: This is a condition for requesting default resource access
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P2W
        priority: 0
        status: INVALID
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2019-08-24T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/rcob0oNGTSWTBKOLGLNS
    request-condition-get-requester-specified-access-duration-full-success:
      summary: When access duration for the resource is set by the requester
      description: When access duration settings type for a request condition is REQUESTER_SPECIFIED_DURATION, then the admin sets the max duration value
      value:
        id: rcob0oNGTSWTBKOLGLNT
        name: Default resource access
        description: This is a condition for requesting default resource access
        approvalSequenceId: 61eb0f06c462d20007f051ac
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P2W
        priority: 0
        status: ACTIVE
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNT
        lastUpdated: '2019-08-24T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNT
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/request-conditions/rcob0oNGTSWTBKOLGLNT
    resource-request-conditions-list-success:
      summary: List basic request conditions
      description: Basic request conditions that are returned from a get call
      value:
        data:
          - id: rcob0oNGTSWTBKOLGLNR
            name: Default resource access
            description: This is a condition for requesting default resource access, access duration settings are not defined here
            priority: 0
            status: ACTIVE
            requesterSettings:
              type: EVERYONE
            accessScopeSettings:
              type: RESOURCE_DEFAULT
            approvalSequenceId: 61eb0f06c462d20007f051ac
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLGLNR
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLGLNR
          - id: rcob0oNGTSWTBKOLPGRN
            name: Group resource access
            description: This is a condition for requesting access to a Group in the resource
            priority: 0
            status: ACTIVE
            requesterSettings:
              type: GROUPS
            accessScopeSettings:
              type: GROUPS
            accessDurationSettings:
              type: ADMIN_FIXED_DURATION
              duration: P2W
            approvalSequenceId: 61eb0f06c462d20007f051ac
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLBTSA
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLBTSA
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLPGRN
          - id: rcob0oNGTSWTBKOLPGRT
            name: Requester specified access
            description: This is a condition for requesting time bound access set by Requester for a resource
            priority: 0
            status: ACTIVE
            requesterSettings:
              type: EVERYONE
            accessScopeSettings:
              type: RESOURCE_DEFAULT
            accessDurationSettings:
              type: REQUESTER_SPECIFIED_DURATION
              maximumDuration: P2W
            approvalSequenceId: 61eb0f06c462d20007f051ac
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLBTSA
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLBTSA
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/request-conditions/rcob0oNGTSWTBKOLPGRT
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions
    resource-request-conditions-list-invalid-success:
      summary: List invalid request conditions
      description: Request conditions that are returned from a get call where some of the conditions are invalid
      value:
        data:
          - id: rcob0oNGTSWTBKOLGLNR
            name: Default resource access
            description: This is a condition for requesting default resource access
            priority: 0
            status: ACTIVE
            requesterSettings:
              type: EVERYONE
            accessScopeSettings:
              type: RESOURCE_DEFAULT
            approvalSequenceId: 61eb0f06c462d20007f051ac
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLGLNR
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLGLNR
          - id: rcob0oNGTSWTBKOLPGRN
            name: Group resource access
            description: This is a condition for requesting access to a Group in the resource
            priority: 0
            status: INVALID
            requesterSettings:
              type: GROUPS
            accessScopeSettings:
              type: GROUPS
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLBTSA
            lastUpdated: '2019-08-24T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLBTSA
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLPGRN
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions
    request-condition-creatable-00-app-everyone:
      summary: For permanent access to an application, open to everyone
      description: A request condition allowing everyone to request permanent access to an application
      value:
        name: Application | Permanent | Everyone
        description: A request condition allowing everyone to request permanent access to an application
        approvalSequenceId: 61eb0f06c462d20007f051ac
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        priority: 0
    request-condition-creatable-01-app-group-requesters:
      summary: For permanent access to an application, open to members of a group
      description: A request condition allowing members of a group to request permanent access to an application
      value:
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        description: A request condition allowing members of a group to request permanent access to an application
        requesterSettings:
          groups:
            - id: 00ghctcag3FOzuzs41d7
          type: GROUPS
        name: Application | Permanent | Group
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-02-app-group-requesters-fixed-duration:
      summary: For fixed duration access to an application, open to members of groups
      description: A request condition allowing members of groups to request thirty days of access to an application
      value:
        priority: 0
        accessDurationSettings:
          duration: P30D
          type: ADMIN_FIXED_DURATION
        description: A request condition allowing members of groups to request thirty days of access to an application
        name: Application | Fixed Duration | Groups
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
            - id: 00ghctcag3FOzuzs41d7
        approvalSequenceId: 66857574885b300006c1a602
        accessScopeSettings:
          type: RESOURCE_DEFAULT
    request-condition-creatable-03-app-everyone-fixed-duration:
      summary: For fixed duration access to an application, open to everyone
      description: A request condition allowing everyone to request thirty days of access to an application
      value:
        priority: 0
        accessDurationSettings:
          duration: P30D
          type: ADMIN_FIXED_DURATION
        description: A request condition allowing everyone to request thirty days of access to an application
        name: Application | Fixed Duration | Everyone
        requesterSettings:
          type: EVERYONE
        approvalSequenceId: 66857574885b300006c1a602
        accessScopeSettings:
          type: RESOURCE_DEFAULT
    request-condition-creatable-04-app-group-requesters-requester-duration:
      summary: For requester specified access duration to an application, open to groups
      description: A request condition allowing members of groups to request a maximum of thirty days of access to an application
      value:
        priority: 0
        description: A request condition allowing members of groups to request a maximum of thirty days of access to an application
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        requesterSettings:
          groups:
            - id: 00g90ydrnyC51CnWT1d7
            - id: 00gbr972itQnRrs8w1d7
            - id: 00ggvgdyfseH7EVZ21d7
          type: GROUPS
        name: Application | Variable Duration | Group(s) audience
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
        approvalSequenceId: 66857574885b300006c1a602
    request-condition-creatable-05-app-everyone-requester-duration:
      summary: For requester specified access duration to an application, open to everyone
      description: A request condition allowing everyone to request a maximum of four hours of access to an application
      value:
        priority: 0
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: PT4H
        description: A request condition allowing everyone to request a maximum of four hours of access to an application
        name: Application | Variable Duration | Everyone
        requesterSettings:
          type: EVERYONE
        approvalSequenceId: 66857574885b300006c1a602
        accessScopeSettings:
          type: RESOURCE_DEFAULT
    request-condition-creatable-06-group-access-scope-everyone:
      summary: For permanent access to groups, open to everyone
      description: A request condition allowing everyone to request permanent access to groups assigned to the target application
      value:
        description: A request condition allowing everyone to request permanent access to groups assigned to the target application
        accessScopeSettings:
          groups:
            - id: 00gf4e4vnrkpe71aG1d7
            - id: 00gf4e5cuu5uH6cdy1d7
          type: GROUPS
        name: Groups | Perm access | Everyone
        requesterSettings:
          type: EVERYONE
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-07-group-access-scope-group-requesters:
      summary: For permanent access to groups, open to members of a group
      description: A request condition allowing members of a group to request permanent access to groups assigned to the target application
      value:
        description: A request condition allowing members of a group to request permanent access to groups assigned to the target application
        accessScopeSettings:
          groups:
            - id: 00gf4e4vnrkpe71aG1d7
            - id: 00gf4e5cuu5uH6cdy1d7
          type: GROUPS
        name: Groups Assigned | Perm access | Grp Audience
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-08-group-access-scope-group-requesters-fixed-duration:
      summary: For fixed duration access to groups, open to members of groups
      description: A request condition allowing members of groups to request thirty days of access to groups assigned to the target application
      value:
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
        description: A request condition allowing members of groups to request thirty days of access to groups assigned to the target application
        accessScopeSettings:
          groups:
            - id: 00gf4e4vnrkpe71aG1d7
            - id: 00gf4e5cuu5uH6cdy1d7
          type: GROUPS
        name: Groups Assigned | Fixed duration | Groups
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-09-group-access-scope-everyone-fixed-duration:
      summary: For fixed duration access to groups, open to everyone
      description: A request condition allowing everyone to request thirty days of access to groups assigned to the target application
      value:
        description: A request condition allowing everyone to request thirty days of access to groups assigned to the target application
        accessScopeSettings:
          groups:
            - id: 00gf4e4vnrkpe71aG1d7
            - id: 00gf4e5cuu5uH6cdy1d7
          type: GROUPS
        name: Assigned Groups | Fixed Duration | Everyone
        requesterSettings:
          type: EVERYONE
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
    request-condition-creatable-10-group-access-scope-group-requesters-requester-duration:
      summary: For requester specified access duration to groups, open to groups
      description: A request condition allowing members of groups to request a maximum of thirty days of access to groups assigned to the target application
      value:
        accessDurationSettings:
          maximumDuration: P30D
          type: REQUESTER_SPECIFIED_DURATION
        description: A request condition allowing members of groups to request a maximum of thirty days of access to groups assigned to the target application
        accessScopeSettings:
          groups:
            - id: 00gf4e4vnrkpe71aG1d7
            - id: 00gf4e5cuu5uH6cdy1d7
          type: GROUPS
        name: Assigned groups | Variable duration | Groups
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-11-group-access-scope-everyone-requester-duration:
      summary: For requester specified access duration to groups, open to everone
      description: A request condition allowing everyone to request a maximum of thirty days of access to groups assigned to the target application
      value:
        description: A request condition allowing everyone to request a maximum of thirty days of access to groups assigned to the target application
        accessScopeSettings:
          groups:
            - id: 00gf4e5cuu5uH6cdy1d7
            - id: 00gf4e4vnrkpe71aG1d7
          type: GROUPS
        name: Assigned groups | Variable duration | Everyone
        requesterSettings:
          type: EVERYONE
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
    request-condition-creatable-12-entitlement-bundle-access-scope-everyone:
      summary: For permanent access to entitlement bundles, open to everyone
      description: A request condition allowing everyone to request permanent access to entitlement bundles
      value:
        description: A request condition allowing everyone to request permanent access to entitlement bundles
        accessScopeSettings:
          entitlementBundles:
            - id: enbllojq9J9J105DL1d6
            - id: enb21kv4vIdSYzxgY1d6
            - id: enb21kv7dooltqx2s1d6
          type: ENTITLEMENT_BUNDLES
        name: Entitlement bundles | Perm access | Everyone
        requesterSettings:
          type: EVERYONE
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-13-entitlement-bundle-access-scope-group-requesters:
      summary: For permanent access to entitlement bundles, open to members of a group
      description: A request condition allowing members of a group to request permanent access to entitlement bundles
      value:
        description: A request condition allowing members of a group to request permanent access to entitlement bundles
        accessScopeSettings:
          entitlementBundles:
            - id: enb1yo4e8clXlcBF81d6
            - id: enb21kv45Pk7yTi3j1d6
            - id: enb21kv4gsFhk82zo1d6
          type: ENTITLEMENT_BUNDLES
        name: Entitlement bundles | Perm access | Groups
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-14-entitlement-bundle-access-scope-group-requesters-fixed-duration:
      summary: For fixed duration access to entitlement bundles, open to members of groups
      description: A request condition allowing members of groups to request thirty days of access to entitlement bundles
      value:
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
        description: A request condition allowing members of groups to request thirty days of access to entitlement bundles
        accessScopeSettings:
          entitlementBundles:
            - id: enb1yo4e8clXlcBF81d6
            - id: enb21kv45Pk7yTi3j1d6
            - id: enb21kv4gsFhk82zo1d6
          type: ENTITLEMENT_BUNDLES
        name: Entitlement bundles | Fixed duration | Groups
        requesterSettings:
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
          type: GROUPS
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-15-entitlement-bundle-access-scope-everyone-fixed-duration:
      summary: For fixed duration access to entitlement bundles, open to everyone
      description: A request condition allowing everyone to request thirty days of access to entitlement bundles
      value:
        description: A request condition allowing everyone to request thirty days of access to entitlement bundles
        accessScopeSettings:
          entitlementBundles:
            - id: enbllojq9J9J105DL1d6
            - id: enb21kv4vIdSYzxgY1d6
            - id: enb21kv7dooltqx2s1d6
          type: ENTITLEMENT_BUNDLES
        name: Entitlement bundles | Fixed duration | Everyone
        requesterSettings:
          type: EVERYONE
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
    request-condition-creatable-16-entitlement-bundle-access-scope-group-requesters-requester-duration:
      summary: For requester specified access duration to entitlement bundles, open to groups
      description: A request condition allowing members of groups to request a maximum of thirty days of access to entitlement bundles
      value:
        accessDurationSettings:
          maximumDuration: P30D
          type: REQUESTER_SPECIFIED_DURATION
        description: A request condition allowing members of groups to request a maximum of thirty days of access to entitlement bundles
        accessScopeSettings:
          entitlementBundles:
            - id: enbllojq9J9J105DL1d6
            - id: enb21kv4vIdSYzxgY1d6
            - id: enb21kv7dooltqx2s1d6
          type: ENTITLEMENT_BUNDLES
        name: Entitlement bundles | Variable duration | Groups
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-17-entitlement-bundle-access-scope-everyone-requester-duration:
      summary: For requester specified access duration to entitlement bundles, open to everone
      description: A request condition allowing everyone to request a maximum of thirty days of access to entitlement bundles
      value:
        description: A request condition allowing everyone to request a maximum of thirty days of access to entitlement bundles
        accessScopeSettings:
          entitlementBundles:
            - id: enbllojq9J9J105DL1d6
            - id: enb21kv4vIdSYzxgY1d6
            - id: enb21kv7dooltqx2s1d6
          type: ENTITLEMENT_BUNDLES
        name: Entitlement bundles | Variable duration | Everyone
        requesterSettings:
          type: EVERYONE
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
    request-condition-creatable-18-team-requesters:
      summary: For permanent access to an application, open to members of a teams
      description: A request condition allowing members of a team to request permanent access to an application
      value:
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        description: A request condition allowing members of a team to request permanent access to an application
        requesterSettings:
          teams:
            - id: 683fe5f2e6aa40dde3dbff63
          type: TEAMS
        name: Application | Permanent | Team
        approvalSequenceId: 66857574885b300006c1a602
        priority: 0
    request-condition-creatable-19-team-requesters-fixed-duration:
      summary: For fixed duration access to an application, open to members of teams
      description: A request condition allowing members of teams to request thirty days of access to an application
      value:
        priority: 0
        accessDurationSettings:
          duration: P30D
          type: ADMIN_FIXED_DURATION
        description: A request condition allowing members of teans to request thirty days of access to an application
        name: Application | Fixed Duration | Teams
        requesterSettings:
          type: TEAMS
          teams:
            - id: 683fe5f2e6aa40dde3dbff63
            - id: 681ae84f28fdd10007fa7a19
        approvalSequenceId: 66857574885b300006c1a602
        accessScopeSettings:
          type: RESOURCE_DEFAULT
    request-condition-creatable-20-team-requesters-requester-duration:
      summary: For requester specified access duration to an application, open to teams
      description: A request condition allowing members of teams to request a maximum of thirty days of access to an application
      value:
        priority: 0
        description: A request condition allowing members of teams to request a maximum of thirty days of access to an application
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        requesterSettings:
          teams:
            - id: 683fe5f2e6aa40dde3dbff63
            - id: 681ae84f28fdd10007fa7a19
            - id: 681ae7df28fdd10007fa782c
          type: TEAMS
        name: Application | Variable Duration | Team(s) audience
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
        approvalSequenceId: 66857574885b300006c1a602
    request-condition-creatable-00-app-everyone-full:
      summary: For permanent access to an application, open to everyone
      description: A request condition allowing everyone to request permanent access to an application
      value:
        id: rcob0oNGTSWTBKOLGLNR
        name: Application | Permanent | Everyone
        description: A request condition allowing everyone to request permanent access to an application
        approvalSequenceId: 61eb0f06c462d20007f051ac
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        priority: 0
        status: INACTIVE
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2019-08-24T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLGLNR
    request-condition-creatable-01-app-group-requesters-full:
      summary: For permanent access to an application, open to members of a group
      description: A request condition allowing members of a group to request permanent access to an application
      value:
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghctcag3FOzuzs41d7
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        approvalSequenceId: 66857574885b300006c1a602
        name: Application | Permanent | Group
        description: A request condition allowing members of a group to request permanent access to an application
        id: rcon09a0taOlBnI131d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T16:57:23Z'
        lastUpdated: '2024-09-25T16:57:23Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon09a0taOlBnI131d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-02-app-group-requesters-fixed-duration-full:
      summary: For fixed duration access to an application, open to members of groups
      description: A request condition allowing members of groups to request thirty days of access to an application
      value:
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
            - id: 00ghctcag3FOzuzs41d7
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Application | Fixed Duration | Groups
        description: A request condition allowing members of groups to request thirty days of access to an application
        id: rcon099qbMjivmCMR1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T13:28:51Z'
        lastUpdated: '2024-09-25T13:28:51Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v1/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon099qbMjivmCMR1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-03-app-everyone-fixed-duration-full:
      summary: For fixed duration access to an application, open to everyone
      description: A request condition allowing everyone to request thirty days of access to an application
      value:
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Application | Fixed Duration | Everyone
        description: A request condition allowing everyone to request thirty days of access to an application
        id: rcon099qluLQHbbMa1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T13:33:31Z'
        lastUpdated: '2024-09-25T13:33:31Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon099qluLQHbbMa1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-04-app-group-requesters-requester-duration-full:
      summary: For requester specified access duration to an application, open to groups
      description: A request condition allowing members of groups to request a maximum of thirty days of access to an application
      value:
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00g90ydrnyC51CnWT1d7
            - id: 00gbr972itQnRrs8w1d7
            - id: 00ggvgdyfseH7EVZ21d7
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Application | Variable Duration | Group(s) audience
        description: A request condition allowing members of groups to request a maximum of thirty days of access to an application
        id: rcon090mcKZFEWK5u1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T13:48:18Z'
        lastUpdated: '2024-09-25T13:48:18Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon090mcKZFEWK5u1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-05-app-everyone-requester-duration-full:
      summary: For requester specified access duration to an application, open to everone
      description: A request condition allowing everyone to request a maximum of four hours of access to an application
      value:
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: PT4H
        approvalSequenceId: 66857574885b300006c1a602
        name: Application | Variable Duration | Everyone
        description: A request condition allowing everyone to request a maximum of four hours of access to an application
        id: rcon090kul7vCHgzl1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T13:15:43Z'
        lastUpdated: '2024-09-25T13:15:43Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon090kul7vCHgzl1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-06-group-access-scope-everyone-full:
      summary: For permanent access to groups, open to everyone
      description: A request condition allowing everyone to request permanent access to groups assigned to the target application
      value:
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: GROUPS
          groups:
            - id: 00gf4e4vnrkpe71aG1d7
            - id: 00gf4e5cuu5uH6cdy1d7
        approvalSequenceId: 66857574885b300006c1a602
        name: Groups | Perm access | Everyone
        description: A request condition allowing everyone to request permanent access to groups assigned to the target application
        id: rcon0913asXgtaD2L1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T19:25:41Z'
        lastUpdated: '2024-09-25T19:25:41Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon0913asXgtaD2L1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-07-group-access-scope-group-requesters-full:
      summary: For permanent access to groups, open to members of a group
      description: A request condition allowing members of a group to request permanent access to groups assigned to the target application
      value:
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        accessScopeSettings:
          type: GROUPS
          groups:
            - id: 00gf4e4vnrkpe71aG1d7
            - id: 00gf4e5cuu5uH6cdy1d7
        approvalSequenceId: 66857574885b300006c1a602
        name: Groups Assigned | Perm access | Groups
        description: A request condition allowing members of a group to request permanent access to groups assigned to the target application
        id: rcon07qwqohl02zpc1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T18:21:50Z'
        lastUpdated: '2024-09-25T18:21:50Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon07qwqohl02zpc1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-08-group-access-scope-group-requesters-fixed-duration-full:
      summary: For fixed duration access to groups, open to members of groups
      description: A request condition allowing members of groups to request thirty days of access to groups assigned to the target application
      value:
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        accessScopeSettings:
          type: GROUPS
          groups:
            - id: 00gf4e4vnrkpe71aG1d7
            - id: 00gf4e5cuu5uH6cdy1d7
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Groups Assigned | Fixed duration | Groups
        description: A request condition allowing members of groups to request thirty days of access to groups assigned to the target application
        id: rcon07r5zE4QXJ65F1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T21:09:04Z'
        lastUpdated: '2024-09-25T21:09:04Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon07r5zE4QXJ65F1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-09-group-access-scope-everyone-fixed-duration-full:
      summary: For fixed duration access to groups, open to everyone
      description: A request condition allowing everyone to request thirty days of access to groups assigned to the target application
      value:
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Assigned Groups | Fixed Duration | Everyone
        description: A request condition allowing everyone to request thirty days of access to groups assigned to the target application
        id: rcon099qluLQHbbMa1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T13:33:31Z'
        lastUpdated: '2024-09-25T13:33:31Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon099qluLQHbbMa1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-10-group-access-scope-group-requesters-requester-duration-full:
      summary: For requester specified access duration to groups, open to groups
      description: A request condition allowing members of groups to request a maximum of thirty days of access to groups assigned to the target application
      value:
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        accessScopeSettings:
          type: GROUPS
          groups:
            - id: 00gf4e4vnrkpe71aG1d7
            - id: 00gf4e5cuu5uH6cdy1d7
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Assigned groups | Variable duration | Groups
        description: A request condition allowing members of groups to request a maximum of thirty days of access to groups assigned to the target application
        id: rcon0914i91I88Ix51d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T20:20:13Z'
        lastUpdated: '2024-09-25T20:20:13Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon0914i91I88Ix51d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-11-group-access-scope-everyone-requester-duration-full:
      summary: For requester specified access duration to groups, open to everone
      description: A request condition allowing everyone to request a maximum of thirty days of access to groups assigned to the target application
      value:
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: GROUPS
          groups:
            - id: 00gf4e5cuu5uH6cdy1d7
            - id: 00gf4e4vnrkpe71aG1d7
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Assigned groups | Variable duration | Everyone
        description: A request condition allowing everyone to request a maximum of thirty days of access to groups assigned to the target application
        id: rcon07qz7QfuqErLq1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T20:10:40Z'
        lastUpdated: '2024-09-25T20:10:40Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon07qz7QfuqErLq1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-12-entitlement-bundle-access-scope-everyone-full:
      summary: For permanent access to entitlement bundles, open to everyone
      description: A request condition allowing everyone to request permanent access to entitlement bundles
      value:
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: ENTITLEMENT_BUNDLES
          entitlementBundles:
            - id: enbllojq9J9J105DL1d6
            - id: enb21kv4vIdSYzxgY1d6
            - id: enb21kv7dooltqx2s1d6
        approvalSequenceId: 66857574885b300006c1a602
        name: Entitlement bundles | Perm access | Everyone
        description: A request condition allowing everyone to request permanent access to entitlement bundles
        id: rcon2itkv4z2BgL8o1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-26T12:29:50Z'
        lastUpdated: '2024-09-26T12:29:50Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oa9g0l878boNXWzs1d7/request-conditions/rcon2itkv4z2BgL8o1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-13-entitlement-bundle-access-scope-group-requesters-full:
      summary: For permanent access to entitlement bundles, open to members of a group
      description: A request condition allowing members of a group to request permanent access to entitlement bundles
      value:
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        accessScopeSettings:
          type: ENTITLEMENT_BUNDLES
          entitlementBundles:
            - id: enb1yo4e8clXlcBF81d6
            - id: enb21kv45Pk7yTi3j1d6
            - id: enb21kv4gsFhk82zo1d6
        approvalSequenceId: 66857574885b300006c1a602
        name: Entitlement bundles | Perm access | Groups
        description: A request condition allowing members of a group to request permanent access to entitlement bundles
        id: rcon2itnyUZVvi8kd1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-26T13:38:20Z'
        lastUpdated: '2024-09-26T13:38:20Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oa9g0l878boNXWzs1d7/request-conditions/rcon2itnyUZVvi8kd1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-14-entitlement-bundle-access-scope-group-requesters-fixed-duration-full:
      summary: For fixed duration access to entitlement bundles, open to members of groups
      description: A request condition allowing members of groups to request thirty days of access to entitlement bundles
      value:
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        accessScopeSettings:
          type: ENTITLEMENT_BUNDLES
          entitlementBundles:
            - id: enb1yo4e8clXlcBF81d6
            - id: enb21kv45Pk7yTi3j1d6
            - id: enb21kv4gsFhk82zo1d6
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Entitlement bundles | Fixed duration | Groups
        description: A request condition allowing members of groups to request thirty days of access to entitlement bundles
        id: rcon0919nk0zQXVkj1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T21:45:28Z'
        lastUpdated: '2024-09-25T21:45:28Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oa9g0l878boNXWzs1d7/request-conditions/rcon0919nk0zQXVkj1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-15-entitlement-bundle-access-scope-everyone-fixed-duration-full:
      summary: For fixed duration access to entitlement bundles, open to everyone
      description: A request condition allowing everyone to request thirty days of access to entitlement bundles
      value:
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: ENTITLEMENT_BUNDLES
          entitlementBundles:
            - id: enbllojq9J9J105DL1d6
            - id: enb21kv4vIdSYzxgY1d6
            - id: enb21kv7dooltqx2s1d6
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Entitlement bundles | Fixed duration | Everyone
        description: A request condition allowing everyone to request thirty days of access to entitlement bundles
        id: rcon07r6d4hzORRrS1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T21:31:35Z'
        lastUpdated: '2024-09-25T21:31:35Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oa9g0l878boNXWzs1d7/request-conditions/rcon07r6d4hzORRrS1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-16-entitlement-bundle-access-scope-group-requesters-requester-duration-full:
      summary: For requester specified access duration to entitlement bundles, open to groups
      description: A request condition allowing members of groups to request a maximum of thirty days of access to entitlement bundles
      value:
        requesterSettings:
          type: GROUPS
          groups:
            - id: 00ghcvgv9oM5AEY8n1d7
        accessScopeSettings:
          type: ENTITLEMENT_BUNDLES
          entitlementBundles:
            - id: enbllojq9J9J105DL1d6
            - id: enb21kv4vIdSYzxgY1d6
            - id: enb21kv7dooltqx2s1d6
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Entitlement bundles | Variable duration | Groups
        description: A request condition allowing members of groups to request a maximum of thirty days of access to entitlement bundles
        id: rcon2irmdk1EEevIt1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-26T13:51:58Z'
        lastUpdated: '2024-09-26T13:51:58Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oa9g0l878boNXWzs1d7/request-conditions/rcon2irmdk1EEevIt1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-17-entitlement-bundle-access-scope-everyone-requester-duration-full:
      summary: For requester specified access duration to entitlement bundles, open to everone
      description: A request condition allowing everyone to request a maximum of thirty days of access to entitlement bundles
      value:
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: ENTITLEMENT_BUNDLES
          entitlementBundles:
            - id: enbllojq9J9J105DL1d6
            - id: enb21kv4vIdSYzxgY1d6
            - id: enb21kv7dooltqx2s1d6
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Entitlement bundles | Variable duration | Everyone
        description: A request condition allowing everyone to request a maximum of thirty days of access to entitlement bundles
        id: rcon2irt7iHLePLAv1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-26T15:54:02Z'
        lastUpdated: '2024-09-26T15:54:02Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oa9g0l878boNXWzs1d7/request-conditions/rcon2irt7iHLePLAv1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-18-team-requesters-full:
      summary: For permanent access to an application, open to members of a teams
      description: A request condition allowing members of a team to request permanent access to an application
      value:
        requesterSettings:
          type: TEAMS
          teams:
            - id: 683fe5f2e6aa40dde3dbff63
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        approvalSequenceId: 66857574885b300006c1a602
        name: Application | Permanent | Team
        description: A request condition allowing members of a team to request permanent access to an application
        id: rcon09a0taOlBnI131d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T16:57:23Z'
        lastUpdated: '2024-09-25T16:57:23Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon09a0taOlBnI131d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-19-team-requesters-fixed-duration-full:
      summary: For fixed duration access to an application, open to members of teams
      description: A request condition allowing members of teams to request thirty days of access to an application
      value:
        requesterSettings:
          type: TEAMS
          teams:
            - id: 683fe5f2e6aa40dde3dbff63
            - id: 681ae84f28fdd10007fa7a19
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Application | Fixed Duration | Teams
        description: A request condition allowing members of teams to request thirty days of access to an application
        id: rcon099qbMjivmCMR1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T13:28:51Z'
        lastUpdated: '2024-09-25T13:28:51Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v1/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon099qbMjivmCMR1d6
            hints: {}
        status: INACTIVE
        priority: 0
    request-condition-creatable-20-team-requesters-requester-duration-full:
      summary: For requester specified access duration to an application, open to teams
      description: A request condition allowing members of teams to request a maximum of thirty days of access to an application
      value:
        requesterSettings:
          type: TEAMS
          teams:
            - id: 683fe5f2e6aa40dde3dbff63
            - id: 681ae84f28fdd10007fa7a19
            - id: 681ae7df28fdd10007fa782c
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: REQUESTER_SPECIFIED_DURATION
          maximumDuration: P30D
        approvalSequenceId: 66857574885b300006c1a602
        name: Application | Variable Duration | Team(s) audience
        description: A request condition allowing members of teams to request a maximum of thirty days of access to an application
        id: rcon090mcKZFEWK5u1d6
        createdBy: 00u3tm6uw9Cx4Sn8H1d7
        created: '2024-09-25T13:48:18Z'
        lastUpdated: '2024-09-25T13:48:18Z'
        lastUpdatedBy: 00u3tm6uw9Cx4Sn8H1d7
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oaf5f0enyZ62voJV1d7/request-conditions/rcon090mcKZFEWK5u1d6
            hints: {}
        status: INACTIVE
        priority: 0
    invalid-condition-id:
      summary: Condition with invalid Id
      description: Trying to update a condition with invalid ID
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: AccessRequestCondition'
        errorLink: E0000001
        errorId: oaeqBH7sADYQ5SwivzO4VD0wQ
        errorCauses:
          - errorSummary: 'AccessRequestCondition - String "NOT_FOUND" is too short (length: 9, required minimum: 20)'
          - errorSummary: AccessRequestCondition - regex rco[0-9a-zA-Z]+ does not match input string NOT_FOUND
    invalid-duration-settings:
      summary: Condition with invalid duration settings
      description: Trying to create or update a condition with invalid duration settings
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: AccessRequestCondition'
        errorLink: E0000001
        errorId: oaeqBH7sADYQ5SwivzO4VD0wQ
        errorCauses:
          - errorSummary: Maximum weeks for access duration is 12 weeks.
    invalid-requester-settings:
      summary: Condition with invalid requester settings
      description: Trying to create or update a condition with invalid requester settings
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: AccessRequestCondition'
        errorLink: E0000001
        errorId: oaeqBH7sADYQ5SwivzO4VD0wQ
        errorCauses:
          - errorSummary: RequestSettings is invalid for this resource.
    request-condition-by-id-get-full-success:
      summary: When everyone can request resource default access
      description: Full representation of a request condition
      value:
        id: rcob0oNGTSWTBKOLGLNR
        name: Default resource access
        description: This is a condition for requesting default resource access
        approvalSequenceId: 61eb0f06c462d20007f051ac
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P2W
        priority: 0
        status: ACTIVE
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2019-08-24T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLGLNR
    request-condition-get-inactive-full-success:
      summary: When request condition is ACTIVE
      description: When request condition is ACTIVE, then the deactivate operation succeeds.
      value:
        id: rcob0oNGTSWTBKOLGLNR
        name: Default resource access
        description: This is a condition for requesting default resource access
        approvalSequenceId: 61eb0f06c462d20007f051ac
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P2W
        priority: 0
        status: INACTIVE
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2019-08-24T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLGLNR
    request-condition-get-invalid-access-scope-settings-full-success:
      summary: When request conditions access scope settings are invalid
      description: If the system noticed an entitlement bundle was deleted, then related request conditions can become invalid.
      value:
        id: rcob0oNGTSWTBKOLGLNR
        name: Default resource access
        description: This is a condition for requesting default resource access
        approvalSequenceId: 61eb0f06c462d20007f051ac
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: ENTITLEMENT_BUNDLES
          entitlementBundles: []
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P2W
        priority: 0
        status: INVALID
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2019-08-24T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLGLNR
    request-condition-get-invalid-requester-settings-full-success:
      summary: When request conditions requester settings are INVALID
      description: If the system noticed a group was deleted, then related request conditions can become INVALID.
      value:
        id: rcob0oNGTSWTBKOLGLNR
        name: Default resource access
        description: This is a condition for requesting default resource access
        approvalSequenceId: 61eb0f06c462d20007f051ac
        requesterSettings:
          type: GROUPS
          groups: []
        accessScopeSettings:
          type: ENTITLEMENT_BUNDLES
          entitlementBundles:
            - id: enbfxqCAJWWGELFTYCCC
        priority: 0
        status: INVALID
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2019-08-24T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLGLNR
    request-condition-get-active-full-success:
      summary: When request condition is INACTIVE
      description: When request condition is INACTIVE, then the activate operation succeeds.
      value:
        id: rcob0oNGTSWTBKOLGLNR
        name: Default resource access
        description: This is a condition for requesting default resource access
        approvalSequenceId: 61eb0f06c462d20007f051ac
        requesterSettings:
          type: EVERYONE
        accessScopeSettings:
          type: RESOURCE_DEFAULT
        accessDurationSettings:
          type: ADMIN_FIXED_DURATION
          duration: P2W
        priority: 0
        status: ACTIVE
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2019-08-24T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/resources/0oab0oNGTSWTBKOLGLNR/request-conditions/0rcb0oNGTSWTBKOLGLNR
    request-condition-service-status-get-success:
      summary: When request condition service is ready
      description: Status of request condition service
      value:
        status: READY
    request-settings-get-bundles-enabled:
      summary: When governance enabled resource has entitlement bundle and value access scopes
      description: |
        When resource:
          - Has entitlement management enabled
          - Has at least one entitlement value
          - Has at least one entitlement bundle
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: ENTITLEMENT_BUNDLES
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-no-bundles-and-no-values-ramp-enabled:
      summary: When governance enabled resource only supported default access scope
      description: |
        When resource:
          - Has entitlement management enabled
          - AND hasn't defined any entitlement values
          - AND hasn't defined any entitlement bundles
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-no-bundles-has-values-ramp-enabled:
      summary: When governance enabled resource has default and entitlement value access scope
      description: |
        When resource:
          - Has governance engine enabled
          - AND has at least one entitlement defined
          - AND has not defined any entitlement bundles
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-no-governance-engine-has-groups:
      summary: When resource supports default and group access scope
      description: |
        When resource:
          - Does not have governance engine enabled
          - AND has at least one group assignment or push group.
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: GROUPS
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-no-governance-engine-no-groups:
      summary: When resource only supports default access scope
      description: |
        When resource:
          - Does not have governance engine with at least one entitlement or bundle
          - AND does not have a group that assigns to the resource
          - AND does not have a group that pushes to the resource.
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-only-groups-requester-settings:
      summary: When resource requester settings restricted to groups
      description: |
        Some special resources, like `Okta Admin Console` application, may have their `requesterSettings` restricted to only groups.
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: GROUPS
        validRequesterSettings:
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-resource-not-supported:
      summary: When resource is not supported
      description: |
        When a resource does not have any support for access requests.

        This can occur when the organization is not enabled for any access requests features.
      value:
        validAccessScopeSettings: []
        validRequesterSettings: []
        validAccessDurationSettings: {}
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings: []
    request-settings-get-groups-and-everyone-requester-settings:
      summary: When resource has groups and everyone requester settings
      description: When resource has groups and everyone requester settings
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: ENTITLEMENT_BUNDLES
        validRequesterSettings:
          - type: GROUPS
          - type: EVERYONE
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-resource-with-requester-specified-duration-support:
      summary: When resource supports admin fixed access duration as well as requester specified access duration
      description: |
        When resource supports admin fixed access duration as well as requester specified access duration
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
        validRequesterSettings:
          - type: EVERYONE
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
            - type: REQUESTER_SPECIFIED_DURATION
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-resource-requester-settings-robo-enabled-everyone:
      summary: When the resource supports request on behalf of for every requester
      description: |
        When resource supports any requesters requesting on behalf of any other requester
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
        validRequesterSettings:
          - type: EVERYONE
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
            - type: REQUESTER_SPECIFIED_DURATION
        requestOnBehalfOfSettings:
          allowed: true
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-resource-requester-settings-robo-enabled-direct-report:
      summary: When the resource supports requesting on behalf of direct reports
      description: |
        When the resource supports requesting on behalf of direct reports
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
        validRequesterSettings:
          - type: EVERYONE
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
            - type: REQUESTER_SPECIFIED_DURATION
        requestOnBehalfOfSettings:
          allowed: true
          onlyFor:
            - DIRECT_REPORT
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-risk-settings-not-enabled:
      summary: When risk settings is not supported at the resource level
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: ENTITLEMENT_BUNDLES
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes: []
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-risk-settings-enabled:
      summary: When risk settings is supported at the resource level
      description: |
        When risk settings is supported at the resource level. 
        Request submission is restricted by default, when no risk settings have been updated.
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: ENTITLEMENT_BUNDLES
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes:
            - type: DEFAULT_SETTING
        riskSettings:
          defaultSetting:
            requestSubmissionType: RESTRICTED
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-risk-settings-with-request-submission-allowed-with-no-overrides:
      summary: When resource has one risk settings allowing request submission with no overrides
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: ENTITLEMENT_BUNDLES
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes:
            - type: DEFAULT_SETTING
        riskSettings:
          defaultSetting:
            requestSubmissionType: ALLOWED_WITH_NO_OVERRIDES
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-risk-settings-with-request-submission-allowed-with-overrides:
      summary: When resource has one risk settings allowing request submission with overrides
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: ENTITLEMENT_BUNDLES
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes:
            - type: DEFAULT_SETTING
        riskSettings:
          defaultSetting:
            requestSubmissionType: ALLOWED_WITH_OVERRIDES
            approvalSequenceId: 66857574885b300006c1a602
            accessDurationSettings:
              type: REQUESTER_SPECIFIED_DURATION
              maximumDuration: P2W
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-risk-settings-with-request-submission-restricted:
      summary: When resource has one risk settings restricting request submission
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: ENTITLEMENT_BUNDLES
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes:
            - type: DEFAULT_SETTING
        riskSettings:
          defaultSetting:
            requestSubmissionType: RESTRICTED
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-get-risk-settings-with-error:
      summary: When resource risk settings has an error
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
          - type: ENTITLEMENT_BUNDLES
        validRequesterSettings:
          - type: EVERYONE
          - type: GROUPS
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
        validRiskSettings:
          supportedTypes:
            - type: DEFAULT_SETTING
        riskSettings:
          defaultSetting:
            requestSubmissionType: RESTRICTED
            accessDurationSettings:
              type: ADMIN_FIXED_DURATION
              duration: P2W
            error:
              - INVALID_SEQUENCE
        validRequestOnBehalfOfSettings:
          - type: EVERYONE
          - type: DIRECT_REPORT
    request-settings-valid-request-on-behalf-of-settings-for-unsupported-resources:
      summary: When the resource doesn't support any valid request on behalf of settings
      value:
        validAccessScopeSettings:
          - type: RESOURCE_DEFAULT
        validRequesterSettings:
          - type: EVERYONE
        validAccessDurationSettings:
          required: true
          maximumDays: 365
          maximumHours: 72
          maximumWeeks: 52
          supportedTypes:
            - type: ADMIN_FIXED_DURATION
            - type: REQUESTER_SPECIFIED_DURATION
        validRequestOnBehalfOfSettings: []
        validRiskSettings:
          supportedTypes: []
    resource-request-setting-patchable-robo-00-everyone-example:
      summary: For adding request on behalf of settings to a resource
      description: Request on behalf of settings where any requester can request
      value:
        requestOnBehalfOfSettings:
          allowed: true
    resource-request-setting-patchable-robo-01-direct-report-example:
      summary: For updating request on behalf of settings to a resource
      description: Request on behalf of settings where any requester with direct reports can request for those direct reports
      value:
        requestOnBehalfOfSettings:
          allowed: true
          onlyFor:
            - DIRECT_REPORT
    resource-request-setting-patchable-robo-02-disable-example:
      summary: For disabling request on behalf of settings for a resource
      description: Disable request on behalf of
      value:
        requestOnBehalfOfSettings: null
    resource-request-setting-patchable-risk-settings-00-request-submission-allowed-with-no-overrides-example:
      summary: For updating risk settings to allow request submission with no overrides
      value:
        riskSettings:
          defaultSetting:
            requestSubmissionType: ALLOWED_WITH_NO_OVERRIDES
    resource-request-setting-patchable-risk-settings-01-request-submission-restricted-example:
      summary: For updating risk settings to restrict request submission
      value:
        riskSettings:
          defaultSetting:
            requestSubmissionType: RESTRICTED
    resource-request-setting-patchable-risk-settings-02-request-submission-allowed-with-overrides-example:
      summary: For updating risk settings to allow request submission
      value:
        riskSettings:
          defaultSetting:
            requestSubmissionType: ALLOWED_WITH_OVERRIDES
            approvalSequenceId: 66857574885b300006c1a602
    resource-request-setting-patchable-risk-settings-03-request-submission-allowed-with-ads-example:
      summary: For updating risk settings to allow request submission with access duration settings
      value:
        riskSettings:
          defaultSetting:
            requestSubmissionType: ALLOWED_WITH_OVERRIDES
            approvalSequenceId: 66857574885b300006c1a602
            accessDurationSettings:
              type: REQUESTER_SPECIFIED_DURATION
              maximumDuration: P2W
    resource-request-setting-patchable-risk-settings-04-request-submission-allowed-remove-ads-example:
      summary: For updating risk settings to allow request submission and remove access duration settings
      value:
        riskSettings:
          defaultSetting:
            requestSubmissionType: ALLOWED_WITH_OVERRIDES
            approvalSequenceId: 66857574885b300006c1a602
            accessDurationSettings: null
    resource-request-setting-patchable-risk-settings-05-robo-example:
      summary: For updating both request on behalf of settings and risk settings to a resource
      value:
        requestOnBehalfOfSettings:
          allowed: true
        riskSettings:
          defaultSetting:
            requestSubmissionType: RESTRICTED
    resource-request-settings-patch-missing-fields:
      summary: When resource request settings is missing required fields
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: Request settings missing required fields'
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: Request settings is missing required fields
    resource-request-settings-patch-invalid-properties:
      summary: When resource request settings has invalid properties
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: Request settings has invalid properties'
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: 'Request settings has invalid properties: severity'
    org-request-settings-get-not-acknowledged:
      summary: When subprocessors have not been acknowledged
      value:
        subprocessorsAcknowledged: false
        provisioningStatus: NOT_PROVISIONED
        requestExperiences: []
        longTimePastProvisioned: false
    org-request-settings-get-acknowledged-not-provisioned:
      summary: When subprocessors have been acknowledged, but Access Requests org is not provisioned yet
      value:
        subprocessorsAcknowledged: true
        provisioningStatus: NOT_PROVISIONED
        requestExperiences: []
        longTimePastProvisioned: false
    org-request-settings-get-acknowledged-and-provisioned:
      summary: When subprocessors have been acknowledged and Access Requests org is provisioned after a short time
      value:
        subprocessorsAcknowledged: true
        provisioningStatus: PROVISIONED
        requestExperiences: []
        longTimePastProvisioned: false
    org-request-settings-get-provisioning-failed:
      summary: When subprocessors have been acknowledged and Access Requests org provisioning has failed
      value:
        subprocessorsAcknowledged: true
        provisioningStatus: PROVISIONING_FAILED
        requestExperiences: []
        longTimePastProvisioned: false
    org-request-settings-get-acknowledged-and-provisioned-with-request-experiences:
      summary: When subprocessors have been acknowledged and Access Requests org is provisioned with request experiences
      value:
        subprocessorsAcknowledged: true
        provisioningStatus: PROVISIONED
        requestExperiences:
          - ADMIN_ROLES
        longTimePastProvisioned: true
    org-request-settings-get-acknowledged-and-provisioned-after-some-time:
      summary: When subprocessors have been acknowledged and Access Requests org is provisioned after a long time
      value:
        subprocessorsAcknowledged: true
        provisioningStatus: PROVISIONED
        requestExperiences: []
        longTimePastProvisioned: true
    org-request-settings-get-notifications-enabled:
      summary: When notifications are enabled for all integrations that support notifications
      value:
        subprocessorsAcknowledged: true
        provisioningStatus: PROVISIONED
        requestExperiences: []
        longTimePastProvisioned: true
        integrations:
          settings:
            - integrationId: goi5a4b3c2d1e9f8g7h5
              type: SLACK
              notifications:
                enabled: true
    org-request-settings-get-slack-actions-enabled:
      summary: When Slack request actions are enabled for all integrations
      value:
        subprocessorsAcknowledged: true
        provisioningStatus: PROVISIONED
        requestExperiences: []
        longTimePastProvisioned: true
        integrations:
          settings:
            - integrationId: goi5a4b3c2d1e9f8g7h5
              type: SLACK
              notifications:
                enabled: true
              canInitiateRequest: true
              canApproveRequest: true
    org-request-settings-patchable-example:
      summary: Request Settings for the org for patch example
      description: Request Settings for the org for patch example
      value:
        subprocessorsAcknowledged: true
    org-request-settings-notifications-patchable-example:
      summary: Request settings with notifications
      value:
        integrations:
          settings:
            - integrationId: goi5a4b3c2d1e9f8g7h5
              type: SLACK
              notifications:
                enabled: true
    org-request-settings-slack-actions-patchable-example:
      summary: Request Settings with Slack request actions for the org for patch example
      description: Request Settings with Slack request actions for the org for patch example
      value:
        integrations:
          settings:
            - integrationId: goi5a4b3c2d1e9f8g7h5
              type: SLACK
              notifications:
                enabled: true
              canInitiateRequest: true
              canApproveRequest: true
    request-sequences-list-success:
      summary: List all request sequences for a resource
      description: Access request sequences that are returned from a get call
      value:
        data:
          - id: 61eb0f06c462d20007f051ac
            name: No approver sequence
            description: No approvers needed
            compatibleResourceTypes:
              - APP
            link: https://subdomain.okta.at.com/next/sequences/61eb0f06c462d20007f051ac
          - id: 61eb0f06c462d20007f124bq
            name: Manager approval
            description: Manager approval required
            compatibleResourceTypes:
              - APP
              - GROUP
            link: https://subdomain.okta.at.com/next/sequences/61eb0f06c462d20007f124bq
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v1/request-sequences
          newSequence:
            href: https://subdomain.okta.at.com/next/sequences/new
    request-sequence-success:
      summary: Get access request sequence
      description: Access request sequence that are returned from a get call by sequence `id`
      value:
        id: 61eb0f06c462d20007f051ac
        name: No approver sequence
        description: No approvers needed
        compatibleResourceTypes:
          - APP
          - GROUP
        link: https://subdomain.okta.at.com/next/sequences/61eb0f06c462d20007f051ac
    requests-list-no-filter:
      summary: List request response with no filter
      description: A list request response with no filter
      value:
        data:
          - id: req42kjDgk1EubTwo0g4
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLGLNR
            lastUpdated: '2022-05-05T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
            status: APPROVED
            resolved: '2022-05-05T14:14:22Z'
            grantStatus: GRANTED
            granted: '2022-05-05T14:15:22Z'
            requestedBy:
              type: OKTA_USER
              externalId: 00ub0oNGTSWTBKOLGLNR
            requestedFor:
              type: OKTA_USER
              externalId: 00ub0oNGTSWTBKOLGLNR
            requested:
              entryId: cenb0oADRXTBKOLGLNR
              accessScopeId: 0oafxqCAJWWGELFTYASJ
              accessScopeType: APPLICATION
              resourceId: 0oafxqCAJWWGELFTYASJ
              resourceType: APPLICATION
            _links:
              catalogEntry:
                href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
                type: application/json
              approvalSequence:
                href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
                type: application/json
              requestCondition:
                href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
                type: application/json
              self:
                href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
                type: application/json
          - id: req42kjDgk1EubTwo0g4
            created: '2019-08-24T14:15:22Z'
            createdBy: 00ub0oNGTSWTBKOLGLNR
            lastUpdated: '2022-05-05T14:15:22Z'
            lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
            status: PENDING
            requestedBy:
              type: OKTA_USER
              externalId: 00ub0oNGTSWTBKOLGLNR
            requestedFor:
              type: OKTA_USER
              externalId: 00ub0oNGTSWTBKOLGLNR
            requested:
              entryId: cenb0oADRXTBKOLGLNR
              accessScopeId: 0oafxqCAJWWGELFTYASJ
              accessScopeType: APPLICATION
              resourceId: 0oafxqCAJWWGELFTYASJ
              resourceType: APPLICATION
            _links:
              catalogEntry:
                href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
                type: application/json
              approvalSequence:
                href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
                type: application/json
              requestCondition:
                href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
                type: application/json
              self:
                href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
                type: application/json
          - id: req183r56S4oyOBEK346
            created: '2025-10-20T21:29:46Z'
            createdBy: pca2pmvygWZxpWvkN346
            lastUpdated: '2025-10-20T21:29:49Z'
            lastUpdatedBy: pca2pmvygWZxpWvkN346
            status: PENDING
            requestedBy:
              type: UNKNOWN
              externalId: pca2pmvygWZxpWvkN346
            requestedFor:
              type: OKTA_USER
              externalId: 00u2pmg6yPnWGPkLG346
            requested:
              entryId: cen183rywrv6vIXe6346
              resourceId: 0oa2q5fehClgEDS7R346
              resourceType: APPLICATION
              accessScopeId: 0oa2q5fehClgEDS7R346
              accessScopeType: APPLICATION
            _links:
              catalogEntry:
                href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cen183rywrv6vIXe6346
                type: application/json
              approvalSequence:
                href: https://myorg.okta.com/governance/api/v1/resources/0oa2q5fehClgEDS7R346/request-sequences/68f6a916a46df135154f0068
                type: application/json
              requestCondition:
                href: https://myorg.okta.com/governance/api/v1/resources/0oa2q5fehClgEDS7R346/request-conditions/rco183r9k0kkCl12S346
                type: application/json
              self:
                href: https://myorg.okta.com/governance/api/v1/requests/req183r56S4oyOBEK346
                type: application/json
        _links:
          self:
            href: https://myorg.okta.com/governance/api/v1/requests?limit=1
          next:
            href: https://myorg.okta.com/governance/api/v1/requests?limit=1&after=SDERDSDx00ub0oNGTSWTBKOLGLNR
    empty-after:
      summary: Empty `after` parameter error response
      description: A request contains the `after` query parameter but it's empty (?after=)
      value:
        errorCode: E0000029
        errorSummary: Invalid paging request
        errorLink: E0000029
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: Empty value found for query parameter 'after'
            reason: EMPTY_PARAMETER
            locationType: query
            location: /after
            domain: governance
    requests-list-bad-request-invalid-after:
      summary: When after parameter is invalid format
      description: When after query parameter value is invalid format (?after=1)
      value:
        errorCode: E0000029
        errorSummary: Invalid paging request.
        errorLink: E0000029
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: must NOT have fewer than 24 characters
            reason: INVALID_STRING_LENGTH_UNDER_MIN
            locationType: query
            location: /after
          - domain: governance
            errorSummary: must match pattern "^[a-fA-F\\d]{24}$"
            reason: STRING_FORMAT_INVALID
            locationType: query
            location: /after
          - domain: governance
            errorSummary: must be a request id
            reason: STRING_FORMAT_INVALID
            locationType: query
            location: /after
    requests-list-bad-request-not-exist-after:
      summary: When after parameter value not found
      description: When a request contains after query parameter with request ID that does not exist
      value:
        errorCode: E0000029
        errorSummary: Invalid paging request.
        errorLink: E0000029
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: 08ab2db568c7c300079fefd0 not found
            reason: IDENTIFIER_NOT_FOUND
            locationType: query
            location: /after
            domain: governance
    invalid-sort:
      summary: Invalid `orderBy` parameter error response
      description: Invalid `orderBy` parameter error response
      value:
        errorCode: E0000029
        errorSummary: Invalid paging request
        errorLink: E0000029
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: Invalid `orderBy` syntax
            reason: STRING_FORMAT_INVALID
            locationType: query
            location: /orderBy
            domain: governance
    invalid-limit:
      summary: Invalid `limit` parameter error response
      description: Invalid `limit` parameter error response
      value:
        errorCode: E0000029
        errorSummary: Invalid paging request
        errorLink: E0000029
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: The `limit` parameter isn't valid.
            reason: INVALID_DATA_TYPE
            locationType: query
            location: /limit
            domain: governance
    admin-request-00-create-catalog-inbox-noinput:
      summary: When the requested type is `CATALOG_ENTRY`, the request approval type is `OKTA` with no requester inputs
      description: When `requested.type` is `CATALOG_ENTRY`, `requestApproval.type` is `OKTA` with no requester input fields
      value:
        requested:
          type: CATALOG_ENTRY
          entryId: cen3qpimoKc7wCPyx8g6
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
    request-00-create-no-fields-example-full:
      summary: When requesting for authenticated user
      description: Request access for authenticated user by omitting `requesterUserIds`
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: SUBMITTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-00-create-no-fields-client-credential-example-full:
      summary: When requesting access with client credentials authentication
      description: Request access using client credential authentication and omitting the `requestedBy` field in the request body.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: pca2ei8FBH7Mo7SpD0g4
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: pca2ei8FBH7Mo7SpD0g4
        status: SUBMITTED
        requestedBy:
          type: UNKNOWN
          externalId: pca2ei8FBH7Mo7SpD0g4
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v2/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v2/requests/req42kjDgk1EubTwo0g4
            type: application/json
    request-01-create-no-fields-empty-array-example-full:
      summary: When entry has no fields, empty array provided
      description: When entry has no fields, empty array provided
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: SUBMITTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-02-create-text-field-required-example-full:
      summary: When entry has one TEXT field
      description: When entry has one TEXT field
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: SUBMITTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: bb9da40d-9c1b-41c6-8016-edfd010b02d2
            value: I need access to complete my work.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-03-create-select-field-required-example-full:
      summary: When entry has one SELECT field
      description: When entry has one SELECT field
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: SUBMITTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: cc9da40d-9c1b-41c6-8016-edfd010b02d2
            value: A select choice
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-04-create-multi-select-field-required-example-full:
      summary: When entry has a MULTISELECT field
      description: When entry has a MULTISELECT field
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: SUBMITTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: dd9da40d-9c1b-41c6-8016-edfd010b02d2
            values:
              - 1st select choice
              - 2nd select choice
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-05-create-date-time-field-required-example-full:
      summary: When entry has a ISO_DATE field
      description: When entry has a ISO_DATE field
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: SUBMITTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed
            value: '2022-05-24'
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-06-create-one-field-of-each-type-required-example-full:
      summary: When entry has all field types
      description: When entry has all field types
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: SUBMITTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: bb9da40d-9c1b-41c6-8016-edfd010b02d2
            value: I need access to complete my work.
          - id: cc9da40d-9c1b-41c6-8016-edfd010b02d2
            value: A select choice
          - id: dd9da40d-9c1b-41c6-8016-edfd010b02d2
            values:
              - 1st select choice
              - 2nd select choice
          - id: 1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed
            value: '2022-05-24'
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-with-risk-assessment-example:
      summary: When existing request has risk assessment
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: SUBMITTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        riskAssessment:
          requestSubmissionType: ALLOWED_WITH_NO_OVERRIDES
          riskRules:
            - name: Process and Approve Payment
              description: Account payable clerks can’t approve purchase orders or process payments.
            - name: Journal entry creation and approval
              description: Users with the ability to create journal entries should not have the authority to approve and post those same entries.
            - name: Financial reporting and transaction processing
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-requester-user-id-invalid-example:
      summary: When a requester user ID can't be found
      description: Bad request response when a `requesterUserId` can't be found.
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: /requesterUserIds/0 00u22uiKQa0xXkbdGLNR not found'
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: 00u22uiKQa0xXkbdGLNR not found
            location: /requesterUserIds/0
            locationType: body
            reason: IDENTIFIER_NOT_FOUND
    request-field-id-missing-example:
      summary: When field ID is not provided in fieldValues
      description: When the `requesterFieldValues` contains an item but no `id` is provided
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: /requesterFieldValues/0 must have required property ''id'''
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: must have required property 'id'
            location: /requesterFieldValues/0/id
            locationType: body
            reason: REQUIRED_PROPERTY_MISSING
    request-field-id-invalid-example:
      summary: When field ID in requesterFieldValues is invalid
      description: When the `requesterFieldValues` contains an item and the `id` is invalid
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: /requesterFieldValues/0/id must be uuid v4'
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: must be uuid v4
            location: /requesterFieldValues/0/id
            locationType: body
            reason: STRING_FORMAT_INVALID
    request-field-id-not-found-example:
      summary: When field ID not found on request type
      description: When the `requesterFieldValues` contains an item with an `id` that can't be found
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: /requesterFieldValues/0/id 05c87fe9-11f6-4d40-a033-b155b39dcdbe not found'
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: 05c87fe9-11f6-4d40-a033-b155b39dcdbe not found
            location: /requesterFieldValues/0/id
            locationType: body
            reason: IDENTIFIER_NOT_FOUND
    request-field-value-missing-example:
      summary: When field value is not provided in fieldValues
      description: When the requesterFieldValues contains an item but no value is provided
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: /requesterFieldValues/0 must have required property ''value'''
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: must have required property 'value'
            location: /requesterFieldValues/0/value
            locationType: body
            reason: REQUIRED_PROPERTY_MISSING
    request-field-value-invalid-example:
      summary: When field value in requesterFieldValues is invalid
      description: When the requesterFieldValues contains an item and the value is invalid
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: /requesterFieldValues/0/value must be date-time'
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: must be date-time
            location: /requesterFieldValues/0/value
            locationType: body
            reason: STRING_FORMAT_INVALID
    request-field-type-missing-example:
      summary: When field type is not provided in fieldValues
      description: When the requesterFieldValues contains an item but no type is provided
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: /requesterFieldValues/0 must have required property ''type'''
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: must have required property 'type'
            location: /requesterFieldValues/0/value
            locationType: body
            reason: REQUIRED_PROPERTY_MISSING
    request-field-type-invalid-example:
      summary: When field type in requesterFieldValues is invalid
      description: When the requesterFieldValues contains an item and the type is invalid
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: /requesterFieldValues/0/type must be equal to one of the allowed values: TEXT, SELECT, DATE-TIME'
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: 'must be equal to one of the allowed values: TEXT, SELECT, DATE-TIME'
            location: /requesterFieldValues/0/type
            locationType: body
            reason: INVALID_ENUM_VALUE
    request-create-authenticated-user-not-admin-example:
      summary: Authenticated user is not an admin
      description: Operation restricted to authenticated users with Super Admin or Access Request Admin role.
      value:
        errorCode: E0000006
        errorSummary: You do not have permission to perform the requested action.
        errorLink: E0000006
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            reason: INSUFFICIENT_PERMISSIONS
            errorSummary: Authenticated user must be a Super Admin or Access Request Admin.
    request-create-authenticated-user-not-member-of-example:
      summary: Authenticated user not member of group in request settings
      description: When the request's request type specifies that the requester must be a member of a group in /requestSettings/requesterMemberOf, that restriction also applies to the authenticated user.
      value:
        errorCode: E0000006
        errorSummary: You do not have permission to perform the requested action.
        errorLink: E0000006
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: Authenticated user and contents of /body/requesterUserIds must be members of the group specified in the request type's /requestSettings/requesterMemberOf array.
            location: /requesterUserIds
            locationType: body
            reason: REQUEST_TYPE_SETTINGS
    request-request-type-disabled-example:
      summary: When the request type in disabled status
      description: Conflict response when creating a request using a request type in disabled status.
      value:
        errorCode: E0000195
        errorSummary: 'Api validation failed due to conflict: Request type 61eb2db568c7c300079fefd0 must be ACTIVE. Current status: DISABLED'
        errorLink: E0000195
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: 'Request type 61eb2db568c7c300079fefd0 must be ACTIVE. Current status: DISABLED'
            location: /requestTypeId
            locationType: body
            reason: REQUEST_TYPE_STATE
    request-request-type-draft-example:
      summary: When the request type in draft status
      description: Conflict response when creating a request using a request type in draft status.
      value:
        errorCode: E0000195
        errorSummary: 'Api validation failed due to conflict: Request type 61eb2db568c7c300079fefd0 must be ACTIVE. Current status: DRAFT'
        errorLink: E0000195
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: 'Request type 61eb2db568c7c300079fefd0 must be ACTIVE. Current status: DRAFT'
            location: /requestTypeId
            locationType: body
            reason: REQUEST_TYPE_STATE
    request-required-field-missing-example:
      summary: When request is missing required requester field
      description: When the request type has a required requesterField, but the add request operation does not provide a matching requesterFieldValue
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: /requesterFieldValues must have all required requesterFields'
        errorLink: E0000001
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - domain: governance
            errorSummary: must have all required requesterFields
            location: /requesterFieldValues
            locationType: body
            reason: REQUEST_TYPE_SETTINGS
    request-get-submitted:
      summary: When a request is just submitted
      description: |
        Submitted requests can't yet have an `approvalSequenceId` or `requestConditionId`.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: SUBMITTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          permalinkId: 1
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-get-pending:
      summary: When request becomes PENDING
      description: |
        PENDING requests have a matched approval sequence and condition, but do not yet have any approvals or fulfillment.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: PENDING
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          permalinkId: 1
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalSequence:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
            type: application/json
          requestCondition:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-get-rejected:
      summary: When creating the request is rejected
      description: |
        Requests may be rejected for several reasons:
         - If a request can't be matched to any request condition, it will lack an approval sequence and 
           matched condition.
         - If a request does match a request condition but fails validation, it will have an approval sequence 
           and matched condition, yet still be rejected due to validation failure.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: REJECTED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          permalinkId: 1
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-get-denied:
      summary: When request becomes DENIED
      description: |
        DENIED requests have a matched approval sequence and condition, and at least one approval which was denied.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: DENIED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          decided: '2019-08-26T14:15:22Z'
          status: DENIED
          externalRequestId: 62f6d63a1764a30007763ae2
          permalinkId: 1
          decisions:
            - userId: 00ub0oNGTSWTBKOLGLNR
              userName: Becky Raferty
              decision: DENIED
              decided: '2022-06-02T21:36:25.344Z'
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalSequence:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
            type: application/json
          requestCondition:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-get-approved:
      summary: When request becomes APPROVED
      description: |
        APPROVED requests have a matched approval sequence and condition, and either no approvals, or one more APPROVED approvals.

        An approved request's grant status starts in PENDING status.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: APPROVED
        grantStatus: PENDING
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          decided: '2019-08-26T14:15:22Z'
          status: APPROVED
          externalRequestId: 62f6d63a1764a30007763ae2
          permalinkId: 1
          decisions:
            - userId: 00ub0oNGTSWTBKOLGLNR
              userName: Becky Raferty
              decision: APPROVED
              decided: '2022-06-02T21:36:25.344Z'
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalSequence:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
            type: application/json
          requestCondition:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-gets-approved-from-delegate:
      summary: When request becomes APPROVED from assigned delegate
      description: |
        APPROVED requests have a matched approval sequence and condition, and either no approvals, or one more APPROVED approvals.

        An approved request's grant status starts in PENDING status.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: APPROVED
        grantStatus: PENDING
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          decided: '2019-08-26T14:15:22Z'
          status: APPROVED
          externalRequestId: 62f6d63a1764a30007763ae2
          permalinkId: 1
          decisions:
            - userId: 00ub0oNGTSWTBKOLGLNR
              userName: Becky Raferty
              decision: APPROVED
              decided: '2022-06-02T21:36:25.344Z'
              originalDeciderFullName: Manager Joe
              originalDeciderEmail: joe@okta.com
              originalDeciderId: 00ub0oNGTSWTBKOLGLNF
              deciderDelegated: true
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalSequence:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
            type: application/json
          requestCondition:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-gets-approved-from-escalated-user:
      summary: When request becomes APPROVED from assigned escalated user
      description: |
        APPROVED requests have a matched approval sequence and condition, and either no approvals, or one more APPROVED approvals.

        An approved request's grant status starts in PENDING status.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: APPROVED
        grantStatus: PENDING
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          decided: '2019-08-26T14:15:22Z'
          status: APPROVED
          externalRequestId: 62f6d63a1764a30007763ae2
          permalinkId: 1
          decisions:
            - userId: 00ub0oNGTSWTBKOLGLNR
              userName: Becky Raferty
              decision: APPROVED
              decided: '2022-06-02T21:36:25.344Z'
              originalDeciderFullName: Manager Joe
              originalDeciderEmail: joe@okta.com
              originalDeciderId: 00ub0oNGTSWTBKOLGLNF
              deciderEscalated: true
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalSequence:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
            type: application/json
          requestCondition:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-get-approved-and-granted:
      summary: When the request is approved, the access grant is successful
      description: |
        When an approved request has access granted, and there is no access duration.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: APPROVED
        resolved: '2022-05-05T14:14:22Z'
        grantStatus: GRANTED
        granted: '2022-05-05T14:15:22Z'
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          decided: '2019-08-26T14:15:22Z'
          status: APPROVED
          externalRequestId: 62f6d63a1764a30007763ae2
          permalinkId: 1
          decisions:
            - userId: 00ub0oNGTSWTBKOLGLNR
              userName: Becky Raferty
              decision: APPROVED
              decided: '2022-06-02T21:36:25.344Z'
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalSequence:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
            type: application/json
          requestCondition:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-get-approved-and-granted-failed:
      summary: When the request is approved, the access grant has failed
      description: |
        When a request is approved, but the process of granting the access to the requested resource is failed.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: APPROVED
        resolved: '2022-05-05T14:14:22Z'
        grantStatus: FAILED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          decided: '2019-08-26T14:15:22Z'
          status: APPROVED
          externalRequestId: 62f6d63a1764a30007763ae2
          permalinkId: 1
          decisions:
            - userId: 00ub0oNGTSWTBKOLGLNR
              userName: Becky Raferty
              decision: APPROVED
              decided: '2022-06-02T21:36:25.344Z'
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalSequence:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
            type: application/json
          requestCondition:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-get-approved-and-granted-needs-manual:
      summary: When the request is approved, granting access has to be manual
      description: |
        When an approved request has access granted, and there is no access duration.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: APPROVED
        resolved: '2022-05-05T14:14:22Z'
        grantStatus: MANUAL_REQUIRED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          decided: '2019-08-26T14:15:22Z'
          status: APPROVED
          externalRequestId: 62f6d63a1764a30007763ae2
          permalinkId: 1
          decisions:
            - userId: 00ub0oNGTSWTBKOLGLNR
              userName: Becky Raferty
              decision: APPROVED
              decided: '2022-06-02T21:36:25.344Z'
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalSequence:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
            type: application/json
          requestCondition:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-get-requested-on-behalf-of:
      summary: When request was requested on behalf of another requester
      description: |
        Requests that were requested by another requester will have a `OKTA_REQUESTED_FOR` `requesterFieldValues`.
        Whose user will match the `requestedFor` OKTA_USER
      value:
        id: req42kjDgk1EubTwo0g5
        created: '2024-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: APPROVED
        grantStatus: PENDING
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00u12gpFVIth5WbxT0g4
        requesterFieldValues:
          - id: OKTA_REQUESTED_FOR
            value: 00u12gpFVIth5WbxT0g4
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          decided: '2019-08-26T14:15:22Z'
          status: APPROVED
          externalRequestId: 62f6d63a1764a30007763ae2
          permalinkId: 1
          decisions:
            - userId: 00ub0oNGTSWTBKOLGLNR
              userName: Becky Raferty
              decision: APPROVED
              decided: '2022-06-02T21:36:25.344Z'
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalSequence:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-sequences/61eb2db568c7c300079fefd0
            type: application/json
          requestCondition:
            href: https://myorg.okta.com/governance/api/v1/resources/0oafxqCAJWWGELFTYASJ/request-conditions/rcob0oNGTSWTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-get-pending-with-client-credentials:
      summary: When request is created using client credentials token
      description: Request created using client credentials authentication with `UNKNOWN` principal type in `requestedBy` field.
      value:
        id: req183r56S4oyOBEK346
        createdBy: pca2pmvygWZxpWvkN346
        created: '2025-10-20T21:29:46Z'
        lastUpdated: '2025-10-20T21:29:49Z'
        lastUpdatedBy: pca2pmvygWZxpWvkN346
        status: PENDING
        requestedBy:
          externalId: pca2pmvygWZxpWvkN346
          type: UNKNOWN
        requestedFor:
          externalId: 00u2pmg6yPnWGPkLG346
          type: OKTA_USER
        requesterFieldValues: []
        requested:
          entryId: cen183rywrv6vIXe6346
          resourceId: 0oa2q5fehClgEDS7R346
          resourceType: APPLICATION
          accessScopeId: 0oa2q5fehClgEDS7R346
          accessScopeType: APPLICATION
        requestApproval:
          type: OKTA
          providerName: Okta Access Requests
          providerDescription: Okta Access Requests
          permalinkId: 1
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v2/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          approvalCondition:
            href: https:///myorg.okta.com/governance/api/v2/resources/0oa2q5fehClgEDS7R346/request-conditions/rco183r9k0kkCl12S346
            hints: {}
          approvalSequence:
            href: https:///myorg.okta.com/next/sequences/68f6a916a46df135154f0068
            hints: {}
          self:
            href: https:///myorg.okta.com/governance/api/v2/requests/req183r56S4oyOBEK346
            hints: {}
    request-update-status-canceled:
      summary: CANCELED response
      description: |
        No further actions can be taken on a `CANCELED` request.
      value:
        id: req42kjDgk1EubTwo0g4
        created: '2019-08-24T14:15:22Z'
        createdBy: 00ub0oNGTSWTBKOLGLNR
        lastUpdated: '2022-05-05T14:15:22Z'
        lastUpdatedBy: 00ub0oNGTSWTBKOLGLNR
        status: CANCELED
        requestedBy:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requestedFor:
          type: OKTA_USER
          externalId: 00ub0oNGTSWTBKOLGLNR
        requesterFieldValues:
          - id: 05c87fe9-11f6-4d40-a033-b155b39dcdbe
            label: What is the business justification for the request?
            type: TEXT
            value: I need access to complete a task.
        requested:
          entryId: cenb0oADRXTBKOLGLNR
          resourceId: 0oafxqCAJWWGELFTYASJ
          resourceType: APPLICATION
          accessScopeId: 0oafxqCAJWWGELFTYASJ
          accessScopeType: APPLICATION
        _links:
          catalogEntry:
            href: https://myorg.okta.com/governance/api/v1/catalogs/default/entries/cenb0oADRXTBKOLGLNR
            type: application/json
          self:
            href: https://myorg.okta.com/governance/api/v1/requests/61eb06a3c462d20007f0235c
            type: application/json
    request-update-failed-closed-request:
      summary: Request is closed
      description: The request can't be updated because it has a terminal status, such as `CANCELED`.
      value:
        errorCode: E0000002
        errorSummary: 'Request update failed: request status is already CANCELED.'
        errorLink: E0000002
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: Request status is already CANCELED.
    request-message-00-create-message-audience-all:
      summary: When creating a request message visible for everyone with access to the request
      description: Add request message for authenticated user visible to all
      value:
        message: Contact admin@atko.com for any additional assistance needed with this request.
    request-message-01-create-message-referencing-another-system:
      summary: When embedding a reference to another application
      description: Including a link to another system for an approver.
      value:
        message: Find information about our access request policies here https://<company-internal-wiki-1>
    request-message-02-create-message-max-message-limit:
      summary: When creating a request message approaching the maximum length limit
      description: A very long message programmatically added to the request.
      value:
        message: 'This access created as part of Sally''s onboarding packet. Please ensure you have review company guidelines on application access located at: - https://<company-internal-wiki-1> - https://<company-internal-wiki-2> - https://<company-internal-wiki-3> - https://<company-internal-wiki-5> - https://<company-internal-wiki-6> - https://<company-internal-wiki-7> - https://<company-internal-wiki-8> - https://<company-internal-wiki-9> - https://<company-internal-wiki-10> - https://<company-internal-wiki-11> - https://<company-internal-wiki-12> - https://<company-internal-wiki-13> - https://<company-internal-wiki-14> - https://<company-internal-wiki-15> - https://<company-internal-wiki-16> - https://<company-internal-wiki-17> - https://<company-internal-wiki-18> - https://<company-internal-wiki-19> - https://<company-internal-wiki-20> - https://<company-internal-wiki-21> - https://<company-internal-wiki-22> - https://<company-internal-wiki-23> - https://<company-internal-wiki-24> - https://<company-internal-wiki-25> - https://<company-internal-wiki-25> - https://<company-internal-wiki-27> - https://<company-internal-wiki-28> - https://<company-internal-wiki-29> - https://<company-internal-wiki-30> - https://<company-internal-wiki-31> - https://<company-internal-wiki-32> - https://<company-internal-wiki-34> - https://<company-internal-wiki-35> - https://<company-internal-wiki-36> - https://<company-internal-wiki-37> - https://<company-internal-wiki-38> - https://<company-internal-wiki-39> - https://<company-internal-wiki-40> - https://<company-internal-wiki-42> - https://<company-internal-wiki-43> - https://<company-internal-wiki-44> - https://<company-internal-wiki-45> - https://<company-internal-wiki-46> - https://<company-internal-wiki-47> - https://<company-internal-wiki-48> - https://<company-internal-wiki-49> - https://<company-internal-wiki-50> - https://<company-internal-wiki-51> - https://<company-internal-wiki-52> - https://<company-internal-wiki-53> - https://<company-internal-wiki-54> - https://<company-internal-wiki-55> - https://<company-internal-wiki-56> - https://<company-internal-wiki-57> - https://<company-internal-wiki-58> - https://<company-internal-wiki-59> - https://<company-internal-wiki-60> - https://<company-internal-wiki-61> - https://<company-internal-wiki-62> - https://<company-internal-wiki-63> - https://<company-internal-wiki-64> - https://<company-internal-wiki-65> - https://<company-internal-wiki-66> - https://<company-internal-wiki-67> - https://<company-internal-wiki-68> - https://<company-internal-wiki-69> - https://<company-internal-wiki-70> - https://<company-internal-wiki-71> - https://<company-internal-wiki-72> - https://<company-internal-wiki-73> - https://<company-internal-wiki-74> - https://<company-internal-wiki-75> - https://<company-internal-wiki-76> - https://<company-internal-wiki-77> - https://<company-internal-wiki-78> - https://<company-internal-wiki-79> - https://<company-internal-wiki-80> - https://<company-internal-wiki-81> - https://<company-internal-wiki-82> - https://<company-internal-wiki-83> - https://<company-internal-wiki-84> - https://<company-internal-wiki-85> - https://<company-internal-wiki-86> - https://<company-internal-wiki-87> - https://<company-internal-wiki-88> - https://<company-internal-wiki-89> - https://<company-internal-wiki-90> - https://<company-internal-wiki-91> - https://<company-internal-wiki-92> - https://<company-internal-wiki-93> - https://<company-internal-wiki-94> - https://<company-internal-wiki-95> - https://<company-internal-wiki-96> - https://<company-internal-wiki-97> - https://<company-internal-wiki-98> - https://<company-internal-wiki-99>'
    request-resolution-00-one-approval-approved:
      summary: When approved with one approval
      description: When one decision led to approval of the access request
      value:
        terminalState: APPROVED
        decisions:
          - userId: 00ub0oNGTSWTBKOLGLNR
            userEmail: mihir@atko.com
            userName: mihir
            decided: '2022-05-05T14:15:22Z'
            decision: APPROVE
    request-resolution-01-two-approvals-approved:
      summary: When approved with two approvals
      description: When two decisions to approve led to approval of the access request
      value:
        terminalState: APPROVED
        decisions:
          - userId: 00ub0oNGTSWTBKOLGLNR
            userEmail: mihir@atko.com
            userName: mihir
            decided: '2022-05-05T14:15:22Z'
            decision: APPROVE
          - userId: 00uc1bNGTSWTBKOLGLNR
            userEmail: alan@atko.com
            userName: alan
            decided: '2022-05-05T15:16:22Z'
            decision: DENY
    request-resolution-02-one-approval-one-denial-denied:
      summary: When denied with one approval, one denial
      description: When one decision to approval, and another to deny, led to the access request being denied
      value:
        terminalState: DENIED
        decisions:
          - userId: 00ub0oNGTSWTBKOLGLNR
            userEmail: mihir@atko.com
            userName: mihir
            decided: '2022-05-05T14:15:22Z'
            decision: APPROVE
          - userId: 00uc1bNGTSWTBKOLGLNR
            userEmail: alan@atko.com
            userName: alan
            decided: '2022-05-05T15:16:22Z'
            decision: DENY
    request-resolution-03-one-approval-one-denial-approved:
      summary: When approved with one approval, one denial
      description: When one decision to approval, and another to deny, led to the access request being approved
      value:
        terminalState: APPROVED
        decisions:
          - userId: 00ub0oNGTSWTBKOLGLNR
            userEmail: mihir@atko.com
            userName: mihir
            decided: '2022-05-05T14:15:22Z'
            decision: APPROVE
          - userId: 00uc1bNGTSWTBKOLGLNR
            userEmail: alan@atko.com
            userName: alan
            decided: '2022-05-05T15:16:22Z'
            decision: DENY
    request-resolution-04-no-decision:
      summary: When approved with no decision
      description: When no person's decision led to the access request being approved
      value:
        terminalState: APPROVED
        decisions: []
    request-resolution-05-canceled:
      summary: When canceled
      description: When the access request is canceled. Assumed that the requester canceled the request.
      value:
        terminalState: CANCELED
        decisions: []
    request-resolution-06-canceled-requested-for:
      summary: When canceled by requested for
      description: When the access request is canceled by the "requested for" user. If a request was canceled by the "request by" user, then no decision is necessary. These users can only be distinct when User A requests on behalf of User B.
      value:
        terminalState: CANCELED
        decisions:
          - userId: 00uc1bNGTSWTBKOLGLNR
            userEmail: alan@atko.com
            userName: alan
            decided: '2022-05-05T15:16:22Z'
            decision: CANCEL
    request-resolution-07-expired:
      summary: When expired
      description: When the access request is expired. Assumed that the requester expired the request.
      value:
        terminalState: EXPIRED
        decisions: []
    catalog-entries-list-empty-parent-success-v2:
      summary: Empty parent - Lists all entries in the default resource catalog
      description: Lists all entries that have an empty parent
      value:
        data:
          - id: cen33e47frfMB93gQ8g6
            name: Figma
            description: The Figma App
            requestable: false
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/catalogs/default/entries/cen8bfdir26G1QERV345
              logo:
                href: https://subdomain.okta.com/assets/img/logos/okta_admin_app.png
              submittedRequest:
                href: https://subdomain.okta.at.com/next/requests/inbox
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/catalogs/default/entries?filter=not%28parent+pr%29&limit=20
          next:
            href: https://subdomain.okta.com/governance/api/v2/catalogs/default/entries?filter=not%28parent+pr%29&limit=20&after=cen33e47frfMB93gQ8g6
          atspoke:
            href: https://subdomain.okta.at.com/next/requests/inbox/open
    catalog-entries-list-with-parent-success:
      summary: Parent - Lists all entries in the default resource catalog
      description: Lists all entries with the same parent
      value:
        data:
          - id: cen8bfdjhscRkRVje345
            name: Figma Editor
            description: The Figma App as an Editor
            requestable: true
            parent: cen33e47frfMB93gQ8g6
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/catalogs/default/entries/cen8bfdir26G1QERV345
              logo:
                href: https://subdomain.okta.com/assets/img/logos/okta_admin_app.png
              pendingRequest:
                href: https://subdomain.okta.at.com/next/requests/inbox/7
              createRequest:
                href: https://subdomain.okta.com/governance/api/v2/catalogs/default/entries/cen8bfdir26G1QERV345/requests
          - id: cendnosMu1eAct5Ns0g4
            name: Salesforce
            description: The Salesforce Admin App
            requestable: true
            parent: cendnwuzc4e2v9WRz0g4
            _links:
              self:
                href: https://subdomain.okta.com/governance/api/v2/catalogs/default/entries/cen8bfdir26G1QERV345
              logo:
                href: https://subdomain.okta.com/assets/img/logos/okta_admin_app.png
              submittedRequest:
                href: https://subdomain.okta.at.com/next/requests/inbox
              createRequest:
                href: https://subdomain.okta.com/governance/api/v2/catalogs/default/entries/cen8bfdir26G1QERV345/requests
              relatedEntity:
                href: https://subdomain.okta.com/api/v1/apps/0oab0oNGTSWTBKOLGLNR
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/catalogs/default/entries?filter=parent+eq+%22cen33e47frfMB93gQ8g6%22&limit=20
          next:
            href: https://subdomain.okta.com/governance/api/v2/catalogs/default/entries?filter=parent+eq+%22cen33e47frfMB93gQ8g6%22&limit=20&after=cen8bfdir26G1QERV345
    invalid-filter:
      description: Invalid `filter` parameter error response
      value:
        errorCode: E0000053
        errorSummary: Invalid SCIM filter
        errorLink: E0000053
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: Invalid `filter` syntax
            reason: STRING_FORMAT_INVALID
            locationType: query
            location: /filter
            domain: governance
    invalid-after:
      description: Invalid `after` parameter error response
      value:
        errorCode: E0000029
        errorSummary: Invalid paging request
        errorLink: E0000029
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: The `after` parameter isn't valid. Use links in response bodies or headers as the source of truth for paginated requests that contain an `after` parameter.
            reason: INVALID_AFTER_PARAMETER
            locationType: query
            location: /query/after
            domain: governance
    rcar-entries-list-bad-request-match-fewer-than-3-chars:
      summary: When match query parameter has fewer than 3 characters
      description: When match query parameter has fewer than 3 characters
      value:
        errorCode: E0000001
        errorSummary: 'Api validation failed: AccessRequestCatalog'
        errorLink: E0000001
        errorId: oaenikBPk01RLu4b4D6PdUlcA
        errorCauses:
          - errorSummary: 'AccessRequestCatalog - String "ab" is too short (length: 2, required minimum: 3)'
    rcar-entry-get-app:
      summary: Get a catalog entry for an application
      value:
        id: cen33e47frfMB93gQ8g6
        name: Figma
        description: The Figma App
        label: Application
        requestable: false
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/my/catalogs/default/entries/cen8bfdir26G1QERV345
          logo:
            - href: https://tc2static.oktacdn.com/fs/bcg/4/gfs1wwhrwJR4LpB5X0w6
          submittedRequest:
            href: https://subdomain.okta.at.com/next/requests/inbox
    rcar-entry-get-collection:
      summary: Get a catalog entry for a collection
      value:
        id: cen8bfdir26G1QERV345
        name: Support User Collection
        description: Collection of resources for support user
        label: Resource Collection
        requestable: false
        counts:
          resourceCounts:
            applications: 5
        _links:
          self:
            href: https://subdomain.okta.com/governance/api/v2/my/catalogs/default/entries/cen8bfdir26G1QERV345
          logo:
            - href: https://subdomain.okta.com/assets/img/logos/okta_admin_app.png
            - href: https://tc2static.oktacdn.com/fs/bcg/4/gfs1wwhrwJR4LpB5X0w6
            - href: https://tc2static.oktacdn.com/fs/bcg/3/gfs1wwhrwJR4LpB5X0w5
          submittedRequest:
            href: https://subdomain.okta.at.com/next/requests/inbox
    request-fields-get-request-submission-restricted-example:
      summary: When the entry has risk assessment that restricts any request submission
      value:
        data: []
        metadata:
          riskAssessment:
            requestSubmissionType: RESTRICTED
            riskRules:
              - name: Process and Approve Payment
                description: Account payable clerks can’t approve purchase orders or process payments.
    request-fields-get-request-submission-allowed-example:
      summary: When the entry has risk assessment that allows request submission
      value:
        data:
          - id: bb9da40d-9c1b-41c6-8016-edfd010b02d2
            type: TEXT
            label: What is the business justification?
            required: true
        metadata:
          riskAssessment:
            requestSubmissionType: ALLOWED_WITH_OVERRIDES
            riskRules:
              - name: Process and Approve Payment
                description: Account payable clerks can’t approve purchase orders or process payments.
    request-fields-get-request-submission-restricted-with-multiple-risk-rules-example:
      summary: When the entry has risk assessment with multiple risk rules
      value:
        data: []
        metadata:
          riskAssessment:
            requestSubmissionType: RESTRICTED
            riskRules:
              - name: Process and Approve Payment
                description: Account payable clerks can’t approve purchase orders or process payments.
                resourceName: Fidelity
              - name: Journal entry creation and approval
                description: Users with the ability to create journal entries should not have the authority to approve and post those same entries.
                resourceName: Netsuite
              - name: Financial reporting and transaction processing
                description: Accountant cannot process transactions or alter the general ledger.
                resourceName: Netsuite
    requesters-patch-add-members:
      summary: Add multiple members
      description: Append members to the requester set
      value:
        - op: add
          path: /members/-
          value:
            type: OKTA_USER
            externalId: 00ub0oNGTSWTBKOLGLNR
        - op: add
          path: /members/-
          value:
            type: OKTA_USER
            externalId: 00ub0oNGTSWTBKOLGLNS
        - op: add
          path: /members/-
          value:
            type: OKTA_USER
            externalId: 00ub0oNGTSWTBKOLGLNT
    requesters-patch-replace-all:
      summary: Replace all members
      description: Replace all members in the requester set with new members
      value:
        - op: replace
          path: /members
          value:
            - type: OKTA_USER
              externalId: 00ub0oNGTSWTBKOLGLNT
            - type: OKTA_USER
              externalId: 00ub0oNGTSWTBKOLGLNR
            - type: OKTA_USER
              externalId: 00ub0oNGTSWTBKOLGLNS
            - type: OKTA_USER
              externalId: 00ub0oNGTSWTBKOLGLNP
            - type: OKTA_USER
              externalId: 00ub0oNGTSWTBKOLGLNZ
    requesters-patch-remove-all:
      summary: Clear all members
      description: Removes all members from the requester set
      value:
        - op: replace
          path: /members
          value: []
    tasks-list-no-filter:
      summary: List task response with no filter
      description: A list task response with no filter
      value:
        data:
          - id: 68a38c7bc6866ac3cdee5583
            assignees:
              - externalId: 00u1a2b3c4d5e6f7g8h9
                type: OKTA_USER
            status: OPEN
            label: This is an approval task
            requestId: req42kjDgk1EubTwo0g4
            createdAt: '2019-08-24T14:15:22Z'
            updatedAt: '2019-08-24T14:15:22Z'
            type: APPROVAL
        _links:
          self:
            href: https://myorg.okta.com/governance/api/v2/tasks?limit=1
          next:
            href: https://myorg.okta.com/governance/api/v2/tasks?limit=1&after=68a38c7bc6866ac3cdee5583
    tasks-list-multiple-filters:
      summary: List task response with multiple filters
      description: A list task response with filters on status, type, requestId, createdAt, and updatedAt
      value:
        data:
          - id: 68a38c7bc6866ac3cdee5583
            assignees:
              - externalId: 00u1a2b3c4d5e6f7g8h9
                type: OKTA_USER
              - externalId: 00u9a8b7c6d5e4f3g2h1
                type: OKTA_USER
            status: OPEN
            label: This is an approval task
            requestId: req42kjDgk1EubTwo0g4
            createdAt: '2019-08-24T14:15:22Z'
            updatedAt: '2019-08-24T14:15:22Z'
            type: APPROVAL
        _links:
          self:
            href: https://myorg.okta.com/governance/api/v2/tasks?filter=status eq "OPEN" AND type eq "APPROVAL" AND requestId eq "req42kjDgk1EubTwo0g4" AND createdAt gt "2019-08-24T14:15:22Z" AND updatedAt le "2019-08-24T14:15:22Z"
          next:
            href: https://myorg.okta.com/governance/api/v2/tasks?after=68a38c7bc6866ac3cdee5583&?filter=status eq "OPEN" AND type eq "APPROVAL" AND requestId eq "req42kjDgk1EubTwo0g4" AND createdAt gt "2019-08-24T14:15:22Z" AND updatedAt le "2019-08-24T14:15:22Z"
    task-get-open-task:
      summary: OPEN task
      description: |
        OPEN tasks have a pending action from the assignees. The task remains OPEN until an assignee completes the task.
      value:
        id: 68b0ed9802df442e8b601807
        assignees:
          - externalId: 00u1a2b3c4d5e6f7g8h9
            type: OKTA_USER
          - externalId: 00u1a2b3c4d5e6f7g8h8
            type: OKTA_USER
        status: OPEN
        label: This is an approval task
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: APPROVAL
        isEscalated: false
        isDelegated: false
    task-get-completed-task:
      summary: COMPLETED task
      description: |
        COMPLETED tasks are completed by an assignee with the value field that indicates the outcome of the task
      value:
        id: 68b0ed9802df442e8b601807
        assignees:
          - externalId: 00u1a2b3c4d5e6f7g8h9
            type: OKTA_USER
          - externalId: 00u1a2b3c4d5e6f7g8h8
            type: OKTA_USER
        status: COMPLETED
        label: This is a custom task
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: TODO
        isEscalated: false
        isDelegated: false
        completedBy:
          externalId: 00u1a2b3c4d5e6f7g8h9
          type: OKTA_USER
    task-get-assigning-task:
      summary: ASSIGNING task
      description: |
        ASSIGNING tasks are in the process of being assigned
      value:
        id: 68b0ed9802df442e8b601807
        assignees: []
        status: ASSIGNING
        label: This is an approval task
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: APPROVAL
        isEscalated: false
        isDelegated: false
    task-get-locked-task:
      summary: LOCKED task
      description: |
        LOCKED tasks have a dependency on other open tasks. The task remains LOCKED until all of its dependencies are completed.
      value:
        id: 68b0ed9802df442e8b601807
        assignees: []
        status: LOCKED
        label: This is an approval task
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: APPROVAL
        isEscalated: false
        isDelegated: false
    task-get-escalated-task:
      summary: Escalated task
      description: |
        A task that was escalated to another assignee
      value:
        id: 68b0ed9802df442e8b601807
        assignees:
          - externalId: 00u1a2b3c4d5e6f7g8h9
            type: OKTA_USER
        status: COMPLETED
        label: Why is access required?
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: QUESTION
        value: For fulfilling some responsibilities
        isEscalated: true
        isDelegated: false
        originalAssigneeId: 00u9a8b7c6d5e4f3g2h1
        completedBy:
          externalId: 00u1a2b3c4d5e6f7g8h9
          type: OKTA_USER
    task-update-successful:
      summary: Task was successfully updated
      description: |
        Task assignees were successfully updated. The response includes the updated task assignee details
      value:
        id: 68b0ed9802df442e8b601807
        assignees:
          - externalId: 00u1a2b3c4d5e6f7g8h9
            type: OKTA_USER
          - externalId: 00u1a2b3c4d5e6f7g8h8
            type: OKTA_USER
        status: OPEN
        label: This is an approval task
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: APPROVAL
    task-update-partial-success:
      summary: Task update was partially successful
      description: |
        The task update was partially successful because some of the provided assignee ids were invalid. The task was updated with the valid assignee ids only.
      value:
        id: 68b0ed9802df442e8b601807
        assignees:
          - externalId: 00u1a2b3c4d5e6f7g8h6
            type: OKTA_USER
          - externalId: 00u1a2b3c4d5e6f6g8h8
            type: OKTA_USER
        status: OPEN
        label: This is an approval task
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: APPROVAL
    task-update-failed-invalid-assignee-ids:
      summary: When all assignee ids provided are invalid
      description: None of the provided assignee ids are valid
      value:
        errorCode: E0000002
        errorSummary: 'Task update failed: All provided assignee ids are invalid.'
        errorLink: E0000002
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: All provided assignee ids are invalid.
    task-update-failed-task-closed:
      summary: Task update failed because task is closed
      description: Cannot update a task that is already closed.
      value:
        errorCode: E0000002
        errorSummary: 'Task update failed: Task is already closed.'
        errorLink: E0000002
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: 'Task update failed: Task is already closed.'
    task-resolved-approval:
      summary: When approval task is APPROVED
      description: |
        Task of type APPROVAL whose resolution value is APPROVED
      value:
        id: 68b0ed9802df442e8b601807
        assignees:
          - externalId: 00u1a2b3c4d5e6f7g8h9
            type: OKTA_USER
          - externalId: 00u1a2b3c4d5e6f7g8h8
            type: OKTA_USER
        status: COMPLETED
        label: This is an approval task
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: APPROVAL
        value: APPROVED
        completedBy:
          externalId: 00u1a2b3c4d5e6f7g8h9
          type: OKTA_USER
    task-resolved-denial:
      summary: When approval task is DENIED
      description: |
        Task of type APPROVAL whose resolution value is DENIED
      value:
        id: 68b0ed9802df442e8b601807
        assignees:
          - externalId: 00u1a2b3c4d5e6f7g8h9
            type: OKTA_USER
          - externalId: 00u1a2b3c4d5e6f7g8h8
            type: OKTA_USER
        status: COMPLETED
        label: This is an approval task
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: APPROVAL
        value: DENIED
        completedBy:
          externalId: 00u1a2b3c4d5e6f7g8h9
          type: OKTA_USER
    task-resolved-question:
      summary: When question task is resolved
      description: |
        Task of type QUESTION whose resolution value is the answer to the question.
      value:
        id: 68b0ed9802df442e8b601807
        assignees:
          - externalId: 00u1a2b3c4d5e6f7g8h9
            type: OKTA_USER
          - externalId: 00u1a2b3c4d5e6f7g8h8
            type: OKTA_USER
        status: COMPLETED
        label: Why is this access request needed?
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: QUESTION
        value: For a project I'm working on
        completedBy:
          externalId: 00u1a2b3c4d5e6f7g8h9
          type: OKTA_USER
    task-resolved-custom-task:
      summary: When TODO task is resolved
      description: |
        Task of type TODO has no resolution value
      value:
        id: 68b0ed9802df442e8b601807
        assignees:
          - externalId: 00u1a2b3c4d5e6f7g8h9
            type: OKTA_USER
          - externalId: 00u1a2b3c4d5e6f7g8h8
            type: OKTA_USER
        status: COMPLETED
        label: This is a custom task
        requestId: req42kjDgk1EubTwo0g4
        createdAt: '2019-08-24T14:15:22Z'
        updatedAt: '2019-08-24T14:15:22Z'
        type: TODO
        completedBy:
          externalId: 00u1a2b3c4d5e6f7g8h9
          type: OKTA_USER
    task-resolve-failed-invalid-body:
      summary: When value provided is invalid
      description: Resolution value provided is invalid for the task type.
      value:
        errorCode: E0000002
        errorSummary: 'Task resolve failed: Approval value must be either APPROVED or DENIED.'
        errorLink: E0000002
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: Approval value must be either APPROVED or DENIED.
    task-resolve-failed-task-closed:
      summary: Task resolve failed because task is closed
      description: Cannot resolve a task that is already closed.
      value:
        errorCode: E0000002
        errorSummary: 'Task resolve failed: Task is already closed.'
        errorLink: E0000002
        errorId: oaeWCGz73hpRCG75VHP6-RRXw
        errorCauses:
          - errorSummary: 'Task resolve failed: Task is already closed.'
  responses:
    request-conditions-get-success:
      description: A successful request condition list response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-conditions-list'
          examples:
            ListRequestConditionsBasic:
              $ref: '#/components/examples/request-conditions-list-success'
            ListRequestConditionsInvalid:
              $ref: '#/components/examples/request-conditions-list-invalid-success'
    authentication-error-response:
      description: Authentication fails error response
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            InvalidApiToken:
              summary: When the API token is invalid, the response body contains an error.
              value:
                errorCode: E0000004
                errorSummary: Authentication failed.
                errorLink: E0000004
                errorId: oaeWCGz73hpRCG75VHP6-RRXw
                errorCauses: []
    authorization-error-response:
      description: Authorization fails error response
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          example:
            errorCode: E0000004
            errorSummary: You don't have permission to perform the requested action.
            errorLink: E0000004
            errorId: oaeWCGz73hpRCG75VHP6-RRXw
            errorCauses: []
    resource-not-found-response:
      description: The requested resource wasn't found error response
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          example:
            errorCode: E0000007
            errorSummary: Resource not found exception
            errorLink: E0000007
            errorId: oaeWCGz73hpRCG75VHP6-RRXw
            errorCauses: []
    rate-limit-exceeded-response:
      description: The rate limit has been exceeded error response
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          example:
            errorCode: E0000047
            errorSummary: The API call exceeded the rate limit due to too many requests.
            errorLink: E0000047
            errorId: oaeWCGz73hpRCG75VHP6-RRXw
            errorCauses: []
    unexpected-error-response:
      description: Error response when a server fault occurs due to an unexpected error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          example:
            errorCode: E0000009
            errorSummary: Internal Server Error
            errorLink: E0000009
            errorId: oaeWCGz73hpRCG75VHP6-RRXw
            errorCauses: []
    request-condition-get-success:
      description: A successful request condition get response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-condition-full'
          examples:
            GetBasicExample:
              $ref: '#/components/examples/request-condition-get-full-success'
            GetInvalidSequenceExample:
              $ref: '#/components/examples/request-condition-get-invalid-sequence-full-success'
            GetRequesterSpecifiedDurationExample:
              $ref: '#/components/examples/request-condition-get-requester-specified-access-duration-full-success'
    resource-request-conditions-get-success:
      description: A successful request condition list response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-conditions-list'
          examples:
            ListRequestConditionsBasic:
              $ref: '#/components/examples/resource-request-conditions-list-success'
            ListRequestConditionsInvalid:
              $ref: '#/components/examples/resource-request-conditions-list-invalid-success'
    request-condition-create-success:
      description: A successful response for creating request condition
      headers:
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-condition-full'
          examples:
            AppEveryone:
              $ref: '#/components/examples/request-condition-creatable-00-app-everyone-full'
            AppGroupRequesters:
              $ref: '#/components/examples/request-condition-creatable-01-app-group-requesters-full'
            AppGroupRequestersFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-02-app-group-requesters-fixed-duration-full'
            AppEveryoneFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-03-app-everyone-fixed-duration-full'
            AppGroupRequestersRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-04-app-group-requesters-requester-duration-full'
            AppEveryoneRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-05-app-everyone-requester-duration-full'
            GroupAccessEveryone:
              $ref: '#/components/examples/request-condition-creatable-06-group-access-scope-everyone-full'
            GroupAccessGroupRequesters:
              $ref: '#/components/examples/request-condition-creatable-07-group-access-scope-group-requesters-full'
            GroupAccessGroupRequestersFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-08-group-access-scope-group-requesters-fixed-duration-full'
            GroupAccessEveryoneFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-09-group-access-scope-everyone-fixed-duration-full'
            GroupAccessGroupRequestersRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-10-group-access-scope-group-requesters-requester-duration-full'
            GroupAccessEveryoneRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-11-group-access-scope-everyone-requester-duration-full'
            EntitlementBundleAccessEveryone:
              $ref: '#/components/examples/request-condition-creatable-12-entitlement-bundle-access-scope-everyone-full'
            EntitlementBundleAccessGroupRequesters:
              $ref: '#/components/examples/request-condition-creatable-13-entitlement-bundle-access-scope-group-requesters-full'
            EntitlementBundleAccessGroupRequestersFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-14-entitlement-bundle-access-scope-group-requesters-fixed-duration-full'
            EntitlementBundleAccessEveryoneFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-15-entitlement-bundle-access-scope-everyone-fixed-duration-full'
            EntitlementBundleAccessGroupRequestersRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-16-entitlement-bundle-access-scope-group-requesters-requester-duration-full'
            EntitlementBundleAccessEveryoneRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-17-entitlement-bundle-access-scope-everyone-requester-duration-full'
            TeamRequesters:
              $ref: '#/components/examples/request-condition-creatable-18-team-requesters-full'
            TeamRequestersFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-19-team-requesters-fixed-duration-full'
            TeamRequestersRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-20-team-requesters-requester-duration-full'
    request-condition-create-bad-request:
      description: An invalid request to create a request type
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            InvalidConditionId:
              $ref: '#/components/examples/invalid-condition-id'
            InvalidDurationSettings:
              $ref: '#/components/examples/invalid-duration-settings'
            InvalidRequesterSettings:
              $ref: '#/components/examples/invalid-requester-settings'
    resource-request-condition-get-success:
      description: A successful resource request condition get response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-condition-full'
          examples:
            GetBasicExample:
              $ref: '#/components/examples/request-condition-by-id-get-full-success'
            GetInactiveExample:
              $ref: '#/components/examples/request-condition-get-inactive-full-success'
            GetInvalidAccessScopeSettingsExample:
              $ref: '#/components/examples/request-condition-get-invalid-access-scope-settings-full-success'
            GetInvalidRequesterSettingsExample:
              $ref: '#/components/examples/request-condition-get-invalid-requester-settings-full-success'
            GetInvalidSequenceExample:
              $ref: '#/components/examples/request-condition-get-invalid-sequence-full-success'
            GetRequesterSpecifiedDurationExample:
              $ref: '#/components/examples/request-condition-get-requester-specified-access-duration-full-success'
            AppEveryone:
              $ref: '#/components/examples/request-condition-creatable-00-app-everyone-full'
            AppGroupRequesters:
              $ref: '#/components/examples/request-condition-creatable-01-app-group-requesters-full'
            AppGroupRequestersFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-02-app-group-requesters-fixed-duration-full'
            AppEveryoneFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-03-app-everyone-fixed-duration-full'
            AppGroupRequestersRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-04-app-group-requesters-requester-duration-full'
            AppEveryoneRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-05-app-everyone-requester-duration-full'
            GroupAccessEveryone:
              $ref: '#/components/examples/request-condition-creatable-06-group-access-scope-everyone-full'
            GroupAccessGroupRequesters:
              $ref: '#/components/examples/request-condition-creatable-07-group-access-scope-group-requesters-full'
            GroupAccessGroupRequestersFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-08-group-access-scope-group-requesters-fixed-duration-full'
            GroupAccessEveryoneFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-09-group-access-scope-everyone-fixed-duration-full'
            GroupAccessGroupRequestersRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-10-group-access-scope-group-requesters-requester-duration-full'
            GroupAccessEveryoneRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-11-group-access-scope-everyone-requester-duration-full'
            EntitlementBundleAccessEveryone:
              $ref: '#/components/examples/request-condition-creatable-12-entitlement-bundle-access-scope-everyone-full'
            EntitlementBundleAccessGroupRequesters:
              $ref: '#/components/examples/request-condition-creatable-13-entitlement-bundle-access-scope-group-requesters-full'
            EntitlementBundleAccessGroupRequestersFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-14-entitlement-bundle-access-scope-group-requesters-fixed-duration-full'
            EntitlementBundleAccessEveryoneFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-15-entitlement-bundle-access-scope-everyone-fixed-duration-full'
            EntitlementBundleAccessGroupRequestersRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-16-entitlement-bundle-access-scope-group-requesters-requester-duration-full'
            EntitlementBundleAccessEveryoneRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-17-entitlement-bundle-access-scope-everyone-requester-duration-full'
            TeamRequesters:
              $ref: '#/components/examples/request-condition-creatable-18-team-requesters-full'
            TeamRequestersFixedDuration:
              $ref: '#/components/examples/request-condition-creatable-19-team-requesters-fixed-duration-full'
            TeamRequestersRequesterDuration:
              $ref: '#/components/examples/request-condition-creatable-20-team-requesters-requester-duration-full'
    request-condition-delete-success-response:
      description: A successful request condition delete response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
    request-condition-patch-success-response:
      description: A successful request condition patch response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-condition-full'
          examples:
            patchResponseBasic:
              $ref: '#/components/examples/request-condition-by-id-get-full-success'
    request-condition-activate-success-response:
      description: A successful request condition activate response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-condition-full'
          examples:
            ActivateResponse:
              $ref: '#/components/examples/request-condition-get-active-full-success'
    request-condition-activate-conflict-response:
      description: A conflict request condition activate response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            ActivateInvalidCondition:
              summary: When attempting to activate an INVALID condition
              value:
                errorCode: E0000195
                errorSummary: 'Api validation failed due to conflict: Request Condition'
                errorLink: E0000195
                errorId: oaeWCGz73hpRCG75VHP6-YYEw
                errorCauses:
                  - errorSummary: Only Request Condition with status=INACTIVE may be activated
            ActivateActiveCondition:
              summary: When attempting to activate an ACTIVE condition
              value:
                errorCode: E0000195
                errorSummary: 'Api validation failed due to conflict: Request Condition'
                errorLink: E0000195
                errorId: oaeWCGz73hpRCG75VHP6-YYEw
                errorCauses:
                  - errorSummary: Only Request Condition with status=INACTIVE may be activated
    request-condition-deactivate-success-response:
      description: A successful request condition deactivate response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-condition-full'
          examples:
            DeactivateResponse:
              $ref: '#/components/examples/request-condition-get-inactive-full-success'
    request-condition-deactivate-conflict-response:
      description: A conflict request condition deactivate response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            DeactivateInvalidCondition:
              summary: When attempting to deactivate an invalid condition
              value:
                errorCode: E0000195
                errorSummary: 'Api validation failed due to conflict: Request Condition'
                errorLink: E0000195
                errorId: oaeWCGz73hpRCG75VHP6-YYEw
                errorCauses:
                  - errorSummary: Only Request Condition with status=ACTIVE may be deactivated
            DeactivateInactiveCondition:
              summary: When attempting to deactivate an inactive condition
              value:
                errorCode: E0000195
                errorSummary: 'Api validation failed due to conflict: Request Condition'
                errorLink: E0000195
                errorId: oaeWCGz73hpRCG75VHP6-YYEw
                errorCauses:
                  - errorSummary: Only Request Condition with status=ACTIVE may be deactivated
    request-condition-service-status-get-success:
      description: A successful request condition service status get response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-condition-service-status'
          examples:
            GetExample:
              $ref: '#/components/examples/request-condition-service-status-get-success'
    request-settings-get-success:
      description: A successful request settings get response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-settings'
          examples:
            RequestSettingsWithEntitlementsSuccessful:
              $ref: '#/components/examples/request-settings-get-bundles-enabled'
            RequestSettingsNoBundlesNoValuesSuccessful:
              $ref: '#/components/examples/request-settings-get-no-bundles-and-no-values-ramp-enabled'
            RequestSettingsNoBundlesHasValuesSuccessful:
              $ref: '#/components/examples/request-settings-get-no-bundles-has-values-ramp-enabled'
            RequestSettingsNoGovernanceEngineHasGroupsSuccessful:
              $ref: '#/components/examples/request-settings-get-no-governance-engine-has-groups'
            RequestSettingsNoGovernanceEngineNoGroupsSuccessful:
              $ref: '#/components/examples/request-settings-get-no-governance-engine-no-groups'
            RequestSettingsGroupRequesterSettingsSuccessful:
              $ref: '#/components/examples/request-settings-get-only-groups-requester-settings'
            RequestSettingsNotSupportedSuccessful:
              $ref: '#/components/examples/request-settings-get-resource-not-supported'
            RequestSettingsGroupAndEveryoneRequesterSettingsSuccessful:
              $ref: '#/components/examples/request-settings-get-groups-and-everyone-requester-settings'
            RequestSettingsRequesterSpecifiedDurationSuccessful:
              $ref: '#/components/examples/request-settings-get-resource-with-requester-specified-duration-support'
            RequestSettingsRequestOnBehalfOfEveryRequesterSupported:
              $ref: '#/components/examples/request-settings-get-resource-requester-settings-robo-enabled-everyone'
            RequestSettingsRequestOnBehalfOfDirectReportsOnlySupported:
              $ref: '#/components/examples/request-settings-get-resource-requester-settings-robo-enabled-direct-report'
            RequestSettingsRiskSettingsNotSupported:
              $ref: '#/components/examples/request-settings-get-risk-settings-not-enabled'
            RequestSettingsRiskSettingsSupportedWithNoDefault:
              $ref: '#/components/examples/request-settings-get-risk-settings-enabled'
            RequestSettingsRiskSettingsWithRequestSubmissionAllowedWithNoOverrides:
              $ref: '#/components/examples/request-settings-get-risk-settings-with-request-submission-allowed-with-no-overrides'
            RequestSettingsRiskSettingsWithRequestSubmissionAllowedWithOverrides:
              $ref: '#/components/examples/request-settings-get-risk-settings-with-request-submission-allowed-with-overrides'
            RequestSettingsRiskSettingsWithRequestSubmissionRestricted:
              $ref: '#/components/examples/request-settings-get-risk-settings-with-request-submission-restricted'
            RequestSettingsRiskSettingsWithError:
              $ref: '#/components/examples/request-settings-get-risk-settings-with-error'
            RequestSettingsValidRequestOnBehalfOfSettingsForUnsupportedResources:
              $ref: '#/components/examples/request-settings-valid-request-on-behalf-of-settings-for-unsupported-resources'
    resource-request-settings-patch-success:
      description: A successful request settings patch response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-settings'
          examples:
            RequestSettingsWithEntitlementsSuccessful:
              $ref: '#/components/examples/request-settings-get-bundles-enabled'
            RequestSettingsNoBundlesNoValuesSuccessful:
              $ref: '#/components/examples/request-settings-get-no-bundles-and-no-values-ramp-enabled'
            RequestSettingsNoBundlesHasValuesSuccessful:
              $ref: '#/components/examples/request-settings-get-no-bundles-has-values-ramp-enabled'
            RequestSettingsNoGovernanceEngineHasGroupsSuccessful:
              $ref: '#/components/examples/request-settings-get-no-governance-engine-has-groups'
            RequestSettingsNoGovernanceEngineNoGroupsSuccessful:
              $ref: '#/components/examples/request-settings-get-no-governance-engine-no-groups'
            RequestSettingsGroupRequesterSettingsSuccessful:
              $ref: '#/components/examples/request-settings-get-only-groups-requester-settings'
            RequestSettingsNotSupportedSuccessful:
              $ref: '#/components/examples/request-settings-get-resource-not-supported'
            RequestSettingsGroupAndEveryoneRequesterSettingsSuccessful:
              $ref: '#/components/examples/request-settings-get-groups-and-everyone-requester-settings'
            RequestSettingsRequesterSpecifiedDurationSuccessful:
              $ref: '#/components/examples/request-settings-get-resource-with-requester-specified-duration-support'
            RequestSettingsRequestOnBehalfOfEveryRequesterSupported:
              $ref: '#/components/examples/request-settings-get-resource-requester-settings-robo-enabled-everyone'
            RequestSettingsRequestOnBehalfOfDirectReportsOnlySupported:
              $ref: '#/components/examples/request-settings-get-resource-requester-settings-robo-enabled-direct-report'
            RequestSettingsRiskSettingsNotSupported:
              $ref: '#/components/examples/request-settings-get-risk-settings-not-enabled'
            RequestSettingsRiskSettingsSupportedWithNoStatements:
              $ref: '#/components/examples/request-settings-get-risk-settings-enabled'
            RequestSettingsRiskSettingsWithRequestSubmissionAllowedWithNoOverrides:
              $ref: '#/components/examples/request-settings-get-risk-settings-with-request-submission-allowed-with-no-overrides'
            RequestSettingsRiskSettingsWithRequestSubmissionAllowedWithOverrides:
              $ref: '#/components/examples/request-settings-get-risk-settings-with-request-submission-allowed-with-overrides'
            RequestSettingsRiskSettingsWithRequestSubmissionRestricted:
              $ref: '#/components/examples/request-settings-get-risk-settings-with-request-submission-restricted'
            RequestSettingsRiskSettingsWithError:
              $ref: '#/components/examples/request-settings-get-risk-settings-with-error'
    resource-request-settings-patch-bad-request-response:
      description: When request settings fails as bad request
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            ResourceRequestSettingsPatchMissingFields:
              $ref: '#/components/examples/resource-request-settings-patch-missing-fields'
            ResourceRequestSettingsPatchInvalidProperties:
              $ref: '#/components/examples/resource-request-settings-patch-invalid-properties'
    org-request-settings-get-success:
      description: A successful org request settings get response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/org-request-settings'
          examples:
            NotAcknowledged:
              $ref: '#/components/examples/org-request-settings-get-not-acknowledged'
            AcknowledgedAndProvisioning:
              $ref: '#/components/examples/org-request-settings-get-acknowledged-not-provisioned'
            AcknowledgedAndProvisioned:
              $ref: '#/components/examples/org-request-settings-get-acknowledged-and-provisioned'
            ProvisioningFailed:
              $ref: '#/components/examples/org-request-settings-get-provisioning-failed'
            AcknowledgedAndProvisionedWithRequestExperiences:
              $ref: '#/components/examples/org-request-settings-get-acknowledged-and-provisioned-with-request-experiences'
            AcknowledgedAndProvisionedAfterSomeTime:
              $ref: '#/components/examples/org-request-settings-get-acknowledged-and-provisioned-after-some-time'
            NotificationsEnabled:
              $ref: '#/components/examples/org-request-settings-get-notifications-enabled'
            SlackActionsEnabled:
              $ref: '#/components/examples/org-request-settings-get-slack-actions-enabled'
    org-request-settings-patch-success:
      description: A successful org request settings patch response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/org-request-settings-patchable'
          examples:
            PatchExample:
              $ref: '#/components/examples/org-request-settings-patchable-example'
            NotificationsPatchExample:
              $ref: '#/components/examples/org-request-settings-notifications-patchable-example'
            SlackActionsPatchExample:
              $ref: '#/components/examples/org-request-settings-slack-actions-patchable-example'
    request-sequences-get-success:
      description: A successful request sequences list response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-sequences-list'
          examples:
            ListRequestSequences:
              $ref: '#/components/examples/request-sequences-list-success'
    request-sequence-get-success:
      description: A successful request sequence get response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-sequence'
          examples:
            GetRequestSequence:
              $ref: '#/components/examples/request-sequence-success'
    request-sequence-delete-success-response:
      description: A successful request sequence delete response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
    requests-list-success:
      description: A successful request list response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-list'
          examples:
            SuccessWithNoFilter:
              $ref: '#/components/examples/requests-list-no-filter'
    requests-list-bad-request:
      description: An invalid request to list requests
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            EmptyAfter:
              $ref: '#/components/examples/empty-after'
            InvalidAfterFormat:
              $ref: '#/components/examples/requests-list-bad-request-invalid-after'
            AfterDoesNotExist:
              $ref: '#/components/examples/requests-list-bad-request-not-exist-after'
            InvalidSort:
              $ref: '#/components/examples/invalid-sort'
            InvalidLimit:
              $ref: '#/components/examples/invalid-limit'
    request-create-success-response:
      description: Response when create request is accepted
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-submission-full'
          examples:
            WhenEntryHasNoRequesterFieldsEmptyObject:
              $ref: '#/components/examples/request-00-create-no-fields-example-full'
            WhenEntryHasNoRequesterFieldsEmptyObjectWithClientCredentialPrincipal:
              $ref: '#/components/examples/request-00-create-no-fields-client-credential-example-full'
            WhenEntryHasNoRequesterFieldsRequesterFieldValuesEmptyArray:
              $ref: '#/components/examples/request-01-create-no-fields-empty-array-example-full'
            WhenEntryHasTextRequesterField:
              $ref: '#/components/examples/request-02-create-text-field-required-example-full'
            WhenEntryHasSelectRequesterField:
              $ref: '#/components/examples/request-03-create-select-field-required-example-full'
            WhenEntryHasMultiSelectRequesterField:
              $ref: '#/components/examples/request-04-create-multi-select-field-required-example-full'
            WhenEntryHasDatetimeRequesterField:
              $ref: '#/components/examples/request-05-create-date-time-field-required-example-full'
            WhenEntryHasAllFieldTypes:
              $ref: '#/components/examples/request-06-create-one-field-of-each-type-required-example-full'
            AdminWhenCatalogEntryInboxApprovalNoRequesterInput:
              $ref: '#/components/examples/request-00-create-no-fields-example-full'
            AdminWhenOktaResourceCustomApprovalNoRequesterInput:
              $ref: '#/components/examples/request-00-create-no-fields-example-full'
            AdminWhenOktaResourceCustomApprovalSomeRequesterInput:
              $ref: '#/components/examples/request-00-create-no-fields-example-full'
            WhenRequestHasRiskAssessment:
              $ref: '#/components/examples/request-with-risk-assessment-example'
      headers:
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
    request-create-bad-request-response:
      description: An invalid request to create a request
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            InvalidRequesterUserId:
              $ref: '#/components/examples/request-requester-user-id-invalid-example'
            FieldIdMissing:
              $ref: '#/components/examples/request-field-id-missing-example'
            FieldIdInvalid:
              $ref: '#/components/examples/request-field-id-invalid-example'
            FieldIdNotFound:
              $ref: '#/components/examples/request-field-id-not-found-example'
            FieldValueMissing:
              $ref: '#/components/examples/request-field-value-missing-example'
            FieldValueInvalid:
              $ref: '#/components/examples/request-field-value-invalid-example'
            FieldTypeMissing:
              $ref: '#/components/examples/request-field-type-missing-example'
            FieldTypeInvalid:
              $ref: '#/components/examples/request-field-type-invalid-example'
    request-create-forbidden-response:
      description: When authorization fails
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            NotAnAccessRequestAdmin:
              $ref: '#/components/examples/request-create-authenticated-user-not-admin-example'
            AuthenticatedUserNotMemberOf:
              $ref: '#/components/examples/request-create-authenticated-user-not-member-of-example'
            RequesterUserNotMemberOf:
              $ref: '#/components/examples/request-create-authenticated-user-not-member-of-example'
    request-create-conflict-response:
      description: A conflict with the request type prevents the create request operation
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            RequestTypeDisabled:
              $ref: '#/components/examples/request-request-type-disabled-example'
            RequestTypeDraft:
              $ref: '#/components/examples/request-request-type-draft-example'
            RequiredFieldMissing:
              $ref: '#/components/examples/request-required-field-missing-example'
    request-get-success:
      description: A successful get request response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-full'
          examples:
            WhenRequestIsAccepted:
              $ref: '#/components/examples/request-get-submitted'
            WhenRequestIsPending:
              $ref: '#/components/examples/request-get-pending'
            WhenRequestIsRejected:
              $ref: '#/components/examples/request-get-rejected'
            WhenRequestIsDenied:
              $ref: '#/components/examples/request-get-denied'
            WhenRequestIsApproved:
              $ref: '#/components/examples/request-get-approved'
            WhenRequestIsApprovedByDelegate:
              $ref: '#/components/examples/request-gets-approved-from-delegate'
            WhenRequestIsApprovedByEscalation:
              $ref: '#/components/examples/request-gets-approved-from-escalated-user'
            WhenRequestIsApprovedAndAccessGranted:
              $ref: '#/components/examples/request-get-approved-and-granted'
            WhenRequestIsApprovedAndAccessGrantFailed:
              $ref: '#/components/examples/request-get-approved-and-granted-failed'
            WhenRequestIsApprovedAndAccessGrantNeedsManual:
              $ref: '#/components/examples/request-get-approved-and-granted-needs-manual'
            WhenRequestWasRequestedOnBehalfOf:
              $ref: '#/components/examples/request-get-requested-on-behalf-of'
            WhenRequestCreatedWithClientCredentials:
              $ref: '#/components/examples/request-get-pending-with-client-credentials'
            WhenRequestHasRiskAssessment:
              $ref: '#/components/examples/request-with-risk-assessment-example'
    request-update-success:
      description: A successful update request response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/request-full'
          examples:
            WhenRequestStatusIsCanceled:
              $ref: '#/components/examples/request-update-status-canceled'
    request-update-failed:
      description: When the update failed because the request status is terminal, or the request body is invalid
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            RequestUpdateFailedClosedRequest:
              $ref: '#/components/examples/request-update-failed-closed-request'
    catalog-entries-list-success-v2:
      description: List of all entries in the resource catalog
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/rcar-entries-list-v2'
          examples:
            ListCatalogEntryEmptyParent:
              $ref: '#/components/examples/catalog-entries-list-empty-parent-success-v2'
            ListCatalogEntryHasParent:
              $ref: '#/components/examples/catalog-entries-list-with-parent-success'
    rcar-entries-list-bad-request:
      description: An invalid list request
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            InvalidFilter:
              $ref: '#/components/examples/invalid-filter'
            InvalidAfter:
              $ref: '#/components/examples/invalid-after'
            InvalidLimit:
              $ref: '#/components/examples/invalid-limit'
            MatchFewerThan3Chars:
              $ref: '#/components/examples/rcar-entries-list-bad-request-match-fewer-than-3-chars'
    rcar-entry-get-success:
      description: List of all entries in the resource catalog
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/rcar-entry-get'
          examples:
            GetCatalogEntryApp:
              $ref: '#/components/examples/rcar-entry-get-app'
            GetCatalogEntryCollection:
              $ref: '#/components/examples/rcar-entry-get-collection'
    list-bad-request:
      description: An invalid list request error response
      content:
        application/json:
          schema:
            x-okta-ignore-redocly-rules-for-sdk: true
            $ref: '#/components/schemas/error'
          examples:
            InvalidFilter:
              $ref: '#/components/examples/invalid-filter'
            InvalidAfter:
              $ref: '#/components/examples/invalid-after'
            InvalidSort:
              $ref: '#/components/examples/invalid-sort'
            InvalidLimit:
              $ref: '#/components/examples/invalid-limit'
    request-fields-get-success:
      description: Get requester fields for an entry
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/catalog-entry-request-fields'
          examples:
            WhenEntryHasAdminSpecifiedDurationField:
              summary: When entry has admin specified duration
              value:
                data:
                  - id: ACCESS_DURATION
                    type: DURATION
                    required: false
                    readOnly: true
                    value: P4D
            WhenEntryAllowsRequesterSpecifiedDurationField:
              summary: When entry allows requester to specify duration
              value:
                data:
                  - id: ACCESS_DURATION
                    type: DURATION
                    required: true
                    readOnly: false
                    maximumValue: P4D
            WhenEntryHasNoRequesterFieldsEmptyArray:
              summary: When entry has no fields, empty request body provided
              value:
                data: []
            WhenEntryHasTextRequesterField:
              summary: When entry has required TEXT field
              value:
                data:
                  - id: bb9da40d-9c1b-41c6-8016-edfd010b02d2
                    type: TEXT
                    label: What is the business justification?
                    required: true
            WhenEntryHasOptionalTextRequesterField:
              summary: When entry has optional TEXT field
              value:
                data:
                  - id: bb9da40d-9c1b-41c6-8016-edfd010b02d2
                    type: TEXT
                    label: What is the business justification?
                    required: false
            WhenEntryHasSelectRequesterField:
              summary: When entry has one SELECT field
              value:
                data:
                  - id: cc9da40d-9c1b-41c6-8016-edfd010b02d2
                    type: SELECT
                    label: Make your choice
                    choices:
                      - 1 select choice
                      - 2 select choice
                    required: true
            WhenEntryHasMultiSelectRequesterField:
              summary: When entry has a MULTISELECT field
              value:
                data:
                  - id: dd9da40d-9c1b-41c6-8016-edfd010b02d2
                    type: MULTISELECT
                    label: Make your choice
                    choices:
                      - 1 select choice
                      - 2 select choice
                    required: true
            WhenEntryHasDatetimeRequesterField:
              summary: When entry has a ISO_DATE field
              value:
                data:
                  - id: 1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed
                    type: ISO_DATE
                    label: Specify a date
                    required: true
            WhenEntryHasAllFieldTypes:
              summary: When entry has all field types
              value:
                data:
                  - id: bb9da40d-9c1b-41c6-8016-edfd010b02d2
                    type: TEXT
                    label: What is the business justification?
                    required: true
                  - id: cc9da40d-9c1b-41c6-8016-edfd010b02d2
                    type: SELECT
                    label: Make your choice
                    choices:
                      - 1 select choice
                      - 2 select choice
                    required: true
                  - id: dd9da40d-9c1b-41c6-8016-edfd010b02d2
                    type: MULTISELECT
                    label: Make your choice
                    choices:
                      - 1 select choice
                      - 2 select choice
                    required: true
                  - id: 1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed
                    type: ISO_DATE
                    label: Specify a date
                    required: true
            WhenEntryHasRequestOnBehalfOf:
              summary: When the entry can be requested for another requester
              value:
                data:
                  - id: OKTA_REQUESTED_FOR
                    type: OKTA_USER_ID
                    required: true
                    readOnly: false
            WhenEntryHasRiskAssessmentWithRestrictedRequestSubmission:
              $ref: '#/components/examples/request-fields-get-request-submission-restricted-example'
            WhenEntryHasRiskAssessmentWithAllowedRequestSubmission:
              $ref: '#/components/examples/request-fields-get-request-submission-allowed-example'
            WhenEntryHasRiskAssessmentWithRestrictedRequestSubmissionAndMultipleRiskRules:
              $ref: '#/components/examples/request-fields-get-request-submission-restricted-with-multiple-risk-rules-example'
    requesters-by-id-patch-success:
      description: Requester members updated successfully response.
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/requesters-full'
          examples:
            requesterWithMembers:
              summary: Add multiple members
              value:
                id: 6773596f7190a40006a1f9af
                members:
                  - type: OKTA_USER
                    externalId: 00ub0oNGTSWTBKOLGLNO
                  - type: OKTA_USER
                    externalId: 00ub0oNGTSWTBKOLGLNR
                  - type: OKTA_USER
                    externalId: 00ub0oNGTSWTBKOLGLNP
                  - type: OKTA_USER
                    externalId: 00ub0oNGTSWTBKOLGLNQ
                  - type: OKTA_USER
                    externalId: 00ub0oNGTSWTBKOLGLNS
    bad-request:
      description: A request failed validation
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
    tasks-list-success:
      description: A successful tasks list response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/task-list'
          examples:
            SuccessWithNoFilter:
              $ref: '#/components/examples/tasks-list-no-filter'
            SuccessWithMultipleFilters:
              $ref: '#/components/examples/tasks-list-multiple-filters'
    tasks-list-bad-request:
      description: An invalid request to list tasks
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            EmptyAfter:
              $ref: '#/components/examples/empty-after'
            InvalidLimit:
              $ref: '#/components/examples/invalid-limit'
    task-get-success:
      description: A successful get task response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/task-full'
          examples:
            TaskWithStatusOpen:
              $ref: '#/components/examples/task-get-open-task'
            TaskWithStatusCompleted:
              $ref: '#/components/examples/task-get-completed-task'
            TaskWithStatusAssigning:
              $ref: '#/components/examples/task-get-assigning-task'
            TaskWithStatusLocked:
              $ref: '#/components/examples/task-get-locked-task'
            TaskWithEscalation:
              $ref: '#/components/examples/task-get-escalated-task'
    task-update-success:
      description: A successful update task response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/task-full'
          examples:
            TaskUpdateSuccessfulResponse:
              $ref: '#/components/examples/task-update-successful'
            TaskUpdatePartiallySuccessfulResponse:
              $ref: '#/components/examples/task-update-partial-success'
    task-update-failed:
      description: When the task update fails due to closed task status or bad request body (e.g. invalid assignee ids)
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            TaskUpdateFailedBadAssigneesResponse:
              $ref: '#/components/examples/task-update-failed-invalid-assignee-ids'
            TaskUpdateFailedClosedTaskResponse:
              $ref: '#/components/examples/task-update-failed-task-closed'
    task-resolve-success:
      description: A successful resolve task response
      headers:
        Link:
          $ref: '#/components/headers/link'
        X-Rate-Limit-Limit:
          $ref: '#/components/headers/rate-limit-limit'
        X-Rate-Limit-Remaining:
          $ref: '#/components/headers/rate-limit-remaining'
        X-Rate-Limit-Reset:
          $ref: '#/components/headers/rate-limit-reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/task-full'
          examples:
            ApproveTaskResolution:
              $ref: '#/components/examples/task-resolved-approval'
            DenyTaskResolution:
              $ref: '#/components/examples/task-resolved-denial'
            QuestionTaskResolution:
              $ref: '#/components/examples/task-resolved-question'
            CustomTaskResolution:
              $ref: '#/components/examples/task-resolved-custom-task'
    task-resolve-failed:
      description: When the task resolution fails due to task already being closed or bad request body
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
          examples:
            TaskResolveFailedBadRequestResponse:
              $ref: '#/components/examples/task-resolve-failed-invalid-body'
            TaskResolveFailedClosedTaskResponse:
              $ref: '#/components/examples/task-resolve-failed-task-closed'